x0) 12:07:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xa, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:07:31 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='memory.stat\x00', 0x0, 0x0) ioctl$CDROMSTOP(r2, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r2) pwritev(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)="1d57a335d0a2080000007b1a2373", 0xe}, {&(0x7f0000000680)="0e58543f55e9899ae7ffb23085016452ffa88d29da1567cf73abd08c9692b6a4130668836357d11eb2aeb6d7b23e57f1f63a15d975ff0121dd8802231fad14be54426d8779493452846f9ad2bcb0449161c482f8dce209d463732dbda139b26367781ca2", 0x64}, {&(0x7f0000000340)="bf57dd203411a35d3b4695a46d1b9b2f6706ea76ba732e16a51acc7f41ac570fb8620b928671014fbe3d3d425b6211833abf76a3725c025932e8344b8ab6694c8156a87b575398fd83e1ecf4fd0193e1030f4c372dc816521a4365e4205e1f22af37ebcf16141856e071465c9bdceb505be8ba", 0x73}, {&(0x7f0000000240)="21409da4ade528c4c2ae166a6b579e70a1de99bc472520994c401643242257", 0x1f}, {&(0x7f00000003c0)="d3e6923f0c74bc1b33ff63707bcb6f486eb8be990d363a192a4c023f6ac573f85015bff2074a344504aafbdf1cf7c7b53f993a4b0410e35bdeb9c283bb9fe0952c14531b7fb56a7e584e087e6fe0cebe0976cee0a3b2b0e6f21e99b0b15664d4f18ccce774f89f07942e63bf7b32d0b51fa3823f184e92af03a37e39776c129907", 0x81}, {&(0x7f00000004c0)="5bfbe04555796ea6c032035e955adffa44fdb6523e53c8afa639f18a2992733159ee4fbccdb7f1512a70cf53903d3a4b7f46dff2532167a6b96569a906fd824df30fa284b3ee0f8702d38ce8694bbce4dd540fbabbf01a5ac97308f772e6fd1f2d036555fa81f91f0f2df1f665438b179f5f78e06d594b605c44134e58b90c2e70a1c9c7135b3a97627a5951320a536e144e379e9529ef275ffd0fd98c54be206b4de36e7aebfb933cfc13639ffe8ef307b055fc8a6da0d2ac7a6be8fd9073ae89", 0xc1}, {&(0x7f00000005c0)="996be10833b603d01139cc", 0xb}], 0x7, 0x2, 0x3) mkdirat(r2, &(0x7f0000000180)='./file1\x00', 0x3) open$dir(&(0x7f00000000c0)='./file1\x00', 0x385022a1255d8475, 0x48) truncate(&(0x7f0000000080)='./file1\x00', 0x8800000) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) read(r3, &(0x7f0000000300)=""/32, 0x20) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file1\x00'}) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10100040}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1f}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4c9e}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), 0xffffffffffffffff) accept4$unix(0xffffffffffffffff, &(0x7f0000000900), &(0x7f0000000980)=0x6e, 0x80000) 12:07:31 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000240)='./file1\x00'}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x1902, 0x2, 0x1, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:07:31 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) r3 = signalfd4(r1, &(0x7f0000000440), 0x8, 0x80000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r4, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r4) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000480)) 12:07:31 executing program 0: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) r4 = signalfd4(r1, &(0x7f0000000440), 0x8, 0x80000) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r5, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r5, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r5) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r3}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002cbd7000ffdbdf250e000000d35c7231a5c2ce9e782957bae7e3d91800018014000200"/53], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x810) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x28}}, 0x0) 12:07:31 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:07:31 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1489.404347] loop1: detected capacity change from 0 to 256 [ 1489.409499] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1489.434663] loop4: detected capacity change from 0 to 264192 [ 1489.443820] ramfs: Bad value for 'mode' [ 1489.450080] loop7: detected capacity change from 0 to 256 [ 1489.450765] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1489.452289] EXT4-fs (loop4): group descriptors corrupted! [ 1489.454066] ramfs: Bad value for 'mode' [ 1489.477153] FAT-fs (loop7): bogus number of FAT sectors [ 1489.478509] FAT-fs (loop7): Can't find a valid FAT filesystem 12:07:31 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:07:31 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:07:31 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x1902, 0x2, 0x1, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:07:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xb, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1489.607936] loop4: detected capacity change from 0 to 264192 12:07:31 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) r3 = signalfd4(r1, &(0x7f0000000440), 0x8, 0x80000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r4, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r4) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) 12:07:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f800002000400003000000000000", 0x23}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 1489.657002] ramfs: Bad value for 'mode' [ 1489.662900] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1489.665136] EXT4-fs (loop4): group descriptors corrupted! [ 1489.668912] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1489.676263] ramfs: Bad value for 'mode' 12:07:31 executing program 0: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) r3 = signalfd4(r1, &(0x7f0000000440), 0x8, 0x80000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r4, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r4) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r2) 12:07:31 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1489.712814] loop7: detected capacity change from 0 to 256 12:07:31 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x1902, 0x2, 0x1, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1489.728522] FAT-fs (loop7): bogus number of FAT sectors [ 1489.729114] FAT-fs (loop7): Can't find a valid FAT filesystem 12:07:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r0) write$P9_RREADLINK(r0, &(0x7f0000000180)={0x10, 0x17, 0xfff7, {0x7, './file1'}}, 0x10) chdir(&(0x7f0000000140)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r1) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x8800000) chdir(&(0x7f0000000040)='./file2\x00') openat(r2, &(0x7f00000000c0)='./file1\x00', 0x80000, 0x1e2) 12:07:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1489.804260] ramfs: Bad value for 'mode' [ 1489.831618] ramfs: Bad value for 'mode' [ 1489.843895] loop1: detected capacity change from 0 to 256 [ 1489.857013] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1489.939162] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:07:45 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {0x0, 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:07:45 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x8800000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x7, 0xffffffffffffff80, 0x229}) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x181000, 0x1b0) 12:07:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x26e0, 0x3dca6cca8258f394) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000001140)={0x6, 0x6, 0xffffff00, 0xffffff1a, 0x9, 0xff}) write$sndseq(r0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$unix(0x1, 0x2, 0x0) pwrite64(r1, &(0x7f0000000140)="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", 0x1000, 0x5d) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f0000000100)={0x5e}, 0x0, 0x0, 0x0, 0x0) 12:07:45 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x1902, 0x2, 0x1, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:07:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f800002000400003000000000000", 0x23}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 12:07:45 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:07:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x300, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:07:45 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) signalfd4(r1, &(0x7f0000000440), 0x8, 0x80000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r3, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r3) [ 1502.984984] loop4: detected capacity change from 0 to 264192 [ 1502.990964] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1502.992073] EXT4-fs (loop4): group descriptors corrupted! [ 1503.008219] loop1: detected capacity change from 0 to 256 [ 1503.018955] loop7: detected capacity change from 0 to 256 12:07:45 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {0x0, 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1503.031257] ramfs: Bad value for 'mode' [ 1503.032500] FAT-fs (loop7): bogus number of FAT sectors [ 1503.033081] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1503.045227] ramfs: Bad value for 'mode' [ 1503.049451] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1503.086983] loop4: detected capacity change from 0 to 264192 12:07:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r0) write$P9_RREADLINK(r0, &(0x7f0000000180)={0x10, 0x17, 0xfff7, {0x7, './file1'}}, 0x10) chdir(&(0x7f0000000140)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r1) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x8800000) chdir(&(0x7f0000000040)='./file2\x00') openat(r2, &(0x7f00000000c0)='./file1\x00', 0x80000, 0x1e2) [ 1503.102339] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1503.103440] EXT4-fs (loop4): group descriptors corrupted! 12:07:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f800002000400003000000000000", 0x23}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 1503.177178] loop7: detected capacity change from 0 to 256 [ 1503.188674] FAT-fs (loop7): bogus number of FAT sectors [ 1503.189257] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1503.190926] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:08:00 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x1902, 0x2, 0x1, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1518.810769] ramfs: Bad value for 'mode' 12:08:00 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:00 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000", 0x24}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 12:08:00 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r1, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r1) dup2(r0, r0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x6) 12:08:00 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {0x0, 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:08:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x500, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:08:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0xc040) 12:08:00 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) signalfd4(r1, &(0x7f0000000440), 0x8, 0x80000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r3, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000480)) [ 1518.824624] ramfs: Bad value for 'mode' [ 1518.836463] loop7: detected capacity change from 0 to 256 [ 1518.840946] loop4: detected capacity change from 0 to 264192 [ 1518.856140] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1518.857430] EXT4-fs (loop4): group descriptors corrupted! [ 1518.866878] FAT-fs (loop7): bogus number of FAT sectors [ 1518.867510] FAT-fs (loop7): Can't find a valid FAT filesystem 12:08:01 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) signalfd4(r1, &(0x7f0000000440), 0x8, 0x80000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r3, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) 12:08:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x600, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:08:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f800002000400003000000000000", 0x23}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 12:08:01 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:01 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x1902, 0x2, 0x1, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:01 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:08:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000", 0x24}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 1518.957412] loop1: detected capacity change from 0 to 256 12:08:01 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000046c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xfffffffe, @mcast2, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) [ 1518.976778] ramfs: Bad value for 'mode' 12:08:01 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) signalfd4(r1, &(0x7f0000000440), 0x8, 0x80000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r3, 0x5307) [ 1518.985168] loop4: detected capacity change from 0 to 264192 [ 1518.988707] ramfs: Bad value for 'mode' [ 1518.989337] FAT-fs (loop1): bogus number of FAT sectors [ 1518.989945] FAT-fs (loop1): Can't find a valid FAT filesystem 12:08:01 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1519.014390] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1519.015486] EXT4-fs (loop4): group descriptors corrupted! 12:08:01 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x1902, 0x2, 0x1, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:01 executing program 0: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) signalfd4(r1, &(0x7f0000000440), 0x8, 0x80000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r3, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) 12:08:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000", 0x24}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 12:08:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x700, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1519.102915] ramfs: Bad value for 'mode' [ 1519.110152] ramfs: Bad value for 'mode' [ 1519.111730] loop7: detected capacity change from 0 to 256 [ 1519.125748] FAT-fs (loop7): bogus number of FAT sectors [ 1519.126423] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1519.371417] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 12:08:12 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 12:08:12 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000014c0)=[{&(0x7f0000000080)='`', 0x1}], 0x0, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='squashfs\x00', 0x40000, 0x0) 12:08:12 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:12 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) signalfd4(r1, &(0x7f0000000440), 0x8, 0x80000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) 12:08:12 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1530.695061] loop4: detected capacity change from 0 to 264192 12:08:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x900, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:08:12 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=""/4096, 0x1000) mount$9p_tcp(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x24040, &(0x7f0000000040)=ANY=[]) clock_gettime(0x0, &(0x7f00000000c0)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clock_gettime(0x7, &(0x7f0000001380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001480)={0x0, 0x0}, &(0x7f00000014c0)=0xc) mount$9p_tcp(&(0x7f00000013c0), &(0x7f0000001400)='./file0\x00', &(0x7f0000001440), 0x80481, &(0x7f0000001500)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r1}}, {@uname={'uname', 0x3d, '9p\x00'}}, {@version_9p2000}, {@posixacl}, {@cache_mmap}], [{@dont_hash}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'system.posix_acl_access\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@hash}, {@dont_measure}]}}) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r2, 0x0, r2, 0x0, 0x0, r2, r2, r2, r3]) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r5, 0x0, r5, 0x0, 0x0, r5, r5, r5, r6]) setgroups(0x3, &(0x7f0000001340)=[r5, r4, r2]) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r4, 0x0, r4, 0x0, 0x0, r4, r4, r4, r7]) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000002000000", @ANYRES32=0xee01, @ANYBLOB="c0c60e07", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r0, @ANYBLOB="040005000000000008000500", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="10000200000000002000000000000000"], 0x54, 0x3) [ 1530.736315] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1530.737452] EXT4-fs (loop4): group descriptors corrupted! 12:08:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000000c0)={0x8, 0x9}) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040014}, 0x40000) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) [ 1530.752653] ramfs: Bad value for 'mode' [ 1530.761826] loop7: detected capacity change from 0 to 256 [ 1530.765100] ramfs: Bad value for 'mode' 12:08:12 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:12 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1530.800631] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:08:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000640), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f80000200040000000000000000000010000000000000001", 0x2d}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000200)={[{@fat=@nfs_nostale_ro}]}) [ 1530.932011] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1544.265413] loop7: detected capacity change from 0 to 256 12:08:26 executing program 1: ioprio_set$uid(0x3, 0x0, 0x0) clone(0x4028cd00, 0x0, 0x0, 0x0, 0x0) clone(0x40808800, &(0x7f0000000000)="00e480cb5b4a016939b19e4c8aa2d58a2bb85e911dee3d2d558fe09f3d5fd5a0c619d46352b25d037657a29f7a945b92beb1c4d5fbd4cc82b4c6026a56103563656506a7686d5fbe1be8673eb97ffac9c260157cba3e3a8c4acfdf8d441156d1a6beb95791a6eb3fd9b694ba16e68ac0231c1c54d0ff72f1cf0ecb435217f68677dbfdd1c6d500bdd8e15ec49171b6469f977ba8713fc666e745419c6575377bb8ac6be5a326e1b9e0b0a9a5b45ca0cdd28b55999c834c76bb6ad5fe50bdd78e41c36a59735f2bb920c4c2ba753e19813fb5cf4cc350af9d2ec5ab15dd3577b984d0", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b220ec79387e6f44873591e84ab11af83f907e6434496af3d6f712606e28583cc5f9cba6a916a670e1a1746b9f66b5555031d950cfab6a6081bd13664f522b2b1924") 12:08:26 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) signalfd4(r1, &(0x7f0000000440), 0x8, 0x80000) 12:08:26 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:26 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010400)="0300000004", 0x5, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:08:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xa00, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:08:26 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 12:08:26 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1544.276798] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1544.277153] loop4: detected capacity change from 0 to 264192 12:08:26 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) [ 1544.299164] ramfs: Bad value for 'mode' [ 1544.306662] ramfs: Bad value for 'mode' 12:08:26 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1544.317482] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1544.319516] EXT4-fs (loop4): group descriptors corrupted! 12:08:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 1544.326359] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1544.372668] loop7: detected capacity change from 0 to 256 12:08:26 executing program 0: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) [ 1544.389395] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1544.426055] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:08:40 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) 12:08:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 12:08:40 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r1) ftruncate(r1, 0x1f) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x4c, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 12:08:40 executing program 0: unshare(0x6010900) unshare(0x10040c80) 12:08:40 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xad3, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:08:40 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010400)="0300000004", 0x5, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:08:40 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1558.435427] loop4: detected capacity change from 0 to 264192 [ 1558.441023] loop7: detected capacity change from 0 to 256 12:08:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000100)={0x1, 0x4, 0x6}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, &(0x7f0000000000), r1, 0x0, 0x9, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(r3, &(0x7f0000000040)=0x80000001, r1, &(0x7f00000000c0)=0x1ff, 0x10001, 0x2) [ 1558.473892] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1558.475912] EXT4-fs (loop4): group descriptors corrupted! [ 1558.479563] ramfs: Bad value for 'mode' [ 1558.498616] ramfs: Bad value for 'mode' 12:08:40 executing program 1: ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000100)={0x10, 0x3f, 0x8, 0xfe, 0x9, 0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 12:08:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 12:08:40 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) 12:08:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xb00, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:08:40 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:40 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010400)="0300000004", 0x5, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:08:40 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x1, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1558.683826] loop7: detected capacity change from 0 to 256 [ 1558.689786] ramfs: Bad value for 'mode' 12:08:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000100)={0x1, 0x4, 0x6}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, &(0x7f0000000000), r1, 0x0, 0x9, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(r3, &(0x7f0000000040)=0x80000001, r1, &(0x7f00000000c0)=0x1ff, 0x10001, 0x2) [ 1558.707649] ramfs: Bad value for 'mode' [ 1558.707680] loop4: detected capacity change from 0 to 264192 12:08:40 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) [ 1558.737515] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1558.739467] EXT4-fs (loop4): group descriptors corrupted! 12:08:40 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 1558.884219] loop7: detected capacity change from 0 to 256 12:08:57 executing program 0: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) 12:08:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r0) pread64(r0, &(0x7f0000000240)=""/240, 0xf0, 0x1) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)='\"', 0x1, 0xf000}], 0x0, &(0x7f0000011e00)) 12:08:57 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, 0x0, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xd30a, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:08:57 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:57 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) socket$nl_generic(0x10, 0x3, 0x10) 12:08:57 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010400)="03000000040000", 0x7, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1575.405803] loop4: detected capacity change from 0 to 264192 12:08:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 1575.415979] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1575.418011] EXT4-fs (loop4): group descriptors corrupted! [ 1575.435588] loop1: detected capacity change from 0 to 240 [ 1575.444800] loop7: detected capacity change from 0 to 256 [ 1575.445474] ramfs: Bad value for 'mode' [ 1575.448912] ramfs: Bad value for 'mode' [ 1575.461333] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1575.467876] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:08:57 executing program 0: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bind$unix(r0, 0x0, 0xf) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 12:08:57 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) 12:08:57 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:57 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010400)="03000000040000", 0x7, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:08:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xedc0, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:08:57 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, 0x0, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:08:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 12:08:57 executing program 1: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, 0x0, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1575.598098] loop4: detected capacity change from 0 to 264192 [ 1575.603513] loop7: detected capacity change from 0 to 256 12:08:57 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) [ 1575.621735] ramfs: Bad value for 'mode' [ 1575.623318] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1575.627570] ramfs: Bad value for 'mode' [ 1575.627644] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1575.629634] EXT4-fs (loop4): group descriptors corrupted! 12:08:57 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:14 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, 0x0, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xe0ffff, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:09:14 executing program 1: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) 12:09:14 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010400)="03000000040000", 0x7, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:09:14 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, 0x0, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:14 executing program 3: ioprio_get$uid(0x3, 0x0) 12:09:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 12:09:14 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1592.718010] loop7: detected capacity change from 0 to 256 [ 1592.724774] ramfs: Bad value for 'mode' [ 1592.728390] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1592.737579] ramfs: Bad value for 'mode' 12:09:14 executing program 1: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) [ 1592.768843] loop4: detected capacity change from 0 to 264192 12:09:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) [ 1592.807616] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1592.809106] EXT4-fs (loop4): group descriptors corrupted! [ 1592.890568] loop7: detected capacity change from 0 to 256 [ 1592.926941] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1593.192457] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 12:09:27 executing program 3: ioprio_get$uid(0x0, 0x0) 12:09:27 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) 12:09:27 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:09:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:09:27 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:27 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:27 executing program 1: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) [ 1605.880951] loop4: detected capacity change from 0 to 264192 [ 1605.884582] ramfs: Bad value for 'mode' [ 1605.888532] loop7: detected capacity change from 0 to 256 [ 1605.896943] ramfs: Bad value for 'mode' [ 1605.911624] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1605.913595] EXT4-fs (loop4): group descriptors corrupted! [ 1605.921328] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:09:28 executing program 1: ioprio_get$uid(0x3, 0x0) 12:09:28 executing program 3: ioprio_get$uid(0x0, 0x0) 12:09:28 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:09:28 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:28 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:28 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:28 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:09:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) [ 1606.100694] loop4: detected capacity change from 0 to 264192 [ 1606.134436] ramfs: Bad value for 'mode' [ 1606.136293] ramfs: Bad value for 'mode' [ 1606.153024] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1606.154936] EXT4-fs (loop4): group descriptors corrupted! 12:09:28 executing program 1: ioprio_get$uid(0x0, 0x0) [ 1606.249962] loop7: detected capacity change from 0 to 256 [ 1606.266465] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:09:43 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:43 executing program 1: ioprio_get$uid(0x0, 0x0) 12:09:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 12:09:43 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x3000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:09:43 executing program 3: ioprio_get$uid(0x0, 0x0) 12:09:43 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:43 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1621.693051] loop4: detected capacity change from 0 to 264192 [ 1621.698836] ramfs: Bad value for 'mode' [ 1621.707427] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1621.708487] EXT4-fs (loop4): group descriptors corrupted! [ 1621.709863] loop7: detected capacity change from 0 to 256 [ 1621.712509] ramfs: Bad value for 'mode' [ 1621.725090] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:09:43 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x4000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:09:43 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010400)="030000000400000005", 0x9}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:09:43 executing program 1: ioprio_get$uid(0x0, 0x0) 12:09:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 12:09:43 executing program 3: ioprio_get$uid(0x3, 0x0) (fail_nth: 1) [ 1621.820266] loop4: detected capacity change from 0 to 264192 [ 1621.832739] ramfs: Bad value for 'mode' 12:09:43 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1621.845145] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1621.846294] EXT4-fs (loop4): group descriptors corrupted! [ 1621.854065] ramfs: Bad value for 'mode' 12:09:44 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:44 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1621.898833] FAULT_INJECTION: forcing a failure. 12:09:44 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010400)="030000000400000005", 0x9}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1621.898833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1621.901437] CPU: 0 PID: 11975 Comm: syz-executor.3 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1621.903051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1621.905243] Call Trace: [ 1621.905745] [ 1621.906178] dump_stack_lvl+0x8b/0xb3 [ 1621.906939] should_fail.cold+0x5/0xa [ 1621.907697] _copy_to_user+0x2e/0x150 [ 1621.908448] simple_read_from_buffer+0xcc/0x160 [ 1621.909378] proc_fail_nth_read+0x194/0x220 [ 1621.910237] ? proc_fault_inject_read+0x230/0x230 [ 1621.911187] ? security_file_permission+0xb1/0xd0 [ 1621.912137] ? proc_fault_inject_read+0x230/0x230 [ 1621.913089] vfs_read+0x1b6/0x5f0 [ 1621.913799] ksys_read+0x12d/0x250 [ 1621.914498] ? __ia32_sys_pwrite64+0x230/0x230 [ 1621.915395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1621.916413] do_syscall_64+0x3b/0x90 [ 1621.917147] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1621.918152] RIP: 0033:0x7fc1b50dd69c [ 1621.918873] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1621.922421] RSP: 002b:00007fc1b26a0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1621.923881] RAX: ffffffffffffffda RBX: 0000000000004004 RCX: 00007fc1b50dd69c [ 1621.925264] RDX: 000000000000000f RSI: 00007fc1b26a01e0 RDI: 0000000000000003 [ 1621.926634] RBP: 00007fc1b26a01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1621.928003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1621.929380] R13: 00007ffdffec444f R14: 00007fc1b26a0300 R15: 0000000000022000 [ 1621.930776] 12:09:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x5000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1621.972425] loop7: detected capacity change from 0 to 256 [ 1621.979802] ramfs: Bad value for 'mode' 12:09:44 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1621.995129] ramfs: Bad value for 'mode' 12:09:44 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1622.000757] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:09:44 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="00000000000000000000000019", 0xd, 0x4dd}, {&(0x7f0000010400)="030000000400000005", 0x9}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:09:57 executing program 3: ioprio_get$uid(0x3, 0x0) 12:09:57 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 12:09:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x6000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:09:57 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1635.393516] loop4: detected capacity change from 0 to 264192 12:09:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 12:09:57 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:09:57 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1635.408836] loop1: detected capacity change from 0 to 256 [ 1635.420183] ramfs: Bad value for 'mode' [ 1635.429898] ramfs: Bad value for 'mode' [ 1635.432955] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1635.435095] loop7: detected capacity change from 0 to 256 12:09:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x7000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1635.479907] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1635.516829] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:09:57 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:09:57 executing program 3: ioprio_get$uid(0x2, 0x0) [ 1635.538589] ramfs: Bad value for 'mode' [ 1635.541720] ramfs: Bad value for 'mode' 12:09:57 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:09:57 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1635.650102] loop4: detected capacity change from 0 to 264192 [ 1635.703060] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1635.704887] EXT4-fs (loop4): group descriptors corrupted! 12:10:14 executing program 1: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:14 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:10:14 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:14 executing program 3: ioprio_get$uid(0x3, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000080)=0x80) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioprio_set$uid(0x3, r1, 0x4007) mknod$loop(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) close(0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4]}}], 0x88, 0x801}, 0x80) ioctl$CDROMSTOP(r3, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r3) mknodat$loop(r3, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x0) setresuid(0x0, r2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x100, 0x401, 0x40, 0xa, 0xa0, 0xa0, 0x2c, 0x0, r2}, {0x2, 0xffffffff00000001, 0x100, 0x5, 0x764, 0xfffffffffffff000, 0x1, 0x3}, {0x2, 0x3f, 0x6, 0x2}, 0x4, 0x6e6bb8, 0x1, 0x0, 0x2, 0x3}, {{@in=@local, 0x4d4, 0x33}, 0x0, @in6=@private2, 0x0, 0x2, 0x3, 0x8, 0x8, 0xcd0b, 0x6}}, 0xe8) 12:10:14 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:14 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:10:14 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1652.010138] loop7: detected capacity change from 0 to 264192 12:10:14 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1652.080202] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. 12:10:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 1) [ 1652.092621] loop4: detected capacity change from 0 to 264192 [ 1652.103873] ramfs: Bad value for 'mode' 12:10:14 executing program 7: ioprio_get$uid(0x3, 0x0) (fail_nth: 1) [ 1652.127058] ramfs: Bad value for 'mode' [ 1652.129803] loop1: detected capacity change from 0 to 256 [ 1652.132948] FAULT_INJECTION: forcing a failure. [ 1652.132948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1652.134245] CPU: 1 PID: 12085 Comm: syz-executor.7 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1652.135082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1652.136221] Call Trace: [ 1652.136487] [ 1652.136715] dump_stack_lvl+0x8b/0xb3 [ 1652.137114] should_fail.cold+0x5/0xa [ 1652.137509] _copy_to_user+0x2e/0x150 [ 1652.137919] simple_read_from_buffer+0xcc/0x160 [ 1652.138398] proc_fail_nth_read+0x194/0x220 [ 1652.138848] ? proc_fault_inject_read+0x230/0x230 [ 1652.139344] ? security_file_permission+0xb1/0xd0 [ 1652.139837] ? proc_fault_inject_read+0x230/0x230 [ 1652.140333] vfs_read+0x1b6/0x5f0 [ 1652.140692] ksys_read+0x12d/0x250 [ 1652.141062] ? __ia32_sys_pwrite64+0x230/0x230 [ 1652.141528] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1652.142059] do_syscall_64+0x3b/0x90 [ 1652.142446] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1652.142966] RIP: 0033:0x7f1f8c23669c [ 1652.143341] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1652.145189] RSP: 002b:00007f1f897f9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1652.145958] RAX: ffffffffffffffda RBX: 0000000000004004 RCX: 00007f1f8c23669c [ 1652.146672] RDX: 000000000000000f RSI: 00007f1f897f91e0 RDI: 0000000000000003 [ 1652.147383] RBP: 00007f1f897f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1652.147418] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1652.148094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1652.150761] EXT4-fs (loop4): group descriptors corrupted! [ 1652.150781] R13: 00007fff6b41526f R14: 00007f1f897f9300 R15: 0000000000022000 [ 1652.150805] 12:10:14 executing program 7: ioprio_get$uid(0x3, 0x0) [ 1652.245964] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1652.277613] FAULT_INJECTION: forcing a failure. [ 1652.277613] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.279041] CPU: 1 PID: 12091 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1652.279965] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1652.281201] Call Trace: [ 1652.281484] [ 1652.281740] dump_stack_lvl+0x8b/0xb3 [ 1652.282169] should_fail.cold+0x5/0xa [ 1652.282586] ? getname_flags.part.0+0x50/0x4f0 [ 1652.283104] should_failslab+0x5/0x10 [ 1652.283513] kmem_cache_alloc+0x5b/0x480 [ 1652.283966] getname_flags.part.0+0x50/0x4f0 [ 1652.284465] getname+0x8e/0xd0 [ 1652.284830] do_sys_openat2+0xf5/0x4d0 [ 1652.285262] ? build_open_flags+0x6f0/0x6f0 [ 1652.285754] ? lock_is_held_type+0xd7/0x130 [ 1652.286241] __x64_sys_openat+0x13f/0x1f0 [ 1652.286720] ? __x64_sys_open+0x1c0/0x1c0 [ 1652.287175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1652.287743] do_syscall_64+0x3b/0x90 [ 1652.288149] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1652.288719] RIP: 0033:0x7f47de354b19 [ 1652.289129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1652.291150] RSP: 002b:00007f47db8a9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1652.291992] RAX: ffffffffffffffda RBX: 00007f47de468020 RCX: 00007f47de354b19 [ 1652.292789] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1652.293576] RBP: 00007f47db8a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1652.294387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1652.295180] R13: 00007fffa187286f R14: 00007f47db8a9300 R15: 0000000000022000 [ 1652.295981] 12:10:14 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x9000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:10:14 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1652.445009] ramfs: Bad value for 'mode' [ 1652.448860] ramfs: Bad value for 'mode' 12:10:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xa000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:10:31 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:31 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:31 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:10:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 2) 12:10:31 executing program 3: ioprio_get$uid(0x3, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r1 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000180)={0x3, 0xdec, 0x43, &(0x7f0000000100)=""/67}) 12:10:31 executing program 7: ioprio_get$uid(0x2, 0x0) 12:10:31 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1669.749758] loop1: detected capacity change from 0 to 256 12:10:31 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1669.772633] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1669.781388] FAULT_INJECTION: forcing a failure. [ 1669.781388] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.782811] CPU: 0 PID: 12114 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1669.783868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1669.785073] Call Trace: [ 1669.785404] [ 1669.785690] dump_stack_lvl+0x8b/0xb3 [ 1669.786202] should_fail.cold+0x5/0xa [ 1669.786695] ? create_object.isra.0+0x3a/0xa20 [ 1669.787289] should_failslab+0x5/0x10 [ 1669.787772] kmem_cache_alloc+0x5b/0x480 [ 1669.788299] create_object.isra.0+0x3a/0xa20 [ 1669.788859] ? kasan_unpoison+0x23/0x50 [ 1669.789375] kmem_cache_alloc+0x239/0x480 [ 1669.789909] getname_flags.part.0+0x50/0x4f0 [ 1669.790372] getname+0x8e/0xd0 [ 1669.790723] do_sys_openat2+0xf5/0x4d0 [ 1669.791141] ? build_open_flags+0x6f0/0x6f0 [ 1669.791603] ? lock_is_held_type+0xd7/0x130 [ 1669.792069] __x64_sys_openat+0x13f/0x1f0 [ 1669.792512] ? __x64_sys_open+0x1c0/0x1c0 [ 1669.792967] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1669.793525] do_syscall_64+0x3b/0x90 [ 1669.793936] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1669.794441] RIP: 0033:0x7f47de354b19 [ 1669.794841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.796790] RSP: 002b:00007f47db8ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1669.797594] RAX: ffffffffffffffda RBX: 00007f47de467f60 RCX: 00007f47de354b19 [ 1669.798290] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1669.798975] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.799668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1669.800354] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1669.801053] [ 1669.802095] loop4: detected capacity change from 0 to 264192 [ 1669.814966] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1669.816015] EXT4-fs (loop4): group descriptors corrupted! 12:10:31 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1669.834318] ramfs: Bad value for 'mode' 12:10:32 executing program 7: ioprio_get$uid(0x3, 0x0) setuid(0xee00) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0xee00) 12:10:32 executing program 3: ioprio_get$uid(0x3, 0xee00) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@private=0xa010100, @in6=@private0, 0x4e21, 0x0, 0x4e20, 0x1f, 0xa, 0x0, 0x80, 0x3b, 0x0, r1}, {0x1, 0x558, 0xad49, 0xffffffffffffffe1, 0x7, 0x6, 0x0, 0x8}, {0xfffffffffffffff8, 0x1bf, 0x1000, 0x3ff}, 0x6, 0x6e6bb6, 0x2, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d2, 0x33}, 0x2, @in6=@loopback, 0x3501, 0x1, 0x1, 0x8, 0x2, 0x9, 0x1000}}, 0xe8) [ 1669.867871] ramfs: Bad value for 'mode' 12:10:32 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:10:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 3) [ 1669.918272] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1669.919867] loop4: detected capacity change from 0 to 264192 [ 1669.936505] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1669.937518] EXT4-fs (loop4): group descriptors corrupted! 12:10:32 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1669.984392] loop1: detected capacity change from 0 to 256 [ 1669.996459] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1670.015835] FAULT_INJECTION: forcing a failure. [ 1670.015835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1670.018256] CPU: 1 PID: 12144 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1670.019920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1670.022247] Call Trace: [ 1670.022775] [ 1670.023229] dump_stack_lvl+0x8b/0xb3 [ 1670.024047] should_fail.cold+0x5/0xa [ 1670.024874] strncpy_from_user+0x34/0x3e0 [ 1670.025772] getname_flags.part.0+0x95/0x4f0 [ 1670.026729] getname+0x8e/0xd0 [ 1670.027414] do_sys_openat2+0xf5/0x4d0 [ 1670.028192] ? build_open_flags+0x6f0/0x6f0 [ 1670.029061] ? lock_is_held_type+0xd7/0x130 [ 1670.029956] __x64_sys_openat+0x13f/0x1f0 [ 1670.030807] ? __x64_sys_open+0x1c0/0x1c0 [ 1670.031651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1670.032685] do_syscall_64+0x3b/0x90 [ 1670.033440] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1670.034479] RIP: 0033:0x7f47de354b19 [ 1670.035227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1670.038882] RSP: 002b:00007f47db8ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1670.040373] RAX: ffffffffffffffda RBX: 00007f47de467f60 RCX: 00007f47de354b19 [ 1670.041818] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1670.043550] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1670.045225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.046931] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1670.048651] [ 1684.088799] loop1: detected capacity change from 0 to 256 12:10:46 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 4) 12:10:46 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xb000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:10:46 executing program 7: ioprio_get$uid(0x3, 0x0) stat(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xceb, 0x3, &(0x7f0000001240)=[{&(0x7f0000000080)="92787822749ec68451f00956719ded65b8df2b4c2ef8173e6e2437600eb81dbb36f5cb89957f63397e65a20aeb334432bae5372851f0c6aec1174723f312db87c0bf2167307248748f9822ba5c52e12fcfd893ccc2c700637511bedf32eeece820aa0fd32f6e0e5afe13844c737ce309c4b0de10c210fa81887642f4c94861dc53ad2eaee3c9be8f366661a608920fcd6d224b352397fb92bf4258b86cd92452383066897274686245e76bf384979bee", 0xb0, 0x7}, {&(0x7f0000000140)="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", 0x1000, 0x3}, {&(0x7f0000001140)="b3b7271b24f2cf7650b891c65b70408a5df3298502f9f2d494c693aa404641cbe6f47a5a99900d044b4e48f5c430c4ed505609226ae66bf57e4713df15a7d3c731dd2e8e46f3c1c7ede7b1da06c26c894d474a583c8960aa8220da76c85d978e2c4d29884b2dd28d9ff8310208fb8c3c6b402a62daea06a43ea8db1c3df9e1f6a2b785a59147ebe7b812267d3e7159082fba8c58a5c1ad796816589672f99711cb823063451b7f031ed11e8ef128d4056dc2eadb5151829596e2e5c012d8216d48960409d1a1e034e1a3f86c8549b4b58c6daf86727b61a1de863b83e96b258935", 0xe1, 0xeaf2}], 0x39, &(0x7f00000012c0)={[{'!!/'}, {}, {'!%*'}, {'$,*\x96'}], [{@fsmagic={'fsmagic', 0x3d, 0xbc}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, '$/'}}, {@fowner_lt={'fowner<', r0}}, {@obj_user={'obj_user', 0x3d, '\\(-,!'}}]}) [ 1684.119510] loop7: detected capacity change from 0 to 234 [ 1684.120553] loop4: detected capacity change from 0 to 264192 [ 1684.127326] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1684.130543] FAULT_INJECTION: forcing a failure. [ 1684.130543] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.131678] CPU: 0 PID: 12156 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1684.132481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1684.133691] Call Trace: [ 1684.133967] [ 1684.134198] dump_stack_lvl+0x8b/0xb3 [ 1684.134426] ramfs: Bad value for 'mode' [ 1684.134590] should_fail.cold+0x5/0xa [ 1684.135810] ? __alloc_file+0x21/0x240 [ 1684.136209] should_failslab+0x5/0x10 [ 1684.136584] kmem_cache_alloc+0x5b/0x480 [ 1684.136986] __alloc_file+0x21/0x240 [ 1684.137390] alloc_empty_file+0x6d/0x170 [ 1684.137829] path_openat+0xe1/0x28a0 [ 1684.138264] ? path_lookupat+0x850/0x850 [ 1684.138694] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1684.139255] ? lock_is_held_type+0xd7/0x130 [ 1684.139691] do_filp_open+0x1aa/0x400 [ 1684.140068] ? may_open_dev+0xf0/0xf0 [ 1684.140464] ? lock_release+0x3b2/0x6f0 [ 1684.140870] ? alloc_fd+0x2f0/0x670 [ 1684.141249] ? lock_downgrade+0x6d0/0x6d0 [ 1684.141666] ? rwlock_bug.part.0+0x90/0x90 [ 1684.142105] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1684.142686] ? _find_next_bit+0x1e5/0x260 [ 1684.143139] ? _raw_spin_unlock+0x24/0x40 [ 1684.143579] ? alloc_fd+0x2f0/0x670 [ 1684.143982] do_sys_openat2+0x16d/0x4d0 [ 1684.144405] ? build_open_flags+0x6f0/0x6f0 [ 1684.144848] ? lock_is_held_type+0xd7/0x130 [ 1684.145320] __x64_sys_openat+0x13f/0x1f0 [ 1684.145753] ? __x64_sys_open+0x1c0/0x1c0 [ 1684.146219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1684.146793] do_syscall_64+0x3b/0x90 [ 1684.146827] ramfs: Bad value for 'mode' [ 1684.147219] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1684.147234] RIP: 0033:0x7f47de354b19 [ 1684.147244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.147257] RSP: 002b:00007f47db8ca188 EFLAGS: 00000246 [ 1684.150594] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1684.151068] ORIG_RAX: 0000000000000101 [ 1684.151076] RAX: ffffffffffffffda RBX: 00007f47de467f60 RCX: 00007f47de354b19 [ 1684.152242] EXT4-fs (loop4): group descriptors corrupted! [ 1684.153198] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1684.153208] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1684.153217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1684.153225] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1684.153246] 12:10:46 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:10:46 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:46 executing program 3: ioprio_get$uid(0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000005d40)={'syztnl0\x00', &(0x7f0000005cc0)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x18, 0x7, 0x9, @loopback, @mcast2, 0x80, 0x1, 0x8, 0x5f}}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005d80)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x401, 0x4e22, 0x0, 0x2, 0xa0, 0x0, 0x3b, r0, r1}, {0x6, 0x9, 0x0, 0xffffffff, 0x8, 0x9, 0x8}, {0x7, 0xfffffffffffffffa, 0x5, 0xd7}, 0x9, 0x6e6bbd, 0x2, 0x0, 0x1, 0x3}, {{@in6=@local, 0x4d5, 0x2b}, 0xa, @in=@multicast2, 0x34ff, 0x3, 0x1, 0xc7, 0x7f, 0x7, 0x1ff}}, 0xe8) 12:10:46 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, 0x0, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:46 executing program 7: ioprio_get$uid(0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x4e20, 0xa3, 0x4e21, 0x4, 0x2, 0x20, 0xc0, 0x2f, 0x0, r0}, {0x10000, 0x2, 0x400, 0x7, 0xfff, 0x2, 0x0, 0x4}, {0xa723, 0x10001, 0xb9}, 0x4000800, 0x6e6bb6, 0x0, 0x0, 0x1, 0x1}, {{@in6=@remote, 0x4d3, 0x33}, 0x2, @in6=@mcast2, 0x3503, 0x0, 0x2, 0x0, 0xd76, 0x1, 0x1}}, 0xe8) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@md5={0x1, "68cfa22b96d5c4e21814cb7576b8f147"}, 0x11, 0x1) 12:10:46 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:10:46 executing program 3: ioprio_get$uid(0x3, 0xffffffffffffffff) 12:10:46 executing program 7: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x2300, 0x0) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x5, r0, 0xffffffffffffffff) ioprio_get$uid(0x3, 0x0) 12:10:46 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, 0x0, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:46 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:10:46 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 5) [ 1684.338772] loop4: detected capacity change from 0 to 264192 [ 1684.348619] ramfs: Bad value for 'mode' [ 1684.359697] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1684.360662] EXT4-fs (loop4): group descriptors corrupted! [ 1684.371683] ramfs: Bad value for 'mode' [ 1684.389830] FAULT_INJECTION: forcing a failure. [ 1684.389830] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.390966] CPU: 0 PID: 12209 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1684.391765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1684.392974] Call Trace: [ 1684.393245] [ 1684.393475] dump_stack_lvl+0x8b/0xb3 [ 1684.393864] should_fail.cold+0x5/0xa [ 1684.394249] ? create_object.isra.0+0x3a/0xa20 [ 1684.394704] should_failslab+0x5/0x10 [ 1684.395115] kmem_cache_alloc+0x5b/0x480 [ 1684.395527] create_object.isra.0+0x3a/0xa20 [ 1684.395958] ? kasan_unpoison+0x23/0x50 [ 1684.396358] kmem_cache_alloc+0x239/0x480 [ 1684.396769] __alloc_file+0x21/0x240 [ 1684.397142] alloc_empty_file+0x6d/0x170 [ 1684.397550] path_openat+0xe1/0x28a0 [ 1684.397968] ? path_lookupat+0x850/0x850 [ 1684.398384] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1684.398901] ? lock_is_held_type+0xd7/0x130 [ 1684.399326] do_filp_open+0x1aa/0x400 [ 1684.399704] ? may_open_dev+0xf0/0xf0 [ 1684.400080] ? lock_release+0x3b2/0x6f0 [ 1684.400474] ? alloc_fd+0x2f0/0x670 [ 1684.400870] ? lock_downgrade+0x6d0/0x6d0 [ 1684.401305] ? rwlock_bug.part.0+0x90/0x90 [ 1684.401744] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1684.402314] ? _find_next_bit+0x1e5/0x260 [ 1684.402763] ? _raw_spin_unlock+0x24/0x40 [ 1684.403189] ? alloc_fd+0x2f0/0x670 [ 1684.403594] do_sys_openat2+0x16d/0x4d0 [ 1684.404001] ? build_open_flags+0x6f0/0x6f0 [ 1684.404444] ? lock_is_held_type+0xd7/0x130 [ 1684.404889] __x64_sys_openat+0x13f/0x1f0 [ 1684.405318] ? __x64_sys_open+0x1c0/0x1c0 [ 1684.405747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1684.406287] do_syscall_64+0x3b/0x90 [ 1684.406690] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1684.407261] RIP: 0033:0x7f47de354b19 [ 1684.407643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.409567] RSP: 002b:00007f47db8ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1684.410363] RAX: ffffffffffffffda RBX: 00007f47de467f60 RCX: 00007f47de354b19 [ 1684.411160] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1684.411946] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1684.412728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1684.413507] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1684.414307] 12:10:59 executing program 7: ioprio_get$uid(0x3, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', r0, 0xffffffffffffffff) 12:10:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8cffffff, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:10:59 executing program 3: r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r1, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x194, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6df3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdad}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4814}, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = accept4$bt_l2cap(r1, &(0x7f0000000400), &(0x7f0000000440)=0xe, 0x80000) poll(&(0x7f00000004c0)=[{r0, 0x240}, {r2, 0x8000}, {r0, 0x2001}, {r3, 0x100}, {r4, 0x900c}], 0x5, 0x7fffffff) ioprio_get$uid(0x3, 0x0) 12:10:59 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:59 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:59 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0300000004", 0x5, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:10:59 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, 0x0, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 6) [ 1697.573076] ramfs: Bad value for 'mode' [ 1697.585918] ramfs: Bad value for 'mode' [ 1697.611886] loop1: detected capacity change from 0 to 256 [ 1697.623218] loop4: detected capacity change from 0 to 264192 [ 1697.635523] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1697.636533] EXT4-fs (loop4): group descriptors corrupted! [ 1697.639625] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1697.671861] FAULT_INJECTION: forcing a failure. [ 1697.671861] name failslab, interval 1, probability 0, space 0, times 0 [ 1697.673098] CPU: 1 PID: 12239 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1697.673954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1697.675133] Call Trace: [ 1697.675404] [ 1697.675639] dump_stack_lvl+0x8b/0xb3 [ 1697.676044] should_fail.cold+0x5/0xa [ 1697.676441] ? create_object.isra.0+0x3a/0xa20 [ 1697.676916] should_failslab+0x5/0x10 [ 1697.677306] kmem_cache_alloc+0x5b/0x480 [ 1697.677745] create_object.isra.0+0x3a/0xa20 [ 1697.678212] ? kasan_unpoison+0x23/0x50 [ 1697.678648] kmem_cache_alloc+0x239/0x480 [ 1697.679079] __alloc_file+0x21/0x240 [ 1697.679469] alloc_empty_file+0x6d/0x170 [ 1697.679893] path_openat+0xe1/0x28a0 [ 1697.680290] ? path_lookupat+0x850/0x850 [ 1697.680724] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1697.681297] ? lock_is_held_type+0xd7/0x130 [ 1697.681767] do_filp_open+0x1aa/0x400 [ 1697.682178] ? may_open_dev+0xf0/0xf0 [ 1697.682603] ? lock_release+0x3b2/0x6f0 [ 1697.683028] ? alloc_fd+0x2f0/0x670 [ 1697.683414] ? lock_downgrade+0x6d0/0x6d0 [ 1697.683860] ? rwlock_bug.part.0+0x90/0x90 [ 1697.684314] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1697.684915] ? _find_next_bit+0x1e5/0x260 [ 1697.685369] ? _raw_spin_unlock+0x24/0x40 [ 1697.685814] ? alloc_fd+0x2f0/0x670 [ 1697.686211] do_sys_openat2+0x16d/0x4d0 [ 1697.686634] ? build_open_flags+0x6f0/0x6f0 [ 1697.687098] ? lock_is_held_type+0xd7/0x130 [ 1697.687560] __x64_sys_openat+0x13f/0x1f0 [ 1697.688004] ? __x64_sys_open+0x1c0/0x1c0 [ 1697.688450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1697.688999] do_syscall_64+0x3b/0x90 [ 1697.689399] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1697.689943] RIP: 0033:0x7f47de354b19 [ 1697.690333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1697.692298] RSP: 002b:00007f47db8ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1697.693121] RAX: ffffffffffffffda RBX: 00007f47de467f60 RCX: 00007f47de354b19 [ 1697.693880] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1697.694641] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1697.695400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1697.696158] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1697.696929] 12:10:59 executing program 7: ioprio_get$uid(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2400400, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@uid_eq={'uid', 0x3d, r2}}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x65, 0x31, 0x52, 0x65, 0x35, 0x38, 0x36], 0x2d, [0x66, 0x34, 0x66, 0x32], 0x2d, [0x31, 0x61, 0x30, 0x63], 0x2d, [0x31, 0x37, 0x64, 0x61], 0x2d, [0x61, 0x31, 0x37, 0x34, 0x39, 0x37, 0x33, 0x33]}}}, {@uid_gt={'uid>', 0xee00}}, {@appraise_type}, {@obj_role={'obj_role', 0x3d, 't\xe3\xcc\f\x95r\x7f\x98L'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}}) 12:10:59 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:59 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:59 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0300000004", 0x5, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:10:59 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xc0ed0000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:10:59 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1697.767807] loop4: detected capacity change from 0 to 264192 [ 1697.780272] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1697.781351] EXT4-fs (loop4): group descriptors corrupted! 12:10:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 7) [ 1697.803964] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:10:59 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:10:59 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0300000004", 0x5, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1697.845963] ramfs: Bad value for 'mode' 12:11:00 executing program 3: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x7, 0x1, 0x3, 0x3f, 0x5}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000004400)=[{{&(0x7f00000001c0)=@can={0x1d, r1}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)="44196b7cf350255ae0caf229e54d0a2bf1e5cb47", 0x14}], 0x1}}], 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg(r2, &(0x7f0000004400)=[{{&(0x7f00000001c0)=@in6={0xa, 0x4e22, 0x400, @mcast2, 0xffff}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000340)="44196b7cf350255ae0caf229e54d0a2bf1e5cb47", 0x14}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0xfd, 0x0, 0x2d, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x40, 0x7ff, 0x8}}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg(r6, &(0x7f0000004400)=[{{&(0x7f00000001c0)=@can={0x1d, r8}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)="44196b7cf350255ae0caf229e54d0a2bf1e5cb47", 0x14}], 0x1}}], 0x1, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg(r9, &(0x7f0000004400)=[{{&(0x7f00000001c0)=@can={0x1d, r11}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)="44196b7cf350255ae0caf229e54d0a2bf1e5cb47", 0x14}], 0x1}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40004230}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec010000", @ANYRES16=0x0, @ANYBLOB="00032abd7000fddbdf25150000008400018008000100", @ANYRES32=0x0, @ANYBLOB="140002006e657470636930000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f7674693000000000000000001400020076657468315f74be057635b1aafaef0008000100", @ANYRES32=0x0, @ANYBLOB="1400020064756d6d79300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030003000000080003000300000008000300000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="1400020076657468310000000000000000000000080003000000000008000100", @ANYRES32=r4, @ANYBLOB="18000180140002007663616e3000000000000000000000005800018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="1400020073797a6b616c6c6572310000000000001400020076657468315f6d61637674617000000014000200766c616e30000000000000000000000008000300030000005800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r11, @ANYBLOB="14000200626f6e645f736c6176655f310000000008000300020000001400020069703665727370616e300000000000001800018014000200726f73653000"/72], 0x1ec}, 0x1, 0x0, 0x0, 0x20040080}, 0x40000) ioprio_get$uid(0x3, 0x0) [ 1697.873751] loop4: detected capacity change from 0 to 264192 [ 1697.874065] ramfs: Bad value for 'mode' [ 1697.888821] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1697.889850] EXT4-fs (loop4): group descriptors corrupted! [ 1697.929721] loop1: detected capacity change from 0 to 256 [ 1697.956125] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1697.970569] FAULT_INJECTION: forcing a failure. [ 1697.970569] name failslab, interval 1, probability 0, space 0, times 0 [ 1697.971838] CPU: 1 PID: 12278 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1697.972695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1697.973859] Call Trace: [ 1697.974124] [ 1697.974396] dump_stack_lvl+0x8b/0xb3 [ 1697.974808] should_fail.cold+0x5/0xa [ 1697.975207] ? create_object.isra.0+0x3a/0xa20 [ 1697.975691] should_failslab+0x5/0x10 [ 1697.976083] kmem_cache_alloc+0x5b/0x480 [ 1697.976508] create_object.isra.0+0x3a/0xa20 [ 1697.976972] ? kasan_unpoison+0x23/0x50 [ 1697.977391] kmem_cache_alloc+0x239/0x480 [ 1697.977829] security_file_alloc+0x34/0x170 [ 1697.978293] __alloc_file+0xb6/0x240 [ 1697.978696] alloc_empty_file+0x6d/0x170 [ 1697.979127] path_openat+0xe1/0x28a0 [ 1697.979528] ? path_lookupat+0x850/0x850 [ 1697.979964] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1697.980520] ? lock_is_held_type+0xd7/0x130 [ 1697.980974] do_filp_open+0x1aa/0x400 [ 1697.981377] ? may_open_dev+0xf0/0xf0 [ 1697.981782] ? lock_release+0x3b2/0x6f0 [ 1697.982198] ? alloc_fd+0x2f0/0x670 [ 1697.982591] ? lock_downgrade+0x6d0/0x6d0 [ 1697.983025] ? rwlock_bug.part.0+0x90/0x90 [ 1697.983481] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1697.984068] ? _find_next_bit+0x1e5/0x260 [ 1697.984521] ? _raw_spin_unlock+0x24/0x40 [ 1697.984969] ? alloc_fd+0x2f0/0x670 [ 1697.985368] do_sys_openat2+0x16d/0x4d0 [ 1697.985800] ? build_open_flags+0x6f0/0x6f0 [ 1697.986265] ? lock_is_held_type+0xd7/0x130 [ 1697.986726] __x64_sys_openat+0x13f/0x1f0 [ 1697.987172] ? __x64_sys_open+0x1c0/0x1c0 [ 1697.987624] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1697.988182] do_syscall_64+0x3b/0x90 [ 1697.988595] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1697.989143] RIP: 0033:0x7f47de354b19 [ 1697.989543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1697.991529] RSP: 002b:00007f47db8ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1697.992344] RAX: ffffffffffffffda RBX: 00007f47de467f60 RCX: 00007f47de354b19 [ 1697.993106] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1697.993865] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1697.994652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1697.995416] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1697.996190] [ 1698.045401] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:11:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 8) 12:11:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xd30a0000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:11:12 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="03000000040000", 0x7, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:11:12 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:11:12 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1710.723478] ramfs: Bad value for 'mode' [ 1710.726855] ramfs: Bad value for 'mode' 12:11:12 executing program 7: syz_io_uring_setup(0x8b, &(0x7f0000000000)={0x0, 0x7e9b, 0x4, 0x1, 0xea}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r1) r2 = syz_io_uring_setup(0x1, &(0x7f0000000000), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x4849c1}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000a40)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r1, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)=@tipc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000180)=""/203, 0xcb}, {&(0x7f0000000280)=""/186, 0xba}, {&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000440)=""/179, 0xb3}, {&(0x7f0000000500)=""/70, 0x46}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000780)=""/197, 0xc5}], 0x8, &(0x7f0000000900)=""/197, 0xc5}, 0x0, 0x10002, 0x1, {0x0, r5}}, 0x5) ioprio_get$uid(0x3, 0x0) 12:11:12 executing program 3: ioprio_get$uid(0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) lsetxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680)=@v2={0x2000000, [{0x6, 0x2}, {0x413f0fa6, 0xe0c}]}, 0x14, 0x2) quotactl(0x1ff, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000540)="eb5260c40b707c2c93013db3aaed721d12159ae99896c7562551d3fe8781f3b40d46ff28f736050fb87732b457e607ddf373369e248003aa54a7db0f6c9378c78a0c1527708968ba96aa2b63d0080851972371d30c8d18631df993e5964aa931d04dd12f485abf3bd031101170c19eb08c9140eb66a741eaf1182840fd7d65706a2dce") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) getresuid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1020809, &(0x7f00000002c0)={'trans=xen,', {[{@access_uid={'access', 0x3d, 0xee01}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@noextend}, {@cache_loose}, {@version_u}, {@afid={'afid', 0x3d, 0x200}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@debug={'debug', 0x3d, 0x7}}, {@aname={'aname', 0x3d, '/%,]@'}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsname={'fsname', 0x3d, '*'}}]}}) 12:11:12 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1710.746143] loop4: detected capacity change from 0 to 264192 [ 1710.765126] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1710.766239] EXT4-fs (loop4): group descriptors corrupted! 12:11:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xf6ffffff, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1710.792464] loop1: detected capacity change from 0 to 256 12:11:12 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="03000000040000", 0x7, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1710.826481] ramfs: Bad value for 'mode' [ 1710.834572] ramfs: Bad value for 'mode' [ 1710.838427] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1710.853013] loop4: detected capacity change from 0 to 264192 [ 1710.857937] FAULT_INJECTION: forcing a failure. [ 1710.857937] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.860620] CPU: 0 PID: 12304 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1710.862342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1710.864697] Call Trace: [ 1710.865227] [ 1710.865371] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1710.865689] dump_stack_lvl+0x8b/0xb3 [ 1710.866725] EXT4-fs (loop4): group descriptors corrupted! [ 1710.867460] should_fail.cold+0x5/0xa [ 1710.868810] ? __d_alloc+0x2a/0x990 [ 1710.869580] should_failslab+0x5/0x10 [ 1710.870369] kmem_cache_alloc+0x5b/0x480 [ 1710.871239] __d_alloc+0x2a/0x990 [ 1710.871963] ? lock_is_held_type+0xd7/0x130 [ 1710.872872] d_alloc_parallel+0x10a/0x1c00 [ 1710.873762] ? __d_lookup+0x40a/0x780 [ 1710.874578] ? lock_downgrade+0x6d0/0x6d0 [ 1710.875447] ? find_held_lock+0x2c/0x110 [ 1710.876314] ? __d_lookup_rcu+0x730/0x730 [ 1710.877180] ? __d_lookup+0x42c/0x780 [ 1710.877992] ? d_lookup+0x115/0x120 [ 1710.878779] lookup_open.isra.0+0xa6e/0x1590 [ 1710.879721] ? vfs_tmpfile+0x2a0/0x2a0 [ 1710.880575] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1710.881742] path_openat+0x9ae/0x28a0 [ 1710.882575] ? path_lookupat+0x850/0x850 [ 1710.883436] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1710.884544] ? lock_is_held_type+0xd7/0x130 [ 1710.885457] do_filp_open+0x1aa/0x400 [ 1710.886266] ? may_open_dev+0xf0/0xf0 [ 1710.887097] ? alloc_fd+0x2f0/0x670 [ 1710.887869] ? rwlock_bug.part.0+0x90/0x90 [ 1710.888762] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1710.889915] ? _find_next_bit+0x1e5/0x260 [ 1710.890807] ? _raw_spin_unlock+0x24/0x40 [ 1710.891690] ? alloc_fd+0x2f0/0x670 [ 1710.892476] do_sys_openat2+0x16d/0x4d0 [ 1710.893317] ? build_open_flags+0x6f0/0x6f0 [ 1710.894226] ? lock_is_held_type+0xd7/0x130 [ 1710.895162] __x64_sys_openat+0x13f/0x1f0 [ 1710.896034] ? __x64_sys_open+0x1c0/0x1c0 [ 1710.896912] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1710.898003] do_syscall_64+0x3b/0x90 [ 1710.898809] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1710.899884] RIP: 0033:0x7f47de354b19 [ 1710.900653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1710.904474] RSP: 002b:00007f47db8ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1710.906054] RAX: ffffffffffffffda RBX: 00007f47de467f60 RCX: 00007f47de354b19 [ 1710.907544] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1710.909021] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1710.910498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.911990] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1710.913507] 12:11:27 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) 12:11:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 9) 12:11:27 executing program 7: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@alg, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/91, 0x5b}, {&(0x7f0000000100)=""/154, 0x9a}], 0x2, &(0x7f0000000200)=""/234, 0xea}, 0x40000001) ioprio_get$uid(0x3, 0x0) 12:11:27 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:11:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xffffe000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:11:27 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="03000000040000", 0x7, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:11:27 executing program 3: ioprio_get$uid(0x3, 0x0) mount$cgroup(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800c0, &(0x7f0000001640)={[{@clone_children}, {@cpuset_v2_mode}, {}, {@clone_children}, {@clone_children}, {}, {@cpuset_v2_mode}, {@noprefix}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0}, &(0x7f0000001500)=0xc) r1 = getpid() r2 = getpid() kcmp(r1, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000080)="120d38a61d7058678c15b54d046220bed8b6e8232af6b41aa88d1a054de1d3a720560a392435901ec9d4b8a4765e98b508310cb670327058c3465bd70bc7de8726876a19fa913b09bde4a3a3ab13ff2aa6c5de0a204b64edcafaf1cadd2c06e20d34d6c719e3940b9adf81259daa0552b82328c2fbb2e9393bafa0403ed7bc5f65bed46e2ec392e7737e077bd2fd6635c7d09def77d0a852e950b0023a69570c", 0xa0}, {&(0x7f0000000140)="b267a5915d5e4ced42381fe4111155a5cf7d25e5d806a56382d387c175708e13a9b150fc3947acb5d75494aa48ed4db2bc3ee838d022b80787c092310da2cf29cc4307be117fc2bb9e1ddde05fbbf46c0695244d6bfd7451d396db06cdb7ffe5daf761486b1ead0d3eddf5debbac6857a030a64e7ff1f0791ae021b69179eba679f3e3ecfa4ef7a89b076d040e0f6c0d7928db297e589ac98d227dd1a0c1f480fcd8e9d9aaa1160db2f88664a869ff48ac79f8d3ca9e814e5a6c2474976c99886b922a869fb9b9bf0a302419d78db8d945dd1bb2bc", 0xd5}, {&(0x7f0000000240)="d97f7fb79fdb5b6f7e710bc03e23664af948c1c30fc02aca44ea5b5693252629f4eeef0f7bd0b06934b7cef6f926e7d732f5ef769d0c9a8b0bb7775e098f12a4d34915125848af7a26d2277a8cb31512f7fa9a11ce8a98ff9d126ce6a765aa7cbee0a52bcdb9c05a40d5a1053264074e5131f1627fded118848c7ed8ef2190327c3dcd6a729fa75b1348801666933e72ce380745339bc38a0c296d6f590a26128ca35832f4a263fe583f8999bb4b351571439a02f6bc9502242a4348823027eb56e4181d5c7584c918c95af91a5276eca9dcb30f8336d338b365367f46c1c0af7e1d7b2676b6a2a5651dd1605fdf53ce52bd8de2", 0xf4}, {&(0x7f0000000340)="bcb26246442f2dd4be0deb03cb3a2d98f2fe7a6e3a7c914f4c6b381834bfd1e711e0b1e16484847f3d56c12748e9972a43c4d626641478c8c9d408ee1ab541afbb89801bbbc0f418b2b55efcd284d1e262a4ef4c83", 0x55}, {&(0x7f00000003c0)="37417d4f68cb7b707176d8bb61b53c5356", 0x11}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="1facee0b03a0ef3a5a189e91b45c1e11a01047548c7efb5652118ed5a43dbf753ef36d", 0x23}], 0x7, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, 0xee01}}}], 0x40, 0x4015}, 0x44) 12:11:27 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1725.230960] loop1: detected capacity change from 0 to 256 [ 1725.239117] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1725.242167] FAULT_INJECTION: forcing a failure. [ 1725.242167] name failslab, interval 1, probability 0, space 0, times 0 [ 1725.243377] CPU: 0 PID: 12320 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1725.244285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1725.245498] Call Trace: [ 1725.245765] [ 1725.246005] dump_stack_lvl+0x8b/0xb3 [ 1725.246422] should_fail.cold+0x5/0xa [ 1725.246851] ? create_object.isra.0+0x3a/0xa20 [ 1725.247331] should_failslab+0x5/0x10 [ 1725.247722] kmem_cache_alloc+0x5b/0x480 [ 1725.248148] create_object.isra.0+0x3a/0xa20 [ 1725.248618] ? kasan_unpoison+0x23/0x50 [ 1725.249042] kmem_cache_alloc+0x239/0x480 [ 1725.249480] __d_alloc+0x2a/0x990 [ 1725.249851] ? lock_is_held_type+0xd7/0x130 [ 1725.250307] d_alloc_parallel+0x10a/0x1c00 [ 1725.250762] ? __d_lookup+0x40a/0x780 [ 1725.251175] ? lock_downgrade+0x6d0/0x6d0 [ 1725.251623] ? find_held_lock+0x2c/0x110 [ 1725.252066] ? __d_lookup_rcu+0x730/0x730 [ 1725.252511] ? __d_lookup+0x42c/0x780 [ 1725.252932] ? d_lookup+0x115/0x120 [ 1725.253331] lookup_open.isra.0+0xa6e/0x1590 [ 1725.253815] ? vfs_tmpfile+0x2a0/0x2a0 [ 1725.254248] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1725.254867] path_openat+0x9ae/0x28a0 [ 1725.255287] ? path_lookupat+0x850/0x850 [ 1725.255729] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1725.256301] ? lock_is_held_type+0xd7/0x130 [ 1725.256772] do_filp_open+0x1aa/0x400 [ 1725.257189] ? may_open_dev+0xf0/0xf0 [ 1725.257605] ? alloc_fd+0x2f0/0x670 [ 1725.257998] ? rwlock_bug.part.0+0x90/0x90 [ 1725.258457] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1725.259045] ? _find_next_bit+0x1e5/0x260 [ 1725.259492] ? _raw_spin_unlock+0x24/0x40 [ 1725.259954] ? alloc_fd+0x2f0/0x670 [ 1725.260353] do_sys_openat2+0x16d/0x4d0 [ 1725.260778] ? build_open_flags+0x6f0/0x6f0 [ 1725.261245] ? lock_is_held_type+0xd7/0x130 [ 1725.261716] __x64_sys_openat+0x13f/0x1f0 [ 1725.262153] ? __x64_sys_open+0x1c0/0x1c0 [ 1725.262614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1725.263183] do_syscall_64+0x3b/0x90 [ 1725.263590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.264144] RIP: 0033:0x7f47de354b19 [ 1725.264542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1725.266515] RSP: 002b:00007f47db8ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1725.267353] RAX: ffffffffffffffda RBX: 00007f47de467f60 RCX: 00007f47de354b19 [ 1725.268114] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1725.268875] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1725.269636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.270397] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1725.271187] [ 1725.281872] loop4: detected capacity change from 0 to 264192 [ 1725.318703] ramfs: Bad value for 'mode' [ 1725.320100] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1725.322127] EXT4-fs (loop4): group descriptors corrupted! [ 1725.333869] ramfs: Bad value for 'mode' [ 1725.373990] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:11:27 executing program 3: ioprio_get$uid(0x0, 0xee01) 12:11:27 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:11:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 10) 12:11:27 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:11:27 executing program 7: ioprio_get$uid(0x3, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x10801, &(0x7f0000000280)={'trans=unix,', {[{@access_any}, {@cache_mmap}], [{@subj_role={'subj_role', 0x3d, 'smackfshat'}}, {@appraise}]}}) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="66e8b308d1148fdbec5afc7ecc822231b5c0a2d2bee7344c0ab6d5a28ad1e7e67849b05c0d0d43056d3ebaae97d70e236d92b530a943b4586eb88d9987149e36caac", 0x42, 0x4}], 0x100000, &(0x7f0000000140)={[{'+:(,(])['}, {'#\xd8^'}, {}, {',&'}, {'O\xc6{.\'&'}, {'['}, {}, {'$].&&%)#&'}, {')'}, {'%'}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fsname={'fsname', 0x3d, '){\x00'}}, {@smackfshat={'smackfshat', 0x3d, ':-*+!'}}, {@seclabel}]}) 12:11:27 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1725.423015] loop1: detected capacity change from 0 to 256 [ 1725.437972] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1725.448859] FAULT_INJECTION: forcing a failure. [ 1725.448859] name failslab, interval 1, probability 0, space 0, times 0 [ 1725.450228] CPU: 0 PID: 12347 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1725.451072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1725.452225] Call Trace: [ 1725.452485] [ 1725.452710] dump_stack_lvl+0x8b/0xb3 [ 1725.453114] should_fail.cold+0x5/0xa [ 1725.453509] ? vfat_add_entry+0x236/0x2720 [ 1725.453961] should_failslab+0x5/0x10 [ 1725.454360] kmem_cache_alloc_trace+0x55/0x3c0 [ 1725.454838] vfat_add_entry+0x236/0x2720 [ 1725.455260] ? lock_is_held_type+0xd7/0x130 [ 1725.455707] ? find_held_lock+0x2c/0x110 [ 1725.456137] ? lock_release+0x3b2/0x6f0 [ 1725.456551] ? current_time+0x72/0x2c0 [ 1725.456957] ? vfat_rmdir+0x450/0x450 [ 1725.457381] ? mark_held_locks+0x9e/0xe0 [ 1725.457807] ? ktime_get_coarse_real_ts64+0x159/0x190 [ 1725.458373] ? lockdep_hardirqs_on+0x79/0x100 [ 1725.458877] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1725.459427] ? ktime_get_coarse_real_ts64+0xfc/0x190 [ 1725.459988] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 1725.460524] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1725.461129] ? current_time+0x1e6/0x2c0 [ 1725.461569] ? igrab+0xb0/0xb0 [ 1725.461930] ? _raw_spin_unlock+0x24/0x40 [ 1725.462396] vfat_create+0x115/0x3c0 [ 1725.462815] ? vfat_add_entry+0x2720/0x2720 [ 1725.463266] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1725.463865] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1725.464427] ? vfat_add_entry+0x2720/0x2720 [ 1725.464880] lookup_open.isra.0+0x105a/0x1590 [ 1725.465394] ? vfs_tmpfile+0x2a0/0x2a0 [ 1725.465838] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1725.466447] path_openat+0x9ae/0x28a0 [ 1725.466894] ? path_lookupat+0x850/0x850 [ 1725.467345] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1725.467934] ? lock_is_held_type+0xd7/0x130 [ 1725.468409] do_filp_open+0x1aa/0x400 [ 1725.468836] ? may_open_dev+0xf0/0xf0 [ 1725.469260] ? alloc_fd+0x2f0/0x670 [ 1725.469665] ? rwlock_bug.part.0+0x90/0x90 [ 1725.470127] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1725.470725] ? _find_next_bit+0x1e5/0x260 [ 1725.471159] ? _raw_spin_unlock+0x24/0x40 [ 1725.471615] ? alloc_fd+0x2f0/0x670 [ 1725.472003] do_sys_openat2+0x16d/0x4d0 [ 1725.472437] ? build_open_flags+0x6f0/0x6f0 [ 1725.472877] ? lock_is_held_type+0xd7/0x130 [ 1725.473331] __x64_sys_openat+0x13f/0x1f0 [ 1725.473780] ? __x64_sys_open+0x1c0/0x1c0 [ 1725.474241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1725.474778] do_syscall_64+0x3b/0x90 [ 1725.475199] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.475749] RIP: 0033:0x7f47de354b19 [ 1725.476152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1725.478010] RSP: 002b:00007f47db8ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1725.478828] RAX: ffffffffffffffda RBX: 00007f47de467f60 RCX: 00007f47de354b19 [ 1725.479608] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1725.480387] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1725.481157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1725.481924] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1725.482713] 12:11:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xffffff7f, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:11:27 executing program 3: ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) 12:11:27 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1725.532439] loop4: detected capacity change from 0 to 264192 [ 1725.537026] ramfs: Bad value for 'mode' [ 1725.540103] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1725.541180] EXT4-fs (loop4): group descriptors corrupted! [ 1725.548445] ramfs: Bad value for 'mode' 12:11:42 executing program 7: r0 = semget$private(0x0, 0x4, 0x80) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x6, 0x4, 0x5, 0x5, 0xfffe, 0x0, 0x5, 0x1f, 0x8]) ioprio_get$uid(0x3, 0x0) 12:11:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xffffff8c, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:11:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 11) 12:11:42 executing program 6: ioprio_get$uid(0x3, 0x0) stat(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xceb, 0x3, &(0x7f0000001240)=[{&(0x7f0000000080)="92787822749ec68451f00956719ded65b8df2b4c2ef8173e6e2437600eb81dbb36f5cb89957f63397e65a20aeb334432bae5372851f0c6aec1174723f312db87c0bf2167307248748f9822ba5c52e12fcfd893ccc2c700637511bedf32eeece820aa0fd32f6e0e5afe13844c737ce309c4b0de10c210fa81887642f4c94861dc53ad2eaee3c9be8f366661a608920fcd6d224b352397fb92bf4258b86cd92452383066897274686245e76bf384979bee", 0xb0, 0x7}, {&(0x7f0000000140)="537ce5c06e8db19ffc8954b31661a51ecd232d2ae79729434b90aafe7b0c1432450ba56951ccc53d869361b90bd5dd82d9c203498d32f33abce103e7a7b0cd23402c14f7c512ee24899412caac6500e30d5d5685f34e9b13ab8dd9029a04f855fe00d1ee0d512aaf14f8a5a538a62ba922cd83a6121b3eff0eaa8accffb567d2640520c0a687571c1b80f32e931d9ffeca2be3d6e0a10cab8099350836f0526d748affb02110e9d7e4d077c99fe7129c739505bc0d7cb3c73064c198f0f0d39485bfdb8e2d42c5bbbe63f5276406af90b970468050494a93914e87cec5be4cd1bfdc934b81c8a9b94cfeffe9aa2492522566da979ad6f988c6500fed228e0bc7ad086e8b27f37f6cac00dbfcbcbdcfde6d80e32beaca3c59d890784ca5dc397b85c1fa6524b7570876d3e1dedde8129883bbc837dec4907e34f606f6a848c43dae0221c933e4c5a89b50f94f5698182d0c3a247255b00fabd3d69458628b1e364ba2a5fbbbeadafa035558d5d7058e6182ffb18ee9cbf2dde7a4de3e66d83d2ae442acb6f456b05226d00ea045b7857601e6e6109ea35b3d3797a199b3d5a35e56d95a35291bf8bd3ef812587cd4b6d6be65935621befd4f8fc4fbc3f897fe510a98cc66cbc6996efe26304b2d6f540d13ea62e67a6087f876a39a1d7855cc5d52d0b869746324d154516feffe3706c06058fe4da7d4a9d8882591ccab7224f6c83624bac988c2e2a8715fe31d909d66c6c08dbaffa3d688315ddeecbfcdb75067e3c3d7f5332c19ad86bf27306e9bc9b1eb23a16db6c72476981f160175e3a558c51381a4b7e8e2b7645d8f691cb02782966d154dca7fb33092bdbea11ab46baaf1fa930007500b342789aaba08aaeb5978cd8d92e42e258aae54d4e1ec37d36c2769035aaf097971485dea14445a17ede88b39e8e7906c332ab8b55112dac5a316deab238dc8e5d249624effb4b8b0bcac5e4d84c42fa34a18fbac5c7529b4d78f53a1a74c6e11473569346a2341201f8d3edf810ac5a71988f22f009442b81333ab086dd17da2786ad12e3a1854978836a7980b800fa46b8959a6df50a57b4b6009205d91ab8ea900ee30b4bd0e988bcdf332367c50f2466a0950d4f1252225a24fbafdc55f95eb268443f26e5e71c1ad6413213fc7bd68345484e57c3f5ba54436a469177014237681c93a94c8090b325cae579d3faf32c6527f1e74e45d30f1229408cc372cb40c8e7a7c71f921ec8d1ce55e3d60299bac732e87f3832fad54def145eaeda5f96b8d31bcf484bb8f355e47c7ea2d3d70773f0632d98109190eb1bf1ead902cbd2d790e4e6940e600c888345c32389bbb66a2c5d91dea035362a819385ebf32f9a2edd3b2ebd6abb4891d3d6d9a2956b62673cf0ca74e2663cb433335315dec78272937e6860b439ff9434aacc90eb43a1a038503de77aa70e26cd0b4033e4d9d7de1d57a962763e0dfb62ade5be13a52a5c3e6c8b20f19305734bff8d0eb4e1876b537c028fe380c8888c91b84bed5388643fd98bfcbb1427917d87645111b0fd72352bcec3da0b3a492de7813eff939b4422d3b5f8b904030ec2636197fe82092aa6f10bbdaaa1ebdab2238de55688993f84e4733c16105af6512188a560daf5ad4a49d22bd341bd0f64ca70d0e633d19818ea79f99dd80a2b603ffb0cde4a1cd06a822e30003a08724ff899d61c0be7aeb1b2903d5ead8fa5c883bad3d6cc244115ccd8309447c20ef3bfe678449e14e76cfbfe9bf42d31d8c78ec76139a9e1310881467be3b0fef052c1bc69e911631dd7a4ac14cae597da566d774aee1fe9d680239bb8e3357ce30f095e3a7886699293e4ba44afef333815e774d6c286fbcd92e0a09d32ea76f37b5c9bd7805d70ba5b6cb02e1126cb790f69b992737400ab47e15ed5654e7e912225986ea7ca5687e03a361678900bcc4f06f23a199f928e5f7eb4af8165e336223a3870cc65229e37e6035dd004c6d78a9e89873408e0dd6ebbca6a5830e6ac38652df48be4203dfb920dc7d627851746063172132d9bfe2bc236fa8a40fdd500da13f5f00abf44c251d074030f4c21c2ccbc0c915cc4df4678c2324c178f4dfbac69cd7d9193673985050b3b6995a113525ec0c7eb56e8033c344a54e773264546219b38312de1943619570d84ac0ae23d9acf35cbe8f3f2be48ba84c76e2b102980f106a47a162422024bfe29500e8694f5516a12b536cdb2a2150fe871170eef8a1a3234fe38ce6d5583037f9eaa36ce727a9f02d00438c3dd645800baf013cbfa94e6251438fb85c8c97c73753bac72597d487f9873ef999cac54868b7e7a34b505df33ebc0eaea9fa63286e92f35bf38fd6253c0860a3a75f6eea88d537942da66dacc7d20a6faa8858e7fd25433acb63fb589666569ba65e7c30060b2fec7352115be71cec1e1bae00e8d5fc0387262027809356635de0f8b25feea0e4540b202852a8c59b3c9b4e842a71dd07f8451caa8733edda10bb0e84ce878fa6b942344f4a9737fd27d25c2125f12d35640430fe555019873c26619810606ebf37c03a6cb1d7aaaa692eb9758047d26bedb0d67bd2ae58fe2fc62a683b02853be7d0d49ef8efa2232bc5e964231c13895d650c3c4236606ba04d94933f26fe17bf3386b8c0210a7b8e4e8a849ffeb116d9b16e8b4dffba46c973ebbfef96674450abcd203a2023c68a9de4c9b97ce9155ef0b879ccb018ea18b87d280a98a548bd196b94ad30e2be2ca58871daa219cbd22d55ddaeb77c50205c01dc3fd110479cc0b6e0a0c1146afafc0de77dedcafb9f1015ec0a83cd13d76813c55e1c371fa70f33e679a976d4c492bdf8ffcd6649cced7f61b7607fb058e341d19394346459d78edaec8b12a6fbec3870fd20fbef09d16366290a7af321977b013102423bd6a36431aa499d3ea44467928dd37c9b8bf8895039fecc12378d537bee75278d318987af940921f14f7f79e0019614ba60d3dd5354666fd5e76f6a37dc568168ec77188f4e2150a3cc35be6ddd00d421f06b26e2764f61365f19f6d6fb81b0b3afe8c1d8d2ee61fc67ed33cd55ef7ed194a5c16e4b8e8cfff0abeee350caedd80eff94dbc8b03cfec070e8b421f53c1230e4c35cc2ae746ffb03eb097d8aa4558a7c7cb72ff24734acacf4c813938cd76d34943dda27ff0d03c4c1564f34d46d46ef6d092ac7917bbdd2cc3c33f110921336e55823820a197c2400a881d405fb77735b2c29896bee5be13b29cfb8d76f30bcd2e67153e1ae4c5a6969770850e8635ce2bf4d46f7980fcf9764d62d06c962f7cae4c400adfa1e9df6c7812eb8d1a6ac20dcf9ff9a08ae85127dedcc7c1fd24d330ee381e432ac5d044868913dcefc952327ea8b6396a8449190280a8ce56d1d756ee067a88dca2ecdcfcd4bbf0ce12bd8d7b920facb65198f771eceec9d63856393872bed91c291566ed0da2b66a16944b95eeeb1b8c5d91012ff64544a3d1a3bd712281bdc4c550427da200cfb45b69c837dcc2902bd85888b072ea07d06f807c9b6e93910a8976ce45f7bd8dc823b54ce5efdee8aabe88d7ad2394a335efe683ab943b2aa333afad7d5d939cdac7ecb9389054037bf0496db4a9a9fd828cc5109e3a5d98b4a5dbd7bfadf00742fe69d73a785bddbaa5a41e6564104f0f87848ed421a59cf012395f5810e4daed995de448e3bd5728ddc96f594e87885be250ed73d78aff3ecef57a5122230d5f760282099f628e01ee5ce02696480469f60fb4c31647f852d2445c2936a456288d14e20b77da64dd131c05ba24ae74b046b7c12d685333159b8957dec455b1e27eb35f89da91d3c113c725805e4948c3a7ebc9820cdc398283010ec6880cc41c156aa89f963cce7110ac2e127af41fd676c9913d3df02891bb35c830db7e25065c7d1dab818e6a0fedc65c2d4dd4c6d8144aaa05cebfdde359acbde45bf125932f3da31eaf541721b1cee1ccd11eb69b16fdb8d42fd743c3aab0d1465eef02a54a48481fb2ada86383f26d10f86b76ea9c424779ba793c1a06cb1911b2baf4adf668173b4d49517a1ce5fc9e791a160e4bfed01c6985551968e8417c999e3eff819513761a8660bd42718265eea916192ca4799737ba4753a884e450bba4ce3a3821f489328fd8e54c5891cef9a34a75a52b513216578c4eac8f941895b1b8df825487511718ee1b76b36824969652d6b5af9187982dbc9991685dae942b391215da6a72384646cddb9c039f6f465395e37c48af1a1f09615dfda902de7bb232940445334cdab67a2aa2b7b51f95546d6c95b5806a5a9a932554b359cff44eed7c6fd088f0ea3c2b745accb429a0a4f736ecbec5a06d18dc71f43c93cda0d31204ef2595a6b0032c2c2371543066bf6235c6e3a6b343b831ea523854ce86339a9fe92827489313fa92ee783cb665e0d4948a13ab7667ec9519ba535a2205f4ddfb052770707d015562d69cfb269710bbc4a2335dd3b34b16891a313055f5fc0472f3dee1f30574ed07b6fa5870faa455cec6f6163ecf7ffb1eaba0a2a3c480d3c3896434ef6d706a180bd8d2a02e0dab306fc85edc1647ad00e1149a47a3f5c8e947b920ea262faae6718ef3f6a8952f11caad80ca2099190227b53a33b57ed0bad577b0897efc2c8d63a7cdb1433c08ea5521ad967ff0420372818c1ad187c310bc1f90123e1bae5a5ad5019318c7e6d935e1ed553a7cbf2c831144c0fdbcba61df8c45026eee2988a016b797dd7749db962c5385df41ce51f4644cd2556d1bef436265351d5395f8367f7639956e57e549eef6d726867d9750c2c43ddbf9101247a8c2ff8d99ae540b773468e8a10bcba3e94757c440ac06341cebea293c6b040cb1e5fb8c16df08e63b29abccd08846ba6d996b2f1f7bb810d8ad136598aacdd5f2435f90499ce11b3a19ccc9d2dcc2a3a5ddca4486e94269887270df1d9f4053e5e2e54cd38a2e934703435dbd227d62dee0db3179c82fdad23aa8b4e2cd510653d0109315e561a3f6aeed8e3b240c0c078e1815cd98ac118c4d8f7a22be5d61b648c6748b67057ba718126db84d72a243b7bddec7bd06b809692ccc2addc133a82a239bf8484b3012809b14939026aa8e96640bc04c1721b2f5234a001b4e10c9793e3c497c6119a983e226c2c9a1a4d3dccfcfa078eaab804f7a7872dab7c5c2efe11341fac85404fc64d2c33ffcc11d4920086a1ba290af44d54bfaa5faf13980075ae06cdf77884d42a99b7231f7b36539b3bdf131414b09bfdf6770717ee1b62c7f29b26a204d8f13044a3d34e18168ab4c25534744655c2fb197cdd1fa24264adb99e9bfef54af09919ae23173a1b99630536ca45fc3acf93f6220164c54d1f6402e718f1a3343254d1aa184572c92af909e348112569a736e620ebd7040f6fb887fd5a484f42c6b8d15531e25c0826f0e219c582a05eebc183691852bd33ddddd79be3e95abf001c1fb4ca87eb4624abcb50a70007a564609f54e75ae6b081550385dafceff64486f52fa707fce5fe93e8e5ceee295b45569f9d385c134f60adb7e0ad3cfad2358326f4c0099a3281a5dd27e8de9a8c5fa219d351f79061fa81e31f2bbc94837125c85d64c2744bf5f5919426143b46aa2bfb58ab5a45ce8728d59a627a0c7749f1e375cba5075c8dca2ecb1033cf48b5b1c145c74dda470f634fa896ece78de34d0cd6361cb417bfa8b87a02ddccb3ed8460caefef359ad35ad0f6c42df896f79d9c7b8ea83d5b00105cbd68267c756a8cdf7d887869a8c22e92d7f4fbb3c136", 0x1000, 0x3}, {&(0x7f0000001140)="b3b7271b24f2cf7650b891c65b70408a5df3298502f9f2d494c693aa404641cbe6f47a5a99900d044b4e48f5c430c4ed505609226ae66bf57e4713df15a7d3c731dd2e8e46f3c1c7ede7b1da06c26c894d474a583c8960aa8220da76c85d978e2c4d29884b2dd28d9ff8310208fb8c3c6b402a62daea06a43ea8db1c3df9e1f6a2b785a59147ebe7b812267d3e7159082fba8c58a5c1ad796816589672f99711cb823063451b7f031ed11e8ef128d4056dc2eadb5151829596e2e5c012d8216d48960409d1a1e034e1a3f86c8549b4b58c6daf86727b61a1de863b83e96b258935", 0xe1, 0xeaf2}], 0x39, &(0x7f00000012c0)={[{'!!/'}, {}, {'!%*'}, {'$,*\x96'}], [{@fsmagic={'fsmagic', 0x3d, 0xbc}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, '$/'}}, {@fowner_lt={'fowner<', r0}}, {@obj_user={'obj_user', 0x3d, '\\(-,!'}}]}) 12:11:42 executing program 3: ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000080)={0x0, 0x9, [0x3000000000000000, 0x7fffffff, 0x400, 0xae9, 0xffffffff, 0xcfb]}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x48) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x30000000) ioprio_get$uid(0x3, 0x0) 12:11:42 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:11:42 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r2, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:11:42 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1740.805975] loop1: detected capacity change from 0 to 256 [ 1740.808730] loop4: detected capacity change from 0 to 264192 [ 1740.814349] loop6: detected capacity change from 0 to 234 [ 1740.821921] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1740.823334] EXT4-fs (loop4): group descriptors corrupted! [ 1740.832926] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1740.839088] ramfs: Bad value for 'mode' [ 1740.839825] FAULT_INJECTION: forcing a failure. [ 1740.839825] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.841483] CPU: 1 PID: 12384 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1740.842567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1740.844035] Call Trace: [ 1740.844369] [ 1740.844662] dump_stack_lvl+0x8b/0xb3 [ 1740.845174] should_fail.cold+0x5/0xa [ 1740.845680] ? create_object.isra.0+0x3a/0xa20 [ 1740.846288] should_failslab+0x5/0x10 [ 1740.846785] kmem_cache_alloc+0x5b/0x480 [ 1740.847347] create_object.isra.0+0x3a/0xa20 [ 1740.847929] ? kasan_unpoison+0x23/0x50 [ 1740.848460] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1740.849072] vfat_add_entry+0x236/0x2720 [ 1740.849620] ? lock_is_held_type+0xd7/0x130 [ 1740.850213] ? find_held_lock+0x2c/0x110 [ 1740.850748] ? lock_release+0x3b2/0x6f0 [ 1740.851280] ? current_time+0x72/0x2c0 [ 1740.851801] ? vfat_rmdir+0x450/0x450 [ 1740.852307] ? mark_held_locks+0x9e/0xe0 [ 1740.852842] ? ktime_get_coarse_real_ts64+0x159/0x190 [ 1740.853527] ? lockdep_hardirqs_on+0x79/0x100 [ 1740.854113] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1740.854769] ? ktime_get_coarse_real_ts64+0xfc/0x190 [ 1740.855440] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 1740.856070] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1740.856786] ? current_time+0x1e6/0x2c0 [ 1740.857315] ? igrab+0xb0/0xb0 [ 1740.857743] ? _raw_spin_unlock+0x24/0x40 [ 1740.858293] vfat_create+0x115/0x3c0 [ 1740.858787] ? vfat_add_entry+0x2720/0x2720 [ 1740.859376] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1740.860103] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1740.860857] ? vfat_add_entry+0x2720/0x2720 [ 1740.861423] lookup_open.isra.0+0x105a/0x1590 [ 1740.862022] ? vfs_tmpfile+0x2a0/0x2a0 [ 1740.862556] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1740.863295] path_openat+0x9ae/0x28a0 [ 1740.863806] ? path_lookupat+0x850/0x850 [ 1740.864341] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1740.864488] ramfs: Bad value for 'mode' [ 1740.865026] ? lock_is_held_type+0xd7/0x130 [ 1740.866360] do_filp_open+0x1aa/0x400 [ 1740.866884] ? may_open_dev+0xf0/0xf0 [ 1740.867394] ? alloc_fd+0x2f0/0x670 [ 1740.867873] ? rwlock_bug.part.0+0x90/0x90 [ 1740.868418] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1740.869127] ? _find_next_bit+0x1e5/0x260 [ 1740.869664] ? _raw_spin_unlock+0x24/0x40 [ 1740.870203] ? alloc_fd+0x2f0/0x670 [ 1740.870692] do_sys_openat2+0x16d/0x4d0 [ 1740.871220] ? finish_task_switch.isra.0+0x226/0x870 [ 1740.871885] ? build_open_flags+0x6f0/0x6f0 [ 1740.872448] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1740.873100] ? xfd_validate_state+0x59/0x180 [ 1740.873688] __x64_sys_openat+0x13f/0x1f0 [ 1740.874226] ? __x64_sys_open+0x1c0/0x1c0 [ 1740.874778] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1740.875479] do_syscall_64+0x3b/0x90 [ 1740.875999] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1740.876656] RIP: 0033:0x7f47de354b19 [ 1740.877155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.879637] RSP: 002b:00007f47db8ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1740.880652] RAX: ffffffffffffffda RBX: 00007f47de467f60 RCX: 00007f47de354b19 [ 1740.881599] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1740.882543] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.883503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1740.884466] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1740.885419] 12:11:43 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 12:11:43 executing program 7: ioprio_get$uid(0x3, 0x0) setuid(0xee00) 12:11:43 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:11:43 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:11:43 executing program 3: exit_group(0x9) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@dev, @in6=@remote}}}, &(0x7f00000000c0)=0xff39) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioprio_get$uid(0x3, r1) [ 1740.953133] FAULT_INJECTION: forcing a failure. [ 1740.953133] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.954914] CPU: 1 PID: 12396 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1740.955928] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1740.957280] Call Trace: [ 1740.957626] [ 1740.957898] dump_stack_lvl+0x8b/0xb3 [ 1740.958372] should_fail.cold+0x5/0xa [ 1740.958845] should_failslab+0x5/0x10 [ 1740.959309] kmem_cache_alloc_bulk+0x47/0x670 [ 1740.959855] ? xa_load+0x12d/0x280 [ 1740.960299] io_submit_sqes.cold+0x20b/0x435 [ 1740.960869] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1740.961488] ? io_async_task_func+0x560/0x560 [ 1740.962036] ? lock_release+0x3b2/0x6f0 [ 1740.962525] ? __io_uring_add_tctx_node+0xec/0x390 [ 1740.963147] ? io_rsrc_buf_put+0x50/0x50 [ 1740.963660] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1740.964281] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1740.964888] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1740.965425] ? wait_for_completion_io+0x270/0x270 [ 1740.966019] ? lock_is_held_type+0xd7/0x130 [ 1740.966551] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1740.967228] ? vfs_write+0x188/0xae0 [ 1740.967685] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1740.968356] ? fput+0x2a/0x50 [ 1740.968750] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1740.969388] do_syscall_64+0x3b/0x90 [ 1740.969848] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1740.970478] RIP: 0033:0x7f61270a3b19 [ 1740.970929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.973257] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1740.974215] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1740.975080] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1740.975979] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.976831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.977721] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1740.978625] [ 1740.984497] loop4: detected capacity change from 0 to 264192 12:11:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xfffffff6, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:11:43 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r2, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1741.006047] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1741.007351] EXT4-fs (loop4): group descriptors corrupted! [ 1741.075667] ramfs: Bad value for 'mode' [ 1741.091130] ramfs: Bad value for 'mode' [ 1741.097668] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:11:56 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1753.966291] loop4: detected capacity change from 0 to 264192 [ 1753.991495] ramfs: Bad value for 'mode' [ 1753.994095] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1753.995169] EXT4-fs (loop4): group descriptors corrupted! [ 1753.999275] ramfs: Bad value for 'mode' [ 1754.007669] FAULT_INJECTION: forcing a failure. [ 1754.007669] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.008925] CPU: 1 PID: 12424 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1754.009813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1754.010992] Call Trace: [ 1754.011279] [ 1754.011527] dump_stack_lvl+0x8b/0xb3 [ 1754.011965] should_fail.cold+0x5/0xa [ 1754.012412] ? create_object.isra.0+0x3a/0xa20 [ 1754.012928] should_failslab+0x5/0x10 [ 1754.013331] kmem_cache_alloc+0x5b/0x480 [ 1754.013774] create_object.isra.0+0x3a/0xa20 [ 1754.014249] ? kasan_unpoison+0x23/0x50 [ 1754.014688] kmem_cache_alloc_bulk+0x387/0x670 [ 1754.015177] io_submit_sqes.cold+0x20b/0x435 [ 1754.015672] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1754.016202] ? io_async_task_func+0x560/0x560 [ 1754.016684] ? io_rsrc_buf_put+0x50/0x50 [ 1754.017127] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1754.017678] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1754.018214] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1754.018693] ? wait_for_completion_io+0x270/0x270 [ 1754.019215] ? lock_is_held_type+0xd7/0x130 [ 1754.019538] loop1: detected capacity change from 0 to 256 [ 1754.019674] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1754.021472] ? vfs_write+0x188/0xae0 [ 1754.021871] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1754.022466] ? fput+0x2a/0x50 [ 1754.022814] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1754.023391] do_syscall_64+0x3b/0x90 [ 1754.023804] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1754.024358] RIP: 0033:0x7f61270a3b19 12:11:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 12) 12:11:56 executing program 7: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000100)=0xfffffffffffffe48) ioprio_get$uid(0x3, r0) 12:11:56 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r2, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:11:56 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 12:11:56 executing program 3: ioprio_get$uid(0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@report={0x4c, 0x20, 0x0, 0x70bd25, 0x25dfdbfd, {0x32, {@in=@rand_addr=0x64010100, @in6=@loopback, 0x4e22, 0x0, 0x4e21, 0x1f, 0xa, 0x20, 0xb0, 0x33}}}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12:11:56 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:11:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xedc000000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1754.024761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1754.026990] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1754.027818] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1754.028578] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1754.029319] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1754.030078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1754.030820] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1754.031601] [ 1754.050267] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1754.070158] FAULT_INJECTION: forcing a failure. [ 1754.070158] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.072680] CPU: 0 PID: 12436 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1754.074427] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1754.076823] Call Trace: [ 1754.077363] [ 1754.077831] dump_stack_lvl+0x8b/0xb3 [ 1754.078660] should_fail.cold+0x5/0xa [ 1754.079489] ? vfat_add_entry+0x2fa/0x2720 [ 1754.080401] should_failslab+0x5/0x10 [ 1754.081217] kmem_cache_alloc+0x5b/0x480 [ 1754.082097] vfat_add_entry+0x2fa/0x2720 [ 1754.082985] ? lock_is_held_type+0xd7/0x130 [ 1754.083920] ? find_held_lock+0x2c/0x110 [ 1754.084791] ? lock_release+0x3b2/0x6f0 [ 1754.085645] ? current_time+0x72/0x2c0 [ 1754.086495] ? vfat_rmdir+0x450/0x450 [ 1754.087337] ? mark_held_locks+0x9e/0xe0 [ 1754.088215] ? ktime_get_coarse_real_ts64+0x159/0x190 [ 1754.089314] ? lockdep_hardirqs_on+0x79/0x100 [ 1754.090271] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1754.091346] ? ktime_get_coarse_real_ts64+0xfc/0x190 [ 1754.092440] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 1754.093483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1754.094674] ? current_time+0x1e6/0x2c0 [ 1754.095558] ? igrab+0xb0/0xb0 [ 1754.096256] ? _raw_spin_unlock+0x24/0x40 [ 1754.097159] vfat_create+0x115/0x3c0 [ 1754.097966] ? vfat_add_entry+0x2720/0x2720 [ 1754.098907] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1754.100091] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1754.101260] ? vfat_add_entry+0x2720/0x2720 [ 1754.101954] loop4: detected capacity change from 0 to 264192 [ 1754.102191] lookup_open.isra.0+0x105a/0x1590 [ 1754.103834] ? vfs_tmpfile+0x2a0/0x2a0 [ 1754.104700] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1754.105891] path_openat+0x9ae/0x28a0 [ 1754.106733] ? path_lookupat+0x850/0x850 [ 1754.107630] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1754.108764] ? lock_is_held_type+0xd7/0x130 [ 1754.109698] do_filp_open+0x1aa/0x400 [ 1754.110522] ? may_open_dev+0xf0/0xf0 [ 1754.111359] ? alloc_fd+0x2f0/0x670 [ 1754.112141] ? rwlock_bug.part.0+0x90/0x90 [ 1754.113044] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1754.114213] ? _find_next_bit+0x1e5/0x260 [ 1754.115098] ? _raw_spin_unlock+0x24/0x40 [ 1754.116013] ? alloc_fd+0x2f0/0x670 [ 1754.116809] do_sys_openat2+0x16d/0x4d0 [ 1754.117662] ? build_open_flags+0x6f0/0x6f0 [ 1754.118589] ? lock_is_held_type+0xd7/0x130 [ 1754.119531] __x64_sys_openat+0x13f/0x1f0 [ 1754.120415] ? __x64_sys_open+0x1c0/0x1c0 [ 1754.121307] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1754.122412] do_syscall_64+0x3b/0x90 [ 1754.123234] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1754.124338] RIP: 0033:0x7f47de354b19 [ 1754.125124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1754.129029] RSP: 002b:00007f47db8ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1754.130635] RAX: ffffffffffffffda RBX: 00007f47de467f60 RCX: 00007f47de354b19 [ 1754.132138] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1754.133649] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1754.135181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1754.136690] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1754.138215] [ 1754.149096] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1754.150285] EXT4-fs (loop4): group descriptors corrupted! 12:11:56 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r0, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:11:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xe0ffff00000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:11:56 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:11:56 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:11:56 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0x10000, 0x77, 0x3, {0x0, 0x80000001}, 0x5, 0xd84}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="08000000000000002e2f66066c653000"]) r2 = signalfd4(r0, &(0x7f0000000100)={[0x6]}, 0x8, 0x80000) fcntl$dupfd(r2, 0x406, r0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000040)={0x7, 'virt_wifi0\x00', {0x6}, 0xfffa}) ioprio_get$uid(0x3, 0x0) [ 1754.202858] ramfs: Bad value for 'mode' 12:11:56 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1754.208045] ramfs: Bad value for 'mode' 12:11:56 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 12:11:56 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r0, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1754.255730] loop4: detected capacity change from 0 to 264192 [ 1754.270901] FAULT_INJECTION: forcing a failure. [ 1754.270901] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.272270] CPU: 1 PID: 12459 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1754.273152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1754.274355] Call Trace: [ 1754.274625] [ 1754.274873] dump_stack_lvl+0x8b/0xb3 [ 1754.275323] should_fail.cold+0x5/0xa [ 1754.275742] ? create_object.isra.0+0x3a/0xa20 [ 1754.276237] should_failslab+0x5/0x10 [ 1754.276636] kmem_cache_alloc+0x5b/0x480 [ 1754.277061] ? mark_held_locks+0x9e/0xe0 [ 1754.277499] create_object.isra.0+0x3a/0xa20 [ 1754.277963] ? kasan_unpoison+0x23/0x50 [ 1754.278386] kmem_cache_alloc_bulk+0x387/0x670 [ 1754.278869] io_submit_sqes.cold+0x20b/0x435 [ 1754.279355] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1754.279902] ? io_async_task_func+0x560/0x560 [ 1754.280389] ? io_rsrc_buf_put+0x50/0x50 [ 1754.280832] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1754.281364] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1754.281909] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1754.282381] ? wait_for_completion_io+0x270/0x270 [ 1754.282911] ? lock_is_held_type+0xd7/0x130 [ 1754.283384] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1754.283447] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1754.283989] ? vfs_write+0x188/0xae0 [ 1754.284009] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1754.286065] EXT4-fs (loop4): group descriptors corrupted! [ 1754.286432] ? fput+0x2a/0x50 [ 1754.286459] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1754.286479] do_syscall_64+0x3b/0x90 [ 1754.289521] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1754.290081] RIP: 0033:0x7f61270a3b19 [ 1754.290491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1754.292485] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1754.293290] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1754.294064] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1754.294826] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1754.295618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1754.296381] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1754.297158] 12:12:12 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:12:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 13) 12:12:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x100000000000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1770.173606] loop1: detected capacity change from 0 to 256 12:12:12 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e6db762f9b3ff8b1fbc98dd816f41d80ddb25469cf325d7e443d5cef07c4a35d6fee4a6695a446ba74f0be51a35cb1ba5c065df173def0ccb577408634eeed9ded531ef403eb0c7b2f7e28ef8119c0fed71eddd9d8437dc0034778b33d4b996e3c63e35f0ff765cf", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fbdbdf253600000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099002000000036000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000854) r1 = socket(0x23, 0x80000, 0x4) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x10c, 0x453, 0x200, 0x70bd27, 0x25dfdbff, "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", ["", "", ""]}, 0x10c}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000000) ioprio_get$uid(0x3, 0x0) 12:12:12 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r0, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:12:12 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:12:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r0) read(r0, &(0x7f0000000000)=""/64, 0x40) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x2f, 0x7, 0x6, 0x38, @empty, @loopback, 0x7, 0x40, 0xffff, 0x9}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x8, 0x20, 0x20, 0x3ff, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x14, 0xbe, 0x0, 0x6, [0x1e14, 0x5, 0x3, 0x3]}, @end, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x9, [{@loopback, 0x4}]}]}}}}}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg(r5, &(0x7f0000004400)=[{{&(0x7f00000001c0)=@can={0x1d, r7}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)="44196b7cf350255ae0caf229e54d0a2bf1e5cb47", 0x14}], 0x1}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e8130000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf250c0000009000018014000200626f6e645f736c6176655f310000000014000200677265746170300000000000000000001400020065727370616e30000000000000000000080003000200000008000300ca36a6a1140002006c6f0000000000000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e00000000000008000100", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08000300020000001400020076657468305f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f68737200000000080003000200000014000200697036746e6c30000000000000000000080003000200000014000200766c616e3000000000000000000000002c00038010000500885beceb0b50c3b29db31088170005005841636c7724f06ca037d676d1ca32e002a8f60068000180140002006d6163766c616e3000000000000000001400020076657468315f746f5f7465616d000000080003000200000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200516c616e3100000000001f0000000003000070d0", @ANYRES32=0x0, @ANYBLOB], 0x13e8}, 0x1, 0x0, 0x0, 0x4008810}, 0x20040000) read(r1, &(0x7f00000000c0)=""/69, 0x45) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r8, 0x0) ioprio_get$uid(0x0, r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={0x34, r9, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffc01}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r9, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4040010) 12:12:12 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) [ 1770.209127] FAULT_INJECTION: forcing a failure. [ 1770.209127] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.210489] CPU: 0 PID: 12481 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1770.211418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1770.212690] Call Trace: [ 1770.212962] [ 1770.213209] dump_stack_lvl+0x8b/0xb3 [ 1770.213645] should_fail.cold+0x5/0xa [ 1770.214069] ? create_object.isra.0+0x3a/0xa20 [ 1770.214585] should_failslab+0x5/0x10 [ 1770.215010] kmem_cache_alloc+0x5b/0x480 [ 1770.215487] ? mark_held_locks+0x9e/0xe0 [ 1770.215941] create_object.isra.0+0x3a/0xa20 [ 1770.216436] ? kasan_unpoison+0x23/0x50 [ 1770.216899] kmem_cache_alloc_bulk+0x387/0x670 [ 1770.217415] io_submit_sqes.cold+0x20b/0x435 [ 1770.217889] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1770.218456] ? io_async_task_func+0x560/0x560 [ 1770.218965] ? io_rsrc_buf_put+0x50/0x50 [ 1770.219447] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1770.220016] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1770.220560] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1770.221047] ? wait_for_completion_io+0x270/0x270 [ 1770.221582] ? lock_is_held_type+0xd7/0x130 [ 1770.222071] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1770.222700] ? vfs_write+0x188/0xae0 [ 1770.223107] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1770.223734] ? fput+0x2a/0x50 [ 1770.224093] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.224665] do_syscall_64+0x3b/0x90 [ 1770.225077] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1770.225644] RIP: 0033:0x7f61270a3b19 [ 1770.226056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.228117] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1770.228961] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1770.229767] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1770.230549] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.231287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1770.232131] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1770.232377] loop4: detected capacity change from 0 to 264192 [ 1770.232938] [ 1770.257484] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1770.273785] FAULT_INJECTION: forcing a failure. [ 1770.273785] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.274675] ramfs: Bad value for 'mode' [ 1770.275257] CPU: 0 PID: 12498 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1770.276902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1770.278168] Call Trace: [ 1770.278433] [ 1770.278673] dump_stack_lvl+0x8b/0xb3 [ 1770.279098] should_fail.cold+0x5/0xa [ 1770.279541] ? create_object.isra.0+0x3a/0xa20 [ 1770.280058] should_failslab+0x5/0x10 [ 1770.280490] kmem_cache_alloc+0x5b/0x480 [ 1770.280947] create_object.isra.0+0x3a/0xa20 [ 1770.281450] ? kasan_unpoison+0x23/0x50 [ 1770.281903] kmem_cache_alloc+0x239/0x480 [ 1770.282372] security_inode_alloc+0x34/0x160 [ 1770.282863] inode_init_always+0x52e/0xc50 [ 1770.283326] alloc_inode+0x84/0x230 [ 1770.283756] new_inode+0x23/0x240 [ 1770.284151] __ext4_new_inode+0x335/0x5c40 [ 1770.284631] ? _raw_spin_unlock_irqrestore+0x28/0x50 [ 1770.285208] ? find_held_lock+0x2c/0x110 [ 1770.285667] ? ext4_mark_inode_used+0x1a60/0x1a60 [ 1770.286216] ? lock_downgrade+0x6d0/0x6d0 [ 1770.286678] ? do_raw_spin_lock+0x121/0x260 [ 1770.287157] ? do_raw_spin_unlock+0x4f/0x210 [ 1770.287627] ? d_splice_alias+0x4d0/0xc60 [ 1770.288087] ? ext4_create+0x44f/0x4e0 [ 1770.288514] ext4_create+0x2e0/0x4e0 [ 1770.288951] ? ext4_symlink+0xc80/0xc80 [ 1770.289403] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1770.290020] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1770.290640] ? ext4_symlink+0xc80/0xc80 [ 1770.291097] lookup_open.isra.0+0x105a/0x1590 [ 1770.291595] ? vfs_tmpfile+0x2a0/0x2a0 [ 1770.292045] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1770.292663] path_openat+0x9ae/0x28a0 [ 1770.293107] ? path_lookupat+0x850/0x850 [ 1770.293563] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1770.294160] ? lock_is_held_type+0xd7/0x130 [ 1770.294648] do_filp_open+0x1aa/0x400 [ 1770.295079] ? may_open_dev+0xf0/0xf0 [ 1770.295489] ? alloc_fd+0x2f0/0x670 [ 1770.295896] ? rwlock_bug.part.0+0x90/0x90 [ 1770.296373] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1770.296995] ? _find_next_bit+0x1e5/0x260 [ 1770.297457] ? _raw_spin_unlock+0x24/0x40 [ 1770.297916] ? alloc_fd+0x2f0/0x670 [ 1770.298336] do_sys_openat2+0x16d/0x4d0 [ 1770.298775] ? build_open_flags+0x6f0/0x6f0 [ 1770.299249] ? lock_is_held_type+0xd7/0x130 [ 1770.299715] __x64_sys_openat+0x13f/0x1f0 [ 1770.300173] ? __x64_sys_open+0x1c0/0x1c0 [ 1770.300635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.301222] do_syscall_64+0x3b/0x90 [ 1770.301631] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1770.302213] RIP: 0033:0x7f47de354b19 [ 1770.302623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.304692] RSP: 002b:00007f47db8a9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1770.305547] RAX: ffffffffffffffda RBX: 00007f47de468020 RCX: 00007f47de354b19 [ 1770.306353] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1770.307147] RBP: 00007f47db8a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.307893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.308628] R13: 00007fffa187286f R14: 00007f47db8a9300 R15: 0000000000022000 [ 1770.309438] [ 1770.330019] ramfs: Bad value for 'mode' 12:12:12 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) [ 1770.368524] FAULT_INJECTION: forcing a failure. [ 1770.368524] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.369864] CPU: 0 PID: 12503 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1770.370782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1770.372070] Call Trace: [ 1770.372345] [ 1770.372592] dump_stack_lvl+0x8b/0xb3 [ 1770.373020] should_fail.cold+0x5/0xa [ 1770.373459] ? create_object.isra.0+0x3a/0xa20 [ 1770.373980] should_failslab+0x5/0x10 [ 1770.374394] kmem_cache_alloc+0x5b/0x480 [ 1770.374849] ? mark_held_locks+0x9e/0xe0 [ 1770.375309] create_object.isra.0+0x3a/0xa20 [ 1770.375780] ? kasan_unpoison+0x23/0x50 [ 1770.376236] kmem_cache_alloc_bulk+0x387/0x670 [ 1770.376762] io_submit_sqes.cold+0x20b/0x435 [ 1770.377264] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1770.377833] ? io_async_task_func+0x560/0x560 [ 1770.378343] ? io_rsrc_buf_put+0x50/0x50 [ 1770.378796] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1770.379351] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1770.379888] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1770.380376] ? wait_for_completion_io+0x270/0x270 [ 1770.380913] ? lock_is_held_type+0xd7/0x130 [ 1770.381373] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1770.381982] ? vfs_write+0x188/0xae0 [ 1770.382378] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1770.382981] ? fput+0x2a/0x50 [ 1770.383322] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.383908] do_syscall_64+0x3b/0x90 [ 1770.384327] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1770.384904] RIP: 0033:0x7f61270a3b19 [ 1770.385328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.387380] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1770.388238] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1770.389035] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1770.389812] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.390564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1770.391361] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1770.392167] 12:12:12 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:12:12 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x71) read(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) 12:12:12 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1770.449637] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 12:12:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x200000000000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1770.512090] ramfs: Bad value for 'mode' [ 1770.518420] ramfs: Bad value for 'mode' 12:12:12 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000480)) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4060800) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1b0, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffff001}, @WGDEVICE_A_PEERS={0x148, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "df5ea01dbe31d520fde08126d1e04ea5a624871feac995f0f65c9e9dbaefd2d7"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8000}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xeaa5}, @WGPEER_A_FLAGS={0x8, 0x3, 0xc}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x90}, 0x10) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000000)={0x1, 0xffffffff, 0x5, 0x11ab7294, 0x0, 0x5}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000200)) 12:12:12 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 12:12:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 14) [ 1770.584004] FAULT_INJECTION: forcing a failure. [ 1770.584004] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.585329] CPU: 0 PID: 12525 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1770.586256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1770.587452] Call Trace: [ 1770.587739] [ 1770.587981] dump_stack_lvl+0x8b/0xb3 [ 1770.588431] should_fail.cold+0x5/0xa [ 1770.588854] ? create_object.isra.0+0x3a/0xa20 [ 1770.589371] should_failslab+0x5/0x10 [ 1770.589797] kmem_cache_alloc+0x5b/0x480 [ 1770.590254] ? mark_held_locks+0x9e/0xe0 [ 1770.590718] create_object.isra.0+0x3a/0xa20 [ 1770.591206] ? kasan_unpoison+0x23/0x50 [ 1770.591651] kmem_cache_alloc_bulk+0x387/0x670 [ 1770.592166] io_submit_sqes.cold+0x20b/0x435 [ 1770.592665] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1770.593229] ? io_async_task_func+0x560/0x560 [ 1770.593734] ? io_rsrc_buf_put+0x50/0x50 [ 1770.594189] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1770.594737] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1770.595289] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1770.595747] ? wait_for_completion_io+0x270/0x270 [ 1770.596286] ? lock_is_held_type+0xd7/0x130 [ 1770.596760] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1770.597369] ? vfs_write+0x188/0xae0 [ 1770.597790] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1770.598377] ? fput+0x2a/0x50 [ 1770.598738] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.599279] do_syscall_64+0x3b/0x90 [ 1770.599717] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1770.600266] RIP: 0033:0x7f61270a3b19 [ 1770.600679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.602755] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1770.603633] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1770.604378] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1770.605172] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.605979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1770.606788] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1770.607615] [ 1770.635014] loop1: detected capacity change from 0 to 256 [ 1770.645053] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1770.654890] FAULT_INJECTION: forcing a failure. [ 1770.654890] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.657297] CPU: 1 PID: 12530 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1770.659031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1770.661407] Call Trace: [ 1770.661943] [ 1770.662411] dump_stack_lvl+0x8b/0xb3 [ 1770.663233] should_fail.cold+0x5/0xa [ 1770.664053] ? create_object.isra.0+0x3a/0xa20 [ 1770.665027] should_failslab+0x5/0x10 [ 1770.665824] kmem_cache_alloc+0x5b/0x480 [ 1770.666690] create_object.isra.0+0x3a/0xa20 [ 1770.667643] ? kasan_unpoison+0x23/0x50 [ 1770.668497] kmem_cache_alloc+0x239/0x480 [ 1770.669379] vfat_add_entry+0x2fa/0x2720 [ 1770.670254] ? lock_is_held_type+0xd7/0x130 [ 1770.671169] ? find_held_lock+0x2c/0x110 [ 1770.672038] ? lock_release+0x3b2/0x6f0 [ 1770.672883] ? current_time+0x72/0x2c0 [ 1770.673712] ? vfat_rmdir+0x450/0x450 [ 1770.674519] ? mark_held_locks+0x9e/0xe0 [ 1770.675374] ? ktime_get_coarse_real_ts64+0x159/0x190 [ 1770.676470] ? lockdep_hardirqs_on+0x79/0x100 [ 1770.677403] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1770.678457] ? ktime_get_coarse_real_ts64+0xfc/0x190 [ 1770.679521] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 1770.680551] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1770.681695] ? current_time+0x1e6/0x2c0 [ 1770.682537] ? igrab+0xb0/0xb0 [ 1770.683223] ? _raw_spin_unlock+0x24/0x40 [ 1770.684115] vfat_create+0x115/0x3c0 [ 1770.684909] ? vfat_add_entry+0x2720/0x2720 [ 1770.685832] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1770.686983] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1770.688147] ? vfat_add_entry+0x2720/0x2720 [ 1770.689064] lookup_open.isra.0+0x105a/0x1590 [ 1770.690019] ? vfs_tmpfile+0x2a0/0x2a0 [ 1770.690873] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1770.692048] path_openat+0x9ae/0x28a0 [ 1770.692873] ? path_lookupat+0x850/0x850 [ 1770.693729] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1770.694835] ? lock_is_held_type+0xd7/0x130 [ 1770.695755] do_filp_open+0x1aa/0x400 [ 1770.696562] ? may_open_dev+0xf0/0xf0 [ 1770.697390] ? alloc_fd+0x2f0/0x670 [ 1770.698162] ? rwlock_bug.part.0+0x90/0x90 [ 1770.699068] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1770.700231] ? _find_next_bit+0x1e5/0x260 [ 1770.701118] ? _raw_spin_unlock+0x24/0x40 [ 1770.701995] ? alloc_fd+0x2f0/0x670 [ 1770.702785] do_sys_openat2+0x16d/0x4d0 [ 1770.703633] ? build_open_flags+0x6f0/0x6f0 [ 1770.704538] ? lock_is_held_type+0xd7/0x130 [ 1770.705465] __x64_sys_openat+0x13f/0x1f0 [ 1770.706333] ? __x64_sys_open+0x1c0/0x1c0 [ 1770.707222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.708315] do_syscall_64+0x3b/0x90 [ 1770.709121] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1770.710194] RIP: 0033:0x7f47de354b19 [ 1770.710970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.714794] RSP: 002b:00007f47db8ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1770.716394] RAX: ffffffffffffffda RBX: 00007f47de467f60 RCX: 00007f47de354b19 [ 1770.717871] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1770.719338] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.720843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.722340] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1770.723886] [ 1770.780372] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1771.124964] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 12:12:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 15) 12:12:25 executing program 7: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe8) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r3, 0x0, r3, 0x0, 0x0, r3, r3, r3, r4]) r5 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000000002000100", @ANYRES32=r2, @ANYBLOB="040000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="95634dbae50276621dbaf49eda5b9125f54d20138ede2cb7e64773256d08c70d6eedc2d334c20b488ffcf18aeed0fea495cb24549a2ecf22c5", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB='\b\x00\r\x00', @ANYRES32=r1, @ANYBLOB="10000400000000002000010000000000"], 0x74, 0x1) ioprio_get$uid(0x0, r2) 12:12:25 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:12:25 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:12:25 executing program 3: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioprio_get$uid(0x3, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) 12:12:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x300000000000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:12:25 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:12:25 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 1782.889851] loop1: detected capacity change from 0 to 256 [ 1782.898011] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1782.901578] FAULT_INJECTION: forcing a failure. [ 1782.901578] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.902987] CPU: 1 PID: 12544 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1782.903880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1782.905067] Call Trace: [ 1782.905351] [ 1782.905585] dump_stack_lvl+0x8b/0xb3 [ 1782.906002] should_fail.cold+0x5/0xa [ 1782.906418] ? create_object.isra.0+0x3a/0xa20 [ 1782.906907] should_failslab+0x5/0x10 [ 1782.907315] kmem_cache_alloc+0x5b/0x480 [ 1782.907785] create_object.isra.0+0x3a/0xa20 [ 1782.908275] ? kasan_unpoison+0x23/0x50 [ 1782.908719] kmem_cache_alloc+0x239/0x480 [ 1782.909176] xas_alloc+0x332/0x440 [ 1782.909568] xas_create+0x607/0x1030 [ 1782.909980] ? lock_acquire+0x1b2/0x4d0 [ 1782.910425] xas_store+0x90/0x1c40 [ 1782.910815] ? xas_find_conflict+0x4a6/0x9e0 [ 1782.911284] __filemap_add_folio+0x3de/0xdc0 [ 1782.911777] ? filemap_map_pages+0x1330/0x1330 [ 1782.912274] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1782.912797] ? __alloc_pages+0x3a7/0x4e0 [ 1782.913248] ? memcg_drain_all_list_lrus+0x700/0x700 [ 1782.913804] filemap_add_folio+0x9b/0x1b0 [ 1782.914246] ? add_to_page_cache_locked+0x160/0x160 [ 1782.914775] ? alloc_pages+0x1a8/0x2f0 [ 1782.915190] __filemap_get_folio+0x434/0xfd0 [ 1782.915668] ? filemap_read+0xbb0/0xbb0 [ 1782.916098] ? mark_held_locks+0x9e/0xe0 [ 1782.916550] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1782.917144] ? pagecache_get_page+0x6b/0x220 [ 1782.917631] pagecache_get_page+0x2e/0x220 [ 1782.918099] __getblk_slow+0x1ca/0xab0 [ 1782.918532] ? lock_is_held_type+0xd7/0x130 [ 1782.919004] __bread_gfp+0x26c/0x3b0 [ 1782.919411] fat_ent_bread+0x175/0x2e0 [ 1782.919853] fat_alloc_clusters+0x571/0xf30 [ 1782.920338] ? fat_ent_write+0x1a0/0x1a0 [ 1782.920783] ? lock_release+0x3b2/0x6f0 [ 1782.921233] ? __is_insn_slot_addr+0x144/0x250 [ 1782.921740] ? kernel_text_address+0x53/0xb0 [ 1782.922230] ? __kernel_text_address+0x9/0x30 [ 1782.922719] ? unwind_get_return_address+0x51/0x90 [ 1782.923232] ? create_prof_cpu_mask+0x20/0x20 [ 1782.923731] ? arch_stack_walk+0x99/0xf0 [ 1782.924185] fat_add_new_entries+0x1f4/0xbc0 [ 1782.924666] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1782.925268] ? fat_bmap+0x1fc/0x460 [ 1782.925677] ? fat__get_entry+0x626/0x8e0 [ 1782.926121] ? vfat_add_entry+0x1f95/0x2720 [ 1782.926599] ? fat_alloc_new_dir+0xd00/0xd00 [ 1782.927084] ? fat_bmap+0x460/0x460 [ 1782.927489] ? vfat_add_entry+0x1f95/0x2720 [ 1782.927988] ? mark_lock+0xfc/0x2e10 [ 1782.928404] ? do_syscall_64+0x3b/0x90 [ 1782.928830] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1782.929408] ? lock_chain_count+0x20/0x20 [ 1782.929867] fat_add_entries+0xc1e/0x11a0 [ 1782.930336] ? fat_parse_long.constprop.0+0xb50/0xb50 [ 1782.930900] ? mark_held_locks+0x9e/0xe0 [ 1782.931351] ? kasan_quarantine_put+0x87/0x1e0 [ 1782.931864] ? lockdep_hardirqs_on+0x79/0x100 [ 1782.932356] ? kasan_quarantine_put+0x87/0x1e0 [ 1782.932857] ? vfat_add_entry+0x1f95/0x2720 [ 1782.933339] vfat_add_entry+0x1fb3/0x2720 [ 1782.933810] ? vfat_rmdir+0x450/0x450 [ 1782.934233] ? mark_lock+0x1b9c/0x2e10 [ 1782.934654] ? ktime_get_coarse_real_ts64+0x159/0x190 [ 1782.935223] ? lockdep_hardirqs_on+0x79/0x100 [ 1782.935717] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1782.936261] ? ktime_get_coarse_real_ts64+0xfc/0x190 [ 1782.936806] ? mutex_lock_io_nested+0x1260/0x12c0 [ 1782.937346] ? __sanitizer_cov_trace_const_cmp4+0x1/0x70 [ 1782.937935] ? current_time+0x1e6/0x2c0 [ 1782.938387] ? igrab+0xb0/0xb0 [ 1782.938744] ? _raw_spin_unlock+0x24/0x40 [ 1782.939198] vfat_create+0x115/0x3c0 [ 1782.939612] ? vfat_add_entry+0x2720/0x2720 [ 1782.940107] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1782.940711] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1782.941307] ? vfat_add_entry+0x2720/0x2720 [ 1782.941783] lookup_open.isra.0+0x105a/0x1590 [ 1782.942283] ? vfs_tmpfile+0x2a0/0x2a0 [ 1782.942729] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1782.943336] path_openat+0x9ae/0x28a0 [ 1782.943776] ? path_lookupat+0x850/0x850 [ 1782.944229] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1782.944801] ? lock_is_held_type+0xd7/0x130 [ 1782.945271] do_filp_open+0x1aa/0x400 [ 1782.945683] ? may_open_dev+0xf0/0xf0 [ 1782.946098] ? alloc_fd+0x2f0/0x670 [ 1782.946501] ? rwlock_bug.part.0+0x90/0x90 [ 1782.946961] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1782.947556] ? _find_next_bit+0x1e5/0x260 [ 1782.948014] ? _raw_spin_unlock+0x24/0x40 [ 1782.948470] ? alloc_fd+0x2f0/0x670 [ 1782.948868] do_sys_openat2+0x16d/0x4d0 [ 1782.949297] ? build_open_flags+0x6f0/0x6f0 [ 1782.949765] ? lock_is_held_type+0xd7/0x130 [ 1782.950243] __x64_sys_openat+0x13f/0x1f0 [ 1782.950698] ? __x64_sys_open+0x1c0/0x1c0 [ 1782.951146] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.951714] do_syscall_64+0x3b/0x90 [ 1782.952116] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1782.952672] RIP: 0033:0x7f47de354b19 [ 1782.953065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.955029] RSP: 002b:00007f47db8ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1782.955875] RAX: ffffffffffffffda RBX: 00007f47de467f60 RCX: 00007f47de354b19 [ 1782.956633] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1782.957387] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1782.958148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1782.958908] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1782.959565] FAULT_INJECTION: forcing a failure. [ 1782.959565] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.959686] [ 1782.962099] CPU: 0 PID: 12551 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1782.963736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1782.965011] loop4: detected capacity change from 0 to 264192 [ 1782.965926] Call Trace: [ 1782.965938] [ 1782.965950] dump_stack_lvl+0x8b/0xb3 [ 1782.968419] should_fail.cold+0x5/0xa [ 1782.969187] ? create_object.isra.0+0x3a/0xa20 [ 1782.970286] should_failslab+0x5/0x10 [ 1782.971032] kmem_cache_alloc+0x5b/0x480 [ 1782.972011] ? mark_held_locks+0x9e/0xe0 [ 1782.972825] create_object.isra.0+0x3a/0xa20 [ 1782.973873] ? kasan_unpoison+0x23/0x50 [ 1782.974674] kmem_cache_alloc_bulk+0x387/0x670 [ 1782.975754] io_submit_sqes.cold+0x20b/0x435 [ 1782.976642] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1782.977627] ? io_async_task_func+0x560/0x560 [ 1782.978519] ? io_rsrc_buf_put+0x50/0x50 [ 1782.979319] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1782.980304] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1782.980707] ramfs: Bad value for 'mode' [ 1782.981264] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1782.982511] ? wait_for_completion_io+0x270/0x270 [ 1782.983451] ? lock_is_held_type+0xd7/0x130 [ 1782.983914] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1782.984299] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1782.985826] ramfs: Bad value for 'mode' [ 1782.985962] ? vfs_write+0x188/0xae0 [ 1782.987105] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1782.988191] ? fput+0x2a/0x50 [ 1782.988816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.989887] do_syscall_64+0x3b/0x90 [ 1782.990687] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1782.991786] RIP: 0033:0x7f61270a3b19 [ 1782.992563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.996374] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1782.997958] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1782.999436] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1783.000928] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1783.002407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1783.003896] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1783.005402] 12:12:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x400000000000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:12:25 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) [ 1783.112649] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1783.138909] ramfs: Bad value for 'mode' [ 1783.141363] ramfs: Bad value for 'mode' 12:12:25 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:12:25 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:12:25 executing program 7: ioprio_get$uid(0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRESOCT=r4, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000000001000000020000001ec217efa18cf30f17eb8c2620af5b5f5c9377e4ae44944cb980bd48924da84740d0e96c322136630bd778223a9ff2626e3ae79247828bcc56cb02deae7d1d4d4e3abb42cff1b55575cda4c64a92145afc8b75ab53f8ed890632a3d4af64f7078bf65f0bea8d4b746439a9297f3e138697f2f931b4387bfa9fece2d413bdfd78831ded6dcff6c7aaaeee87ef8682a7d4486bec1aa2d3994f6f2c7d3c723b024e39f09309190080308d90e5944cd3d4c8e1b917b1aa45458666c7b0600e460a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c35411b3b23693da400000001000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x160}, 0x40002000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r6) pread64(r6, &(0x7f0000000280)=""/122, 0x7a, 0x7) ioprio_set$uid(0x0, r1, 0x2007) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x4, 0x738, [0x0, 0x20000400, 0x20000430, 0x2000057e], 0x0, &(0x7f00000000c0), &(0x7f0000000400)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x21, 0x88e5, 'hsr0\x00', 'syzkaller0\x00', 'team_slave_1\x00', 'bond0\x00', @link_local, [0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xee, 0xee, 0x11e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, r1, r5, 0xee00, 0x3, 0x5}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x0, 0x4, 0x5, 0x45}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x0, 0x2, 0xa01, 'wlan1\x00', 'veth1_vlan\x00', 'syzkaller1\x00', 'vcan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0xff], 0x9e, 0x21e, 0x266, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x6, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7fffffff, 'system_u:object_r:systemd_tmpfiles_exec_t:s0\x00'}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x401, 'syz1\x00', {0x3}}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x7, 0x8, {0xd8af}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x3, 0x10, 0x88f8, 'team_slave_1\x00', 'veth1_to_batadv\x00', 'ipvlan1\x00', 'veth1_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xee, 0x18e, 0x1de, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x1, 0x1}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@local, [0xffffff00, 0xffffff, 0xff000000, 0xffffff00], 0x4e20, 0x87183d96fe245adb, 0x7, 0x4e22, 0x8, 0x20}}}], [@common=@log={'log\x00', 0x28, {{0xc5, "c3a1aad6249784b374dd6c653fc24de4d2a09ebb98a7cd6f0d7c59b5f690", 0x6}}}, @common=@log={'log\x00', 0x28, {{0x3, "b228f50b7d691c2c8fe0ecedbaae3a48233aa4f3a8d7df8969fab931b7f9", 0x1}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz1\x00', {0x10000}}}}}, {0x3, 0x20, 0x20e8, '\x00', 'veth1_to_batadv\x00', 'team_slave_0\x00', 'veth0_to_hsr\x00', @random="af9b685f273e", [0xff, 0xff, 0x0, 0x0, 0x0, 0x2a34d61eb77a48b], @broadcast, [0xff, 0x0, 0xff, 0x0, 0xff], 0x9e, 0x9e, 0x116, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x4, 0x6, 0x8847, 0x2, 0x1}}}], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0xac, 0x7f, 0x1, 0x0, "61be4c5b2cbe73add677e03e5e7bd4a81f7a6507d5677e949c609c015e6e8156c8307d23c17e6729d9b1dbf50985849a1ab7a60b188ac4908558303636a6f7cf"}}}}]}]}, 0x7b0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_persistent(0x16, 0xee00, r7) 12:12:25 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1783.178942] FAULT_INJECTION: forcing a failure. [ 1783.178942] name failslab, interval 1, probability 0, space 0, times 0 [ 1783.178981] loop4: detected capacity change from 0 to 264192 [ 1783.180294] CPU: 1 PID: 12568 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1783.180313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1783.180324] Call Trace: [ 1783.180330] [ 1783.180335] dump_stack_lvl+0x8b/0xb3 [ 1783.184499] should_fail.cold+0x5/0xa [ 1783.184913] ? create_object.isra.0+0x3a/0xa20 [ 1783.185405] should_failslab+0x5/0x10 [ 1783.185804] kmem_cache_alloc+0x5b/0x480 [ 1783.186242] ? mark_held_locks+0x9e/0xe0 [ 1783.186677] create_object.isra.0+0x3a/0xa20 [ 1783.187152] ? kasan_unpoison+0x23/0x50 [ 1783.187581] kmem_cache_alloc_bulk+0x387/0x670 [ 1783.188080] io_submit_sqes.cold+0x20b/0x435 [ 1783.188575] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1783.189133] ? io_async_task_func+0x560/0x560 [ 1783.189634] ? io_rsrc_buf_put+0x50/0x50 [ 1783.190074] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1783.190638] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1783.191174] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1783.191666] ? wait_for_completion_io+0x270/0x270 [ 1783.192197] ? lock_is_held_type+0xd7/0x130 [ 1783.192667] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1783.193272] ? vfs_write+0x188/0xae0 [ 1783.193689] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1783.194289] ? fput+0x2a/0x50 [ 1783.194639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1783.195203] do_syscall_64+0x3b/0x90 [ 1783.195612] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1783.196173] RIP: 0033:0x7f61270a3b19 [ 1783.196562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1783.198512] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1783.199313] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1783.200065] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1783.200820] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1783.201579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1783.202326] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1783.203090] [ 1783.206296] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 12:12:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 16) 12:12:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x500000000000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1783.213399] FAULT_INJECTION: forcing a failure. [ 1783.213399] name failslab, interval 1, probability 0, space 0, times 0 [ 1783.215185] CPU: 1 PID: 12579 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1783.216111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1783.217304] Call Trace: [ 1783.217583] [ 1783.217826] dump_stack_lvl+0x8b/0xb3 [ 1783.218243] should_fail.cold+0x5/0xa [ 1783.218656] should_failslab+0x5/0x10 [ 1783.219056] __kmalloc_track_caller+0x79/0x310 [ 1783.219543] ? sidtab_sid2str_get+0x17c/0x650 [ 1783.220050] kmemdup+0x23/0x50 [ 1783.220393] sidtab_sid2str_get+0x17c/0x650 [ 1783.220861] sidtab_entry_to_string+0x33/0x110 [ 1783.221358] security_sid_to_context_core+0x337/0x560 [ 1783.221918] selinux_inode_init_security+0x4c2/0x6b0 [ 1783.222464] ? selinux_dentry_init_security+0x2c0/0x2c0 [ 1783.223042] ? posix_acl_fix_xattr_userns+0x390/0x390 [ 1783.223606] ? lock_is_held_type+0xd7/0x130 [ 1783.224088] ? find_held_lock+0x2c/0x110 [ 1783.224531] security_inode_init_security+0x151/0x350 [ 1783.225083] ? ext4_init_acl+0x310/0x310 [ 1783.225516] ? inode_free_by_rcu+0x20/0x20 [ 1783.225985] ? chksum_update+0x4c/0xb0 [ 1783.226427] __ext4_new_inode+0x3af8/0x5c40 [ 1783.226909] ? ext4_mark_inode_used+0x1a60/0x1a60 [ 1783.227430] ? lock_downgrade+0x6d0/0x6d0 [ 1783.227884] ? do_raw_spin_lock+0x121/0x260 [ 1783.228362] ? d_splice_alias+0x4d0/0xc60 [ 1783.228828] ? ext4_create+0x44f/0x4e0 [ 1783.229255] ext4_create+0x2e0/0x4e0 [ 1783.229674] ? ext4_symlink+0xc80/0xc80 [ 1783.230103] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1783.230699] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1783.231296] ? ext4_symlink+0xc80/0xc80 [ 1783.231748] lookup_open.isra.0+0x105a/0x1590 [ 1783.232240] ? vfs_tmpfile+0x2a0/0x2a0 [ 1783.232686] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1783.233290] path_openat+0x9ae/0x28a0 [ 1783.233724] ? path_lookupat+0x850/0x850 [ 1783.234164] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1783.234740] ? lock_is_held_type+0xd7/0x130 [ 1783.235210] do_filp_open+0x1aa/0x400 [ 1783.235641] ? may_open_dev+0xf0/0xf0 [ 1783.236067] ? alloc_fd+0x2f0/0x670 [ 1783.236474] ? rwlock_bug.part.0+0x90/0x90 [ 1783.236937] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1783.237526] ? _find_next_bit+0x1e5/0x260 [ 1783.237974] ? _raw_spin_unlock+0x24/0x40 [ 1783.238428] ? alloc_fd+0x2f0/0x670 [ 1783.238838] do_sys_openat2+0x16d/0x4d0 [ 1783.239277] ? build_open_flags+0x6f0/0x6f0 [ 1783.239738] ? lock_is_held_type+0xd7/0x130 [ 1783.240213] __x64_sys_openat+0x13f/0x1f0 [ 1783.240666] ? __x64_sys_open+0x1c0/0x1c0 [ 1783.241104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1783.241675] do_syscall_64+0x3b/0x90 [ 1783.242075] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1783.242636] RIP: 0033:0x7f47de354b19 [ 1783.243019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1783.245021] RSP: 002b:00007f47db8ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1783.245839] RAX: ffffffffffffffda RBX: 00007f47de467f60 RCX: 00007f47de354b19 [ 1783.246615] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1783.247381] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1783.248161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1783.248929] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1783.249718] [ 1783.303571] ramfs: Bad value for 'mode' [ 1783.318634] ramfs: Bad value for 'mode' 12:12:25 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) [ 1783.335741] FAULT_INJECTION: forcing a failure. [ 1783.335741] name failslab, interval 1, probability 0, space 0, times 0 [ 1783.337034] CPU: 1 PID: 12589 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1783.337915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1783.339117] Call Trace: [ 1783.339388] [ 1783.339640] dump_stack_lvl+0x8b/0xb3 [ 1783.340057] should_fail.cold+0x5/0xa [ 1783.340470] ? create_object.isra.0+0x3a/0xa20 [ 1783.340971] should_failslab+0x5/0x10 [ 1783.341377] kmem_cache_alloc+0x5b/0x480 [ 1783.341811] ? mark_held_locks+0x9e/0xe0 [ 1783.342273] create_object.isra.0+0x3a/0xa20 [ 1783.342757] ? kasan_unpoison+0x23/0x50 [ 1783.343195] kmem_cache_alloc_bulk+0x387/0x670 [ 1783.343706] io_submit_sqes.cold+0x20b/0x435 [ 1783.344201] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1783.344756] ? io_async_task_func+0x560/0x560 [ 1783.345246] ? io_rsrc_buf_put+0x50/0x50 [ 1783.345690] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1783.346233] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1783.346773] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1783.347250] ? wait_for_completion_io+0x270/0x270 [ 1783.347778] ? lock_is_held_type+0xd7/0x130 [ 1783.348252] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1783.348846] ? vfs_write+0x188/0xae0 [ 1783.349259] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1783.349858] ? fput+0x2a/0x50 [ 1783.350209] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1783.350780] do_syscall_64+0x3b/0x90 [ 1783.351207] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1783.351788] RIP: 0033:0x7f61270a3b19 [ 1783.352194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1783.354181] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1783.355009] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1783.355802] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1783.356575] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1783.357347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1783.358122] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1783.358913] 12:12:25 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:12:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 17) [ 1783.374473] loop4: detected capacity change from 0 to 264192 [ 1783.394321] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1783.432723] loop1: detected capacity change from 0 to 256 [ 1783.442986] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1783.447522] FAULT_INJECTION: forcing a failure. [ 1783.447522] name failslab, interval 1, probability 0, space 0, times 0 [ 1783.448941] CPU: 1 PID: 12595 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1783.449880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1783.451068] Call Trace: [ 1783.451340] [ 1783.451580] dump_stack_lvl+0x8b/0xb3 [ 1783.451998] should_fail.cold+0x5/0xa [ 1783.452421] ? create_object.isra.0+0x3a/0xa20 [ 1783.452930] should_failslab+0x5/0x10 [ 1783.453347] kmem_cache_alloc+0x5b/0x480 [ 1783.453805] create_object.isra.0+0x3a/0xa20 [ 1783.454291] ? kasan_unpoison+0x23/0x50 [ 1783.454732] kmem_cache_alloc+0x239/0x480 [ 1783.455194] alloc_buffer_head+0x20/0x140 [ 1783.455658] alloc_page_buffers+0x24a/0x690 [ 1783.456135] __getblk_slow+0x393/0xab0 [ 1783.456570] ? lock_is_held_type+0xd7/0x130 [ 1783.457049] __bread_gfp+0x26c/0x3b0 [ 1783.457464] fat_ent_bread+0x175/0x2e0 [ 1783.457898] fat_alloc_clusters+0x571/0xf30 [ 1783.458386] ? fat_ent_write+0x1a0/0x1a0 [ 1783.458841] ? lock_release+0x3b2/0x6f0 [ 1783.459298] ? __is_insn_slot_addr+0x144/0x250 [ 1783.459824] ? kernel_text_address+0x53/0xb0 [ 1783.460312] ? __kernel_text_address+0x9/0x30 [ 1783.460802] ? unwind_get_return_address+0x51/0x90 [ 1783.461340] ? create_prof_cpu_mask+0x20/0x20 [ 1783.461832] ? arch_stack_walk+0x99/0xf0 [ 1783.462283] fat_add_new_entries+0x1f4/0xbc0 [ 1783.462758] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1783.463360] ? fat_bmap+0x1fc/0x460 [ 1783.463776] ? fat__get_entry+0x626/0x8e0 [ 1783.464235] ? vfat_add_entry+0x1f95/0x2720 [ 1783.464722] ? fat_alloc_new_dir+0xd00/0xd00 [ 1783.465214] ? fat_bmap+0x460/0x460 [ 1783.465615] ? vfat_add_entry+0x1f95/0x2720 [ 1783.466093] ? mark_lock+0xfc/0x2e10 [ 1783.466503] ? do_syscall_64+0x3b/0x90 [ 1783.466930] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1783.467506] ? lock_chain_count+0x20/0x20 [ 1783.467984] fat_add_entries+0xc1e/0x11a0 [ 1783.468453] ? fat_parse_long.constprop.0+0xb50/0xb50 [ 1783.469025] ? mark_held_locks+0x9e/0xe0 [ 1783.469471] ? kasan_quarantine_put+0x87/0x1e0 [ 1783.469974] ? lockdep_hardirqs_on+0x79/0x100 [ 1783.470470] ? kasan_quarantine_put+0x87/0x1e0 [ 1783.470975] ? vfat_add_entry+0x1f95/0x2720 [ 1783.471463] vfat_add_entry+0x1fb3/0x2720 [ 1783.471949] ? vfat_rmdir+0x450/0x450 [ 1783.472371] ? mark_lock+0x1b9c/0x2e10 [ 1783.472795] ? ktime_get_coarse_real_ts64+0x159/0x190 [ 1783.473365] ? lockdep_hardirqs_on+0x79/0x100 [ 1783.473855] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1783.474400] ? ktime_get_coarse_real_ts64+0xfc/0x190 [ 1783.474950] ? mutex_lock_io_nested+0x1260/0x12c0 [ 1783.475485] ? __sanitizer_cov_trace_const_cmp4+0x1/0x70 [ 1783.476084] ? current_time+0x1e6/0x2c0 [ 1783.476529] ? igrab+0xb0/0xb0 [ 1783.476895] ? _raw_spin_unlock+0x24/0x40 [ 1783.477358] vfat_create+0x115/0x3c0 [ 1783.477777] ? vfat_add_entry+0x2720/0x2720 [ 1783.478265] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1783.478864] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1783.479462] ? vfat_add_entry+0x2720/0x2720 [ 1783.479934] lookup_open.isra.0+0x105a/0x1590 [ 1783.480426] ? vfs_tmpfile+0x2a0/0x2a0 [ 1783.480869] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1783.481476] path_openat+0x9ae/0x28a0 [ 1783.481898] ? path_lookupat+0x850/0x850 [ 1783.482347] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1783.482919] ? lock_is_held_type+0xd7/0x130 [ 1783.483400] do_filp_open+0x1aa/0x400 [ 1783.483815] ? may_open_dev+0xf0/0xf0 [ 1783.484240] ? alloc_fd+0x2f0/0x670 [ 1783.484648] ? rwlock_bug.part.0+0x90/0x90 [ 1783.485109] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1783.485701] ? _find_next_bit+0x1e5/0x260 [ 1783.486154] ? _raw_spin_unlock+0x24/0x40 [ 1783.486614] ? alloc_fd+0x2f0/0x670 [ 1783.487022] do_sys_openat2+0x16d/0x4d0 [ 1783.487462] ? build_open_flags+0x6f0/0x6f0 [ 1783.487946] ? lock_is_held_type+0xd7/0x130 [ 1783.488426] __x64_sys_openat+0x13f/0x1f0 [ 1783.488877] ? __x64_sys_open+0x1c0/0x1c0 [ 1783.489337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1783.489905] do_syscall_64+0x3b/0x90 [ 1783.490316] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1783.490876] RIP: 0033:0x7f47de354b19 [ 1783.491280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1783.493249] RSP: 002b:00007f47db8ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1783.494062] RAX: ffffffffffffffda RBX: 00007f47de467f60 RCX: 00007f47de354b19 [ 1783.494827] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1783.495587] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1783.496365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1783.497130] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1783.497912] [ 1783.558031] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:12:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 18) [ 1796.459597] loop1: detected capacity change from 0 to 256 [ 1796.467102] loop7: detected capacity change from 0 to 264192 12:12:38 executing program 0: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:12:38 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:12:38 executing program 7: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffff43fe, 0x9, &(0x7f0000000740)=[{&(0x7f0000000080)="dbeb3b277d692b9997b88f4fa6b60bf878b6770ed535575f1f5db00cb6e1d4b9d6c56577d500f826d8dfb0560fc11a5564e16e570998b4ce317bea35d5dedbb815bbbe26b0d30cb98b9cd0f4376056bff90acbd905cebaae84d06774abe8861c5d556149273cb898491327186f987d9bbb8bf68839e312ca3eb74f4831d15adf04bc5537557525f4ad2a908888af291791484461af6566518380161ea92fe25ba97629012c3d83b17aa1f74724c4dc5dafbc", 0xb2, 0x7c}, {&(0x7f0000000140)="ec401cf98188613191a1fd0466b5995c9f84a46fa6f40cfd0e236617f83ec97effa675fed5be4350157ab1d98cde4f04e9eba33d076f7cdadd360e4a3a045e74b5d7f621874da047c1273bbe93a96205f3b227d1d2240b8ed738d1d84c0c28268a70cbec1282b569fea6fd413c98211053647ae6fe2227cd89a2e6ed099d1f2f6a64c0ebbcac17f0cc33a246bd9675187c049bca635615e9c5836cc1923783a9e2bee8eed52f99d9847225b9f3fe0aa909488f948e9bcef7dfba1f9e450b7b5b40f0589c40afecf53e5ca3", 0xcb, 0x5}, {&(0x7f0000000240)="33ccbbfcac6d6ae08929c242885502c782dafe33cc8e34e4fe611b7e5961f3e918806900292c7c5efea9f25e62efe1b1e076d0fec5e6780f945499903a7deab9ada356b14366b796b2caf8ba08033ba3cfbc5415e840fad179e62e5bdae9b17a9a554db5b4683d04c5dab8609072fa6d14801349dbe757d6842a2ab4bfd5eac6956b3f969b42c41a410d734a3c6a708842a540962ead6d", 0x97}, {&(0x7f0000000300)="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", 0xfc, 0x100}, {&(0x7f0000000400)="3cd1d340a0e8d598ce6609fb9a63f98f05a2250858fccf105599d4c843d7b8197f6eeff3781fb6ab6b53a29e36d49c57fc8dfcb73389f83009fd2867a172b2dd68753807fb12817150431a86dc631df5a54fabfb061df960027cd9d11c6b922089e9b3cdbce3965426362cecc75a1812ea78a11cce07e76a5c493bdad741f7607f568afe7f7a3808f53b7551f3706de18318babc", 0x94, 0x40}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000005c0)="e23e94e35c07f4db33e6db52d0f38421e0b9cd815e40cec87664179148625108ba340d4a34e7bc1f8ecd6a4642289eae48880bddfd7d04b0764f9ad318", 0x3d, 0xffffffffffffff81}, {&(0x7f0000000600)="4252e03f86579b43142a2a18825b32a7b3b7f267786443d7aaf3892466", 0x1d, 0x80000001}, {&(0x7f0000000640)="b2c3ac7e3e0339ae5c9dcf4aa41ee958cc7eef4516251c6ebb522aa6f75d0c30cdf74892de561b1265d8cb0d2084ac627436aed2d6ae28ac8aa39cf2ff017e959cc3dd3676cc3926a051b48a2967f5cbdd311ed1bdcae7adb0a80e48a32236ab5ae78fdd74c64a22e0416554fb19c6738e38f0259feedc9f0666a2431c88842f920ccf9b4c0aab2a26309359bafc32043ba900b501a2d93b914e7215e2bad675bd653b39e85c8e435e84ceac4f526e735adc38ee9d9c63d68576fbb43dbf30a333daf225893bf5b49030f8fa650f61", 0xcf, 0x5}], 0x2800, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB=',audit,permit_directio,obj_user=,\x00']) ioprio_get$uid(0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000840)={{{@in=@empty, @in=@multicast2, 0x4e22, 0x3ff, 0x4e22, 0x1, 0x2, 0x20, 0x0, 0x84, 0x0, r3}, {0x80000001, 0x10000, 0x2, 0x5, 0x10001, 0x890, 0x7fff}, {0x4, 0xffff, 0xffffffff, 0x8}, 0x3, 0x6e6bbf, 0x1, 0x0, 0x2}, {{@in=@private=0xa010100, 0x4d2, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x1, 0x2, 0xffffe550, 0x1ff, 0xc77}}, 0xe8) 12:12:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x600000000000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:12:38 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 12:12:38 executing program 3: ioprio_get$uid(0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg(r4, &(0x7f0000004400)=[{{&(0x7f00000001c0)=@can={0x1d, r6}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)="44196b7cf350255ae0caf229e54d0a2bf1e5cb47", 0x14}], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000010900)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000010a00)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000010ac0)={'ip6gre0\x00', &(0x7f0000010a40)={'sit0\x00', r0, 0x2f, 0x40, 0x1, 0x8, 0x14, @remote, @mcast1, 0x8, 0x7800, 0x3d, 0x1}}) socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'sit0\x00'}) sendmmsg(r5, &(0x7f0000004400), 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg(r10, &(0x7f0000004400)=[{{&(0x7f00000001c0)=@can={0x1d, r12}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)="44196b7cf350255ae0caf229e54d0a2bf1e5cb47", 0x14}], 0x1}}], 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000112c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000011280)={&(0x7f0000000700)={0x75c, 0x0, 0x610, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r0}, {0x150, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r7}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}]}}, {{0x8, 0x1, r0}, {0x1cc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x2}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x75c}, 0x1, 0x0, 0x0, 0x40800}, 0x44) lchown(&(0x7f0000000000)='./file0\x00', r1, r2) 12:12:38 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1796.490467] loop7: detected capacity change from 0 to 264192 [ 1796.511780] loop4: detected capacity change from 0 to 264192 [ 1796.513083] FAULT_INJECTION: forcing a failure. [ 1796.513083] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.515513] CPU: 0 PID: 12607 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1796.517236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1796.519574] Call Trace: [ 1796.520128] [ 1796.520616] dump_stack_lvl+0x8b/0xb3 [ 1796.521519] should_fail.cold+0x5/0xa [ 1796.522401] ? io_setup_async_rw+0x199/0x620 [ 1796.523389] should_failslab+0x5/0x10 [ 1796.524252] __kmalloc+0x72/0x330 [ 1796.525026] io_setup_async_rw+0x199/0x620 [ 1796.525966] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1796.527191] io_write+0x941/0xbe0 12:12:38 executing program 7: ioprio_get$uid(0x3, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) faccessat2(r1, &(0x7f00000000c0)='./file0\x00', 0xc0, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setresuid(r0, 0xee01, r2) r3 = eventfd2(0xef29, 0x0) fcntl$getown(r3, 0x9) [ 1796.527989] ? io_read+0xff0/0xff0 [ 1796.528893] ? x86_pmu_enable+0xa20/0xd90 [ 1796.529835] ? lock_chain_count+0x20/0x20 [ 1796.530789] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1796.532005] io_issue_sqe+0xe8a/0x6980 [ 1796.532904] ? lock_release+0x3b2/0x6f0 [ 1796.533785] ? __fget_files+0x26b/0x470 [ 1796.534689] ? lock_downgrade+0x6d0/0x6d0 [ 1796.535614] ? io_openat2+0xbc0/0xbc0 [ 1796.536498] ? lockdep_hardirqs_on+0x79/0x100 [ 1796.537499] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1796.538755] ? lock_is_held_type+0xd7/0x130 [ 1796.539722] io_submit_sqes+0x16ba/0x8fc0 [ 1796.540702] ? io_async_task_func+0x560/0x560 [ 1796.541713] ? io_rsrc_buf_put+0x50/0x50 [ 1796.542627] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1796.543738] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1796.544854] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1796.545820] ? wait_for_completion_io+0x270/0x270 [ 1796.546904] ? lock_is_held_type+0xd7/0x130 [ 1796.547874] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1796.549087] ? vfs_write+0x188/0xae0 [ 1796.549924] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1796.551137] ? fput+0x2a/0x50 [ 1796.551864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1796.553007] do_syscall_64+0x3b/0x90 [ 1796.553848] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1796.554979] RIP: 0033:0x7f61270a3b19 [ 1796.555798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1796.557863] FAULT_INJECTION: forcing a failure. [ 1796.557863] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.559839] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1796.559870] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1796.564268] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1796.565817] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1796.567366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1796.568941] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1796.570531] [ 1796.571044] CPU: 1 PID: 12622 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1796.572010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1796.573311] Call Trace: [ 1796.573594] [ 1796.573832] dump_stack_lvl+0x8b/0xb3 [ 1796.574269] should_fail.cold+0x5/0xa [ 1796.574694] ? ext4_inode_attach_jinode+0x110/0x230 [ 1796.575250] should_failslab+0x5/0x10 [ 1796.575650] kmem_cache_alloc+0x5b/0x480 [ 1796.576135] ext4_inode_attach_jinode+0x110/0x230 [ 1796.576662] ext4_file_open+0x2f9/0xb80 [ 1796.577102] ? ext4_file_write_iter+0x18d0/0x18d0 [ 1796.577627] ? selinux_inode_create+0x30/0x30 [ 1796.578123] ? lock_downgrade+0x6d0/0x6d0 [ 1796.578575] ? fsnotify_perm.part.0+0x22d/0x620 [ 1796.579086] do_dentry_open+0x4c6/0x1110 [ 1796.579539] ? ext4_file_write_iter+0x18d0/0x18d0 [ 1796.580082] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1796.580663] ? may_open+0x1f3/0x420 [ 1796.581076] path_openat+0x1a3e/0x28a0 [ 1796.581515] ? path_lookupat+0x850/0x850 [ 1796.581967] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1796.582540] ? lock_is_held_type+0xd7/0x130 [ 1796.583017] do_filp_open+0x1aa/0x400 [ 1796.583449] ? may_open_dev+0xf0/0xf0 [ 1796.583903] ? alloc_fd+0x2f0/0x670 [ 1796.584302] ? rwlock_bug.part.0+0x90/0x90 [ 1796.584766] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1796.585361] ? _find_next_bit+0x1e5/0x260 [ 1796.585805] ? _raw_spin_unlock+0x24/0x40 [ 1796.586263] ? alloc_fd+0x2f0/0x670 [ 1796.586672] do_sys_openat2+0x16d/0x4d0 [ 1796.587106] ? build_open_flags+0x6f0/0x6f0 [ 1796.587584] ? lock_is_held_type+0xd7/0x130 [ 1796.588074] __x64_sys_openat+0x13f/0x1f0 [ 1796.588525] ? __x64_sys_open+0x1c0/0x1c0 [ 1796.588983] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1796.589547] do_syscall_64+0x3b/0x90 [ 1796.589955] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1796.590525] RIP: 0033:0x7f47de354b19 [ 1796.590912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1796.592937] RSP: 002b:00007f47db8a9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1796.593763] RAX: ffffffffffffffda RBX: 00007f47de468020 RCX: 00007f47de354b19 [ 1796.594554] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1796.595355] RBP: 00007f47db8a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1796.596126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1796.596857] R13: 00007fffa187286f R14: 00007f47db8a9300 R15: 0000000000022000 [ 1796.597617] [ 1796.598049] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1796.610156] ramfs: Bad value for 'mode' [ 1796.624255] ramfs: Bad value for 'mode' [ 1796.710651] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1810.568510] loop1: detected capacity change from 0 to 256 [ 1810.602803] loop4: detected capacity change from 0 to 264192 12:12:52 executing program 0: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:12:52 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 12:12:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 19) 12:12:52 executing program 3: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3ff, 0x7, 0x7f}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioprio_get$uid(0x3, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x234, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_IE={0x111, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @fast_bss_trans={0x37, 0xd5, {0x7f, 0x7, "3bef9b7d1201cccfcdae2d27e0a1d559", "52095ce5f241f0bf991ebd4de452d1ecbb592d48a5ad1d99122337ba263c1586", "d75a69907577c615aaf9d47845533e134345e052d890c58c087611c29c220560", [{0x2, 0x6, "f7880025089d"}, {0x1, 0x10, "1101b07dd971cd67dd01b78c1c6798e3"}, {0x2, 0x7, "f3cc1e70b1a96f"}, {0x3, 0xc, "b6e1b17e17e87b8fbc405510"}, {0x2, 0x27, "3730307cc9bd7ce9c505345ae6243020bb180f4e1069e7903ad4561264ae2e6f9697476e9dd2ca"}, {0x2, 0x4, "6faaf881"}, {0x1, 0x21, "30f8e99d85c897c0aaf74bac528e9d7061897dcf5e85be93d7eeffce8efcc36c35"}]}}, @channel_switch={0x25, 0x3, {0x0, 0x99, 0x9}}, @mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x38, 0x20}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @cf={0x4, 0x6, {0x7, 0x6, 0x5, 0x8001}}]}, @NL80211_ATTR_IE={0xde, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x6, 0x81}}, @dsss={0x3, 0x1, 0x3}, @cf={0x4, 0x6, {0x8, 0x1, 0x707b, 0x7}}, @fast_bss_trans={0x37, 0xc8, {0x94, 0x5, "4b7e54422c52cdf14d2c26aabdeac592", "c15cad083f329d4373b7f412d01d9cb9a5cdb890b5f165a1599277dc4586c2bf", "935963b4ca2f808182a924f042268f95140560921f97056e2cfc02917df6aa57", [{0x3, 0x23, "606a491f864ddf67f20f777144142c3c0e55a12409e10deb9779c4b5e137ec0c60337f"}, {0x4, 0x1d, "b1b7574fd9bbef93c3952ba2ae162d213574829aac99600e101dcfcb21"}, {0x3, 0x16, "a86f12e646bfceb8d9b45ecbe25aabfe11f776cd9001"}, {0x4, 0xe, "fbfc0c523c79f8549774c31e2b24"}, {0x3, 0x8, "a8995e46e253c7cb"}]}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}]}, 0x234}, 0x1, 0x0, 0x0, 0x40894}, 0x400c090) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000380)=0x101) 12:12:52 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:12:52 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:12:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x700000000000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:12:52 executing program 7: ioprio_get$uid(0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000005200), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x68, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3a2e6bd3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x44080) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in6}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) 12:12:52 executing program 3: ioprio_get$uid(0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', 0xee00, r0) [ 1810.613780] FAULT_INJECTION: forcing a failure. [ 1810.613780] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.616206] CPU: 0 PID: 12636 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1810.616993] ramfs: Bad value for 'mode' [ 1810.617941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1810.617961] Call Trace: [ 1810.617969] [ 1810.621825] dump_stack_lvl+0x8b/0xb3 [ 1810.622673] should_fail.cold+0x5/0xa [ 1810.623489] ? create_object.isra.0+0x3a/0xa20 [ 1810.624490] should_failslab+0x5/0x10 [ 1810.625470] kmem_cache_alloc+0x5b/0x480 [ 1810.626362] create_object.isra.0+0x3a/0xa20 [ 1810.627486] ? kasan_unpoison+0x23/0x50 [ 1810.628404] __kmalloc+0x1ed/0x330 [ 1810.629083] ramfs: Bad value for 'mode' [ 1810.629314] io_setup_async_rw+0x199/0x620 [ 1810.630800] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1810.631997] io_write+0x941/0xbe0 [ 1810.632764] ? io_read+0xff0/0xff0 [ 1810.633530] ? x86_pmu_enable+0xa20/0xd90 [ 1810.634448] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1810.635590] io_issue_sqe+0xe8a/0x6980 [ 1810.636450] ? lock_release+0x3b2/0x6f0 [ 1810.637298] ? __fget_files+0x26b/0x470 [ 1810.638145] ? lock_downgrade+0x6d0/0x6d0 [ 1810.639030] ? find_held_lock+0x2c/0x110 [ 1810.639894] ? io_openat2+0xbc0/0xbc0 [ 1810.640735] ? lock_release+0x3b2/0x6f0 [ 1810.641596] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1810.642775] ? lock_is_held_type+0xd7/0x130 [ 1810.643701] io_submit_sqes+0x16ba/0x8fc0 [ 1810.644635] ? io_async_task_func+0x560/0x560 [ 1810.645605] ? io_rsrc_buf_put+0x50/0x50 [ 1810.646482] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1810.647541] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1810.648625] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1810.649550] ? wait_for_completion_io+0x270/0x270 [ 1810.650582] ? lock_is_held_type+0xd7/0x130 [ 1810.651500] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1810.652663] ? vfs_write+0x188/0xae0 [ 1810.653457] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1810.654613] ? fput+0x2a/0x50 [ 1810.655291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.656406] do_syscall_64+0x3b/0x90 [ 1810.657205] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1810.658285] RIP: 0033:0x7f61270a3b19 [ 1810.659058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1810.662908] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1810.664505] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1810.665995] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1810.667484] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1810.668995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1810.670266] FAULT_INJECTION: forcing a failure. [ 1810.670266] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.670487] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1810.670534] [ 1810.673667] CPU: 1 PID: 12658 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1810.674550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1810.675723] Call Trace: [ 1810.675988] [ 1810.676237] dump_stack_lvl+0x8b/0xb3 [ 1810.676649] should_fail.cold+0x5/0xa [ 1810.677046] ? create_object.isra.0+0x3a/0xa20 [ 1810.677532] should_failslab+0x5/0x10 [ 1810.677931] kmem_cache_alloc+0x5b/0x480 [ 1810.678366] create_object.isra.0+0x3a/0xa20 [ 1810.678840] ? kasan_unpoison+0x23/0x50 [ 1810.679269] kmem_cache_alloc+0x239/0x480 [ 1810.679704] ext4_inode_attach_jinode+0x110/0x230 [ 1810.680231] ext4_file_open+0x2f9/0xb80 [ 1810.680644] ? ext4_file_write_iter+0x18d0/0x18d0 [ 1810.681149] ? selinux_inode_create+0x30/0x30 [ 1810.681625] ? lock_downgrade+0x6d0/0x6d0 [ 1810.682063] ? fsnotify_perm.part.0+0x22d/0x620 [ 1810.682547] do_dentry_open+0x4c6/0x1110 [ 1810.682969] ? ext4_file_write_iter+0x18d0/0x18d0 [ 1810.683467] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1810.684047] ? may_open+0x1f3/0x420 [ 1810.684431] path_openat+0x1a3e/0x28a0 [ 1810.684852] ? path_lookupat+0x850/0x850 [ 1810.685277] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1810.685824] ? lock_is_held_type+0xd7/0x130 [ 1810.686271] do_filp_open+0x1aa/0x400 [ 1810.686673] ? may_open_dev+0xf0/0xf0 [ 1810.687070] ? alloc_fd+0x2f0/0x670 [ 1810.687452] ? rwlock_bug.part.0+0x90/0x90 [ 1810.687895] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1810.688478] ? _find_next_bit+0x1e5/0x260 [ 1810.688911] ? _raw_spin_unlock+0x24/0x40 [ 1810.689343] ? alloc_fd+0x2f0/0x670 [ 1810.689727] do_sys_openat2+0x16d/0x4d0 [ 1810.690135] ? build_open_flags+0x6f0/0x6f0 [ 1810.690587] ? lock_is_held_type+0xd7/0x130 [ 1810.691038] __x64_sys_openat+0x13f/0x1f0 [ 1810.691470] ? __x64_sys_open+0x1c0/0x1c0 [ 1810.691903] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.692458] do_syscall_64+0x3b/0x90 [ 1810.692850] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1810.693387] RIP: 0033:0x7f47de354b19 [ 1810.693762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1810.695627] RSP: 002b:00007f47db8a9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1810.696415] RAX: ffffffffffffffda RBX: 00007f47de468020 RCX: 00007f47de354b19 [ 1810.697139] RDX: 0000000000101042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1810.697858] RBP: 00007f47db8a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1810.698583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1810.699321] R13: 00007fffa187286f R14: 00007f47db8a9300 R15: 0000000000022000 [ 1810.700056] [ 1810.702518] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 12:12:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x800000000000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:12:52 executing program 3: recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f00000000c0)=""/94, 0x5e}, {&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000180)=""/168, 0xa8}], 0x5}, 0x2042) ioprio_get$uid(0x3, 0x0) socket(0x2, 0x5, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r1 = gettid() r2 = getpid() r3 = getpid() kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0x0, r0, 0xee00, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xfdf, 0x40, 0x771, 0x80, 0x1, 0x5, 0x1e3, 0x6, r1, r3}) 12:12:52 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:12:52 executing program 0: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:12:52 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:12:52 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) [ 1810.838062] ramfs: Bad value for 'mode' 12:12:52 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140), 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1810.864606] ramfs: Bad value for 'mode' [ 1810.865954] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:12:53 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 12:12:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) (fail_nth: 20) [ 1810.927142] loop4: detected capacity change from 0 to 264192 12:12:53 executing program 7: ioprio_get$uid(0x0, 0xffffffffffffffff) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r1, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r2, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r2) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000001c0)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r3, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r3) linkat(r1, &(0x7f0000000080)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0x1000) setresuid(0x0, r0, 0x0) setreuid(r0, 0xee00) [ 1810.956760] FAULT_INJECTION: forcing a failure. [ 1810.956760] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.958090] CPU: 1 PID: 12696 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1810.959031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1810.960255] Call Trace: [ 1810.960537] [ 1810.960768] dump_stack_lvl+0x8b/0xb3 [ 1810.961225] should_fail.cold+0x5/0xa [ 1810.961648] ? io_issue_sqe+0x6ea/0x6980 [ 1810.962112] ? io_arm_poll_handler+0x22f/0x7a0 [ 1810.962631] should_failslab+0x5/0x10 [ 1810.963042] kmem_cache_alloc_trace+0x55/0x3c0 12:12:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x900000000000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1810.963565] ? __fget_files+0x26b/0x470 [ 1810.964165] io_arm_poll_handler+0x22f/0x7a0 [ 1810.964693] ? io_setup_async_rw+0x620/0x620 [ 1810.965184] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1810.965791] io_queue_sqe_arm_apoll+0x61/0x1a0 [ 1810.966295] io_submit_sqes+0x7cd4/0x8fc0 [ 1810.966762] ? io_async_task_func+0x560/0x560 [ 1810.967276] ? io_rsrc_buf_put+0x50/0x50 [ 1810.967740] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1810.968302] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1810.968842] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1810.969327] ? wait_for_completion_io+0x270/0x270 [ 1810.969868] ? lock_is_held_type+0xd7/0x130 [ 1810.970332] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1810.970926] ? vfs_write+0x188/0xae0 [ 1810.971348] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1810.971941] ? fput+0x2a/0x50 [ 1810.972322] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.972897] do_syscall_64+0x3b/0x90 [ 1810.973313] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1810.973453] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1810.973875] RIP: 0033:0x7f61270a3b19 [ 1810.975451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1810.977489] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1810.978340] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1810.979120] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1810.979893] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1810.980684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1810.981470] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1810.982273] [ 1810.991760] FAULT_INJECTION: forcing a failure. [ 1810.991760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1810.993134] CPU: 1 PID: 12700 Comm: syz-executor.1 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1810.994037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1810.995288] Call Trace: [ 1810.995565] [ 1810.995806] dump_stack_lvl+0x8b/0xb3 [ 1810.996261] should_fail.cold+0x5/0xa [ 1810.996686] _copy_to_user+0x2e/0x150 [ 1810.997110] simple_read_from_buffer+0xcc/0x160 [ 1810.997632] proc_fail_nth_read+0x194/0x220 [ 1810.998115] ? proc_fault_inject_read+0x230/0x230 [ 1810.998649] ? security_file_permission+0xb1/0xd0 [ 1810.999185] ? proc_fault_inject_read+0x230/0x230 [ 1810.999711] vfs_read+0x1b6/0x5f0 [ 1811.000103] ksys_read+0x12d/0x250 [ 1811.000489] ? __ia32_sys_pwrite64+0x230/0x230 [ 1811.000995] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1811.001564] do_syscall_64+0x3b/0x90 [ 1811.001976] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1811.002550] RIP: 0033:0x7f47de30769c [ 1811.002946] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1811.004943] RSP: 002b:00007f47db8ca170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1811.005767] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f47de30769c [ 1811.006552] RDX: 000000000000000f RSI: 00007f47db8ca1e0 RDI: 0000000000000003 [ 1811.007351] RBP: 00007f47db8ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1811.008147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1811.008944] R13: 00007fffa187286f R14: 00007f47db8ca300 R15: 0000000000022000 [ 1811.009749] 12:12:53 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r2, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:12:53 executing program 2: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffff43fe, 0x9, &(0x7f0000000740)=[{&(0x7f0000000080)="dbeb3b277d692b9997b88f4fa6b60bf878b6770ed535575f1f5db00cb6e1d4b9d6c56577d500f826d8dfb0560fc11a5564e16e570998b4ce317bea35d5dedbb815bbbe26b0d30cb98b9cd0f4376056bff90acbd905cebaae84d06774abe8861c5d556149273cb898491327186f987d9bbb8bf68839e312ca3eb74f4831d15adf04bc5537557525f4ad2a908888af291791484461af6566518380161ea92fe25ba97629012c3d83b17aa1f74724c4dc5dafbc", 0xb2, 0x7c}, {&(0x7f0000000140)="ec401cf98188613191a1fd0466b5995c9f84a46fa6f40cfd0e236617f83ec97effa675fed5be4350157ab1d98cde4f04e9eba33d076f7cdadd360e4a3a045e74b5d7f621874da047c1273bbe93a96205f3b227d1d2240b8ed738d1d84c0c28268a70cbec1282b569fea6fd413c98211053647ae6fe2227cd89a2e6ed099d1f2f6a64c0ebbcac17f0cc33a246bd9675187c049bca635615e9c5836cc1923783a9e2bee8eed52f99d9847225b9f3fe0aa909488f948e9bcef7dfba1f9e450b7b5b40f0589c40afecf53e5ca3", 0xcb, 0x5}, {&(0x7f0000000240)="33ccbbfcac6d6ae08929c242885502c782dafe33cc8e34e4fe611b7e5961f3e918806900292c7c5efea9f25e62efe1b1e076d0fec5e6780f945499903a7deab9ada356b14366b796b2caf8ba08033ba3cfbc5415e840fad179e62e5bdae9b17a9a554db5b4683d04c5dab8609072fa6d14801349dbe757d6842a2ab4bfd5eac6956b3f969b42c41a410d734a3c6a708842a540962ead6d", 0x97}, {&(0x7f0000000300)="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", 0xfc, 0x100}, {&(0x7f0000000400)="3cd1d340a0e8d598ce6609fb9a63f98f05a2250858fccf105599d4c843d7b8197f6eeff3781fb6ab6b53a29e36d49c57fc8dfcb73389f83009fd2867a172b2dd68753807fb12817150431a86dc631df5a54fabfb061df960027cd9d11c6b922089e9b3cdbce3965426362cecc75a1812ea78a11cce07e76a5c493bdad741f7607f568afe7f7a3808f53b7551f3706de18318babc", 0x94, 0x40}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000005c0)="e23e94e35c07f4db33e6db52d0f38421e0b9cd815e40cec87664179148625108ba340d4a34e7bc1f8ecd6a4642289eae48880bddfd7d04b0764f9ad318", 0x3d, 0xffffffffffffff81}, {&(0x7f0000000600)="4252e03f86579b43142a2a18825b32a7b3b7f267786443d7aaf3892466", 0x1d, 0x80000001}, {&(0x7f0000000640)="b2c3ac7e3e0339ae5c9dcf4aa41ee958cc7eef4516251c6ebb522aa6f75d0c30cdf74892de561b1265d8cb0d2084ac627436aed2d6ae28ac8aa39cf2ff017e959cc3dd3676cc3926a051b48a2967f5cbdd311ed1bdcae7adb0a80e48a32236ab5ae78fdd74c64a22e0416554fb19c6738e38f0259feedc9f0666a2431c88842f920ccf9b4c0aab2a26309359bafc32043ba900b501a2d93b914e7215e2bad675bd653b39e85c8e435e84ceac4f526e735adc38ee9d9c63d68576fbb43dbf30a333daf225893bf5b49030f8fa650f61", 0xcf, 0x5}], 0x2800, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB=',audit,permit_directio,obj_user=,\x00']) ioprio_get$uid(0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000840)={{{@in=@empty, @in=@multicast2, 0x4e22, 0x3ff, 0x4e22, 0x1, 0x2, 0x20, 0x0, 0x84, 0x0, r3}, {0x80000001, 0x10000, 0x2, 0x5, 0x10001, 0x890, 0x7fff}, {0x4, 0xffff, 0xffffffff, 0x8}, 0x3, 0x6e6bbf, 0x1, 0x0, 0x2}, {{@in=@private=0xa010100, 0x4d2, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x1, 0x2, 0xffffe550, 0x1ff, 0xc77}}, 0xe8) [ 1811.088094] ramfs: Bad value for 'mode' 12:12:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r0) getsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000040)=""/102400, &(0x7f0000000000)=0x19000) ioprio_get$uid(0x3, 0x0) recvmsg(r0, &(0x7f000001a240)={&(0x7f0000019040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f000001a140)=[{&(0x7f00000190c0)=""/119, 0x77}, {&(0x7f0000019140)=""/4096, 0x1000}], 0x2, &(0x7f000001a180)=""/181, 0xb5}, 0x63) 12:12:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 1811.109977] ramfs: Bad value for 'mode' 12:12:53 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 12:12:53 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) [ 1811.187634] FAULT_INJECTION: forcing a failure. [ 1811.187634] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.188918] CPU: 1 PID: 12729 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1811.189787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1811.190959] Call Trace: [ 1811.191231] [ 1811.191461] dump_stack_lvl+0x8b/0xb3 [ 1811.191875] should_fail.cold+0x5/0xa [ 1811.192280] ? io_arm_poll_handler+0x22f/0x7a0 [ 1811.192760] ? create_object.isra.0+0x3a/0xa20 [ 1811.193244] should_failslab+0x5/0x10 [ 1811.193642] kmem_cache_alloc+0x5b/0x480 [ 1811.194073] create_object.isra.0+0x3a/0xa20 [ 1811.194535] ? kasan_unpoison+0x23/0x50 [ 1811.194958] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1811.195469] io_arm_poll_handler+0x22f/0x7a0 [ 1811.195938] ? io_setup_async_rw+0x620/0x620 [ 1811.196502] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1811.197123] io_queue_sqe_arm_apoll+0x61/0x1a0 [ 1811.197639] io_submit_sqes+0x7cd4/0x8fc0 [ 1811.198119] ? io_async_task_func+0x560/0x560 [ 1811.198631] ? io_rsrc_buf_put+0x50/0x50 [ 1811.199093] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1811.199644] __do_sys_io_uring_enter+0xee0/0x1e80 12:12:53 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r2, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1811.200213] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1811.200892] ? wait_for_completion_io+0x270/0x270 [ 1811.201472] ? lock_is_held_type+0xd7/0x130 [ 1811.201945] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1811.202555] ? vfs_write+0x188/0xae0 [ 1811.202975] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1811.203589] ? fput+0x2a/0x50 [ 1811.203942] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1811.204526] do_syscall_64+0x3b/0x90 [ 1811.204947] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1811.205510] RIP: 0033:0x7f61270a3b19 [ 1811.205916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1811.207927] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1811.208783] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1811.209563] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1811.210341] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1811.211074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1811.211846] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1811.212602] [ 1811.226653] FAULT_INJECTION: forcing a failure. [ 1811.226653] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.227900] CPU: 1 PID: 12730 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1811.228771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1811.229954] Call Trace: [ 1811.230220] [ 1811.230459] dump_stack_lvl+0x8b/0xb3 [ 1811.230869] should_fail.cold+0x5/0xa [ 1811.231273] should_failslab+0x5/0x10 [ 1811.231677] kmem_cache_alloc_bulk+0x47/0x670 [ 1811.232156] ? xa_load+0x12d/0x280 [ 1811.232538] io_submit_sqes.cold+0x20b/0x435 [ 1811.233010] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1811.233551] ? io_async_task_func+0x560/0x560 [ 1811.234028] ? lock_release+0x3b2/0x6f0 [ 1811.234448] ? __io_uring_add_tctx_node+0xec/0x390 [ 1811.234965] ? io_rsrc_buf_put+0x50/0x50 [ 1811.235394] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1811.235930] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1811.236462] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1811.236917] ? wait_for_completion_io+0x270/0x270 [ 1811.237470] ? lock_is_held_type+0xd7/0x130 [ 1811.237941] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1811.238531] ? vfs_write+0x188/0xae0 [ 1811.238943] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1811.239541] ? fput+0x2a/0x50 [ 1811.239894] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1811.240474] do_syscall_64+0x3b/0x90 [ 1811.240879] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1811.241439] RIP: 0033:0x7f1fc76cdb19 [ 1811.241835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1811.243835] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1811.244673] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1811.245441] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1811.246219] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1811.246991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1811.247771] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1811.248548] 12:13:09 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 12:13:09 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 12:13:09 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140), 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:13:09 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r2, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:13:09 executing program 3: ioprio_get$uid(0x3, 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_set$uid(0x3, r0, 0x2004) 12:13:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xa00000000000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1827.736891] loop1: detected capacity change from 0 to 256 [ 1827.737054] loop4: detected capacity change from 0 to 264192 12:13:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2) 12:13:09 executing program 7: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) [ 1827.757461] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1827.776030] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1827.779978] FAULT_INJECTION: forcing a failure. [ 1827.779978] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.782331] CPU: 0 PID: 12745 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1827.783982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1827.786208] Call Trace: [ 1827.786725] [ 1827.787173] dump_stack_lvl+0x8b/0xb3 [ 1827.787979] should_fail.cold+0x5/0xa [ 1827.788781] ? create_object.isra.0+0x3a/0xa20 [ 1827.789721] should_failslab+0x5/0x10 [ 1827.790471] kmem_cache_alloc+0x5b/0x480 [ 1827.791289] create_object.isra.0+0x3a/0xa20 [ 1827.792173] ? kasan_unpoison+0x23/0x50 [ 1827.793000] kmem_cache_alloc_bulk+0x387/0x670 [ 1827.793919] io_submit_sqes.cold+0x20b/0x435 [ 1827.794825] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1827.795834] ? io_async_task_func+0x560/0x560 [ 1827.796752] ? io_rsrc_buf_put+0x50/0x50 [ 1827.797580] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1827.798576] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1827.799567] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1827.800445] ? wait_for_completion_io+0x270/0x270 [ 1827.801445] ? lock_is_held_type+0xd7/0x130 [ 1827.802301] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1827.803389] ? vfs_write+0x188/0xae0 [ 1827.804130] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1827.805243] ? fput+0x2a/0x50 [ 1827.805884] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1827.806909] do_syscall_64+0x3b/0x90 [ 1827.807658] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1827.808692] RIP: 0033:0x7f1fc76cdb19 [ 1827.809427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1827.813108] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1827.814628] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1827.816048] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1827.817482] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1827.818902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1827.820325] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1827.821773] [ 1827.832034] FAULT_INJECTION: forcing a failure. [ 1827.832034] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.833425] CPU: 1 PID: 12760 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1827.834317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1827.835561] Call Trace: [ 1827.835850] [ 1827.836106] dump_stack_lvl+0x8b/0xb3 [ 1827.836602] should_fail.cold+0x5/0xa [ 1827.837074] ? io_setup_async_rw+0x199/0x620 [ 1827.837584] should_failslab+0x5/0x10 [ 1827.837997] __kmalloc+0x72/0x330 [ 1827.838384] io_setup_async_rw+0x199/0x620 [ 1827.838852] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1827.839452] io_write+0x941/0xbe0 [ 1827.839838] ? io_read+0xff0/0xff0 [ 1827.840232] ? x86_pmu_enable+0xa20/0xd90 [ 1827.840704] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1827.841288] ? lock_chain_count+0x20/0x20 [ 1827.841748] ? find_held_lock+0x2c/0x110 [ 1827.842202] io_issue_sqe+0xe8a/0x6980 [ 1827.842642] ? lock_release+0x3b2/0x6f0 [ 1827.843084] ? __fget_files+0x26b/0x470 [ 1827.843517] ? lock_downgrade+0x6d0/0x6d0 [ 1827.843966] ? io_openat2+0xbc0/0xbc0 [ 1827.844392] ? kick_process+0xe8/0x170 [ 1827.844818] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1827.845421] ? lock_is_held_type+0xd7/0x130 [ 1827.845889] io_submit_sqes+0x16ba/0x8fc0 [ 1827.846355] ? io_async_task_func+0x560/0x560 [ 1827.846846] ? io_rsrc_buf_put+0x50/0x50 [ 1827.847306] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1827.847843] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1827.848392] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1827.848857] ? wait_for_completion_io+0x270/0x270 [ 1827.849381] ? lock_is_held_type+0xd7/0x130 [ 1827.849847] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1827.850448] ? vfs_write+0x188/0xae0 [ 1827.850857] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1827.851450] ? fput+0x2a/0x50 [ 1827.851797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1827.852362] do_syscall_64+0x3b/0x90 [ 1827.852782] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1827.853342] RIP: 0033:0x7f61270a3b19 [ 1827.853744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1827.855726] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1827.856541] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1827.857310] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1827.858078] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1827.858846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1827.859627] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1827.860417] [ 1827.863965] ramfs: Bad value for 'mode' [ 1827.918088] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:13:23 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 12:13:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x3) [ 1841.267632] loop1: detected capacity change from 0 to 256 12:13:23 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r2, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:13:23 executing program 7: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r1) recvmsg(r1, &(0x7f0000000380)={&(0x7f0000000100)=@pptp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)}], 0x4, &(0x7f0000000300)=""/91, 0x5b}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x64) [ 1841.286732] loop4: detected capacity change from 0 to 264192 [ 1841.300284] FAULT_INJECTION: forcing a failure. [ 1841.300284] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.301628] CPU: 1 PID: 12785 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1841.302485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1841.303659] Call Trace: [ 1841.303926] [ 1841.304162] dump_stack_lvl+0x8b/0xb3 [ 1841.304579] should_fail.cold+0x5/0xa [ 1841.304979] ? create_object.isra.0+0x3a/0xa20 [ 1841.305471] should_failslab+0x5/0x10 [ 1841.305863] kmem_cache_alloc+0x5b/0x480 [ 1841.306294] create_object.isra.0+0x3a/0xa20 [ 1841.306764] ? kasan_unpoison+0x23/0x50 [ 1841.307184] __kmalloc+0x1ed/0x330 [ 1841.307564] io_setup_async_rw+0x199/0x620 [ 1841.308014] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1841.308600] io_write+0x941/0xbe0 [ 1841.308967] ? io_read+0xff0/0xff0 [ 1841.309346] ? x86_pmu_enable+0xa20/0xd90 [ 1841.309796] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1841.310344] ? lock_chain_count+0x20/0x20 [ 1841.310781] ? find_held_lock+0x2c/0x110 [ 1841.311213] io_issue_sqe+0xe8a/0x6980 [ 1841.311626] ? lock_release+0x3b2/0x6f0 [ 1841.312070] ? __fget_files+0x26b/0x470 [ 1841.312485] ? lock_downgrade+0x6d0/0x6d0 [ 1841.312942] ? io_openat2+0xbc0/0xbc0 [ 1841.313343] ? kick_process+0xe8/0x170 [ 1841.313775] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1841.314357] ? lock_is_held_type+0xd7/0x130 [ 1841.314811] io_submit_sqes+0x16ba/0x8fc0 [ 1841.315273] ? io_async_task_func+0x560/0x560 [ 1841.315761] ? io_rsrc_buf_put+0x50/0x50 [ 1841.316194] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1841.316744] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1841.317259] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1841.317713] ? wait_for_completion_io+0x270/0x270 [ 1841.318216] ? lock_is_held_type+0xd7/0x130 [ 1841.318673] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1841.319243] ? vfs_write+0x188/0xae0 [ 1841.319638] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1841.320207] ? fput+0x2a/0x50 [ 1841.320559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1841.321095] do_syscall_64+0x3b/0x90 [ 1841.321493] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1841.322037] RIP: 0033:0x7f61270a3b19 [ 1841.322421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1841.324312] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1841.325110] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1841.325846] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1841.326585] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1841.327319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1841.328053] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1841.328811] [ 1841.335190] ramfs: Bad value for 'mode' [ 1841.335926] FAULT_INJECTION: forcing a failure. [ 1841.335926] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.337732] ramfs: Bad value for 'mode' [ 1841.338405] CPU: 0 PID: 12775 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1841.340334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1841.342664] Call Trace: [ 1841.343193] [ 1841.343658] dump_stack_lvl+0x8b/0xb3 [ 1841.344517] should_fail.cold+0x5/0xa [ 1841.345335] ? create_object.isra.0+0x3a/0xa20 [ 1841.346274] should_failslab+0x5/0x10 [ 1841.347044] kmem_cache_alloc+0x5b/0x480 12:13:23 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140), 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:13:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xb00000000000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:13:23 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) [ 1841.347868] ? mark_held_locks+0x9e/0xe0 [ 1841.348900] create_object.isra.0+0x3a/0xa20 [ 1841.349799] ? kasan_unpoison+0x23/0x50 [ 1841.350623] kmem_cache_alloc_bulk+0x387/0x670 [ 1841.351559] io_submit_sqes.cold+0x20b/0x435 [ 1841.352472] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1841.353523] ? io_async_task_func+0x560/0x560 [ 1841.354442] ? io_rsrc_buf_put+0x50/0x50 12:13:23 executing program 3: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r3, 0x5307) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) syz_mount_image$tmpfs(&(0x7f0000000d40), &(0x7f0000002340)='./file0/file0\x00', 0x8c1, 0x3, &(0x7f0000002500)=[{&(0x7f0000002380)="38be901d451558a85948aa5d32b49dd6e82297d0b9807a729a14931ccd90537c9d41e33fd5b4bfc2fc34c39b470f", 0x2e, 0x8}, {&(0x7f00000023c0)="26fbcef0c518e03866cdc11b1d04b6e23788b2b69b1ddad4f5daa8677606446995e03d1311fb733c8d649f6593e98752ac0450f6a62a79c89116b44b68715ba2ebd0d822e332b58d1a461b12e3d3e02fc97aaf4d2b21fb01ae0b816790743bf23dfecc92b1d9abe41695930d3d0bb1824450f0125e89f7719eea1066bd6212b6d1c83f58d3d210bb939d58e6030ff8b3c0bf898756a3d149b119a4be21ffa2fd13d055345f89b647dd61f7e96f8ebffa61cf3de8e74cb3b8cb0dfb4c8cfbd1376a24db8a9276e000a6f963cb66c35f84bebf7d1c0e24b4ffe9b62cba3a32285a", 0xe0, 0x1}, {&(0x7f00000024c0)="93b3c9cdb73424ffac0988f6e9f062d9e8614f3d7846c242fc800ec4", 0x1c, 0x8}], 0x80000, &(0x7f0000002700)=ANY=[@ANYBLOB='huge=advise,fsname=$-,smackfshat=nl80211\x00,fsmagic=0x0000000000000004,fscontext=system_u,euid>', @ANYRESDEC=r4, @ANYBLOB="2c66756e633d4d4d41505f434845434b2c736d61636b66737472616e736d7574653d25fa24122ea32c00a1658174ba5a457215354f5d7fcc9cd13bf00d54ee2b68b22ea2bdca2f1d47683030f2299ddc4d5cb0ada5a0ba83a03c66cd97b1ffcbd33c558e9914bcf581463fdb54bcadbcbc90cad16156140840e46954b3476edfc8b770bd37531fb9be4c8be5b7a138d3c4cdf092e91e884aa1cf97c97f881c48ca4d0b6073d38d9c60db73831a283238b90081a2e5736cff5869bfd19646b7e9e52a770bad5dc505cf6692d65f0ae8548252a62d36c20b0b144390b2744db305b89043e0fb08"]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r3) recvmmsg$unix(r0, &(0x7f0000002180)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/232, 0xe8}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c}}], 0xfffffffffffffd31}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000580)=""/186, 0xba}, {&(0x7f0000000640)=""/108, 0x6c}, {&(0x7f00000006c0)=""/44, 0x2c}, {&(0x7f0000000700)=""/120, 0x78}, {&(0x7f0000000780)=""/198, 0xc6}, {&(0x7f0000000880)=""/158, 0x9e}, {&(0x7f0000000940)=""/48, 0x30}], 0x7, &(0x7f0000000a00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/205, 0xcd}], 0x1, &(0x7f0000000c80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000e40)=""/4083, 0xff3}, {&(0x7f0000001e40)=""/22, 0x16}, {&(0x7f0000001e80)=""/171, 0xab}, {&(0x7f0000001f40)=""/70, 0x46}, {&(0x7f0000001fc0)=""/142, 0x8e}], 0x5, &(0x7f0000002100)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}], 0x5, 0x10002, &(0x7f00000022c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000002300)={{0x1, 0x1, 0x18, r5}, './file0/file0\x00'}) setresuid(0x0, r2, 0x0) write$P9_RSTATu(r0, &(0x7f0000000200)={0x61, 0x7d, 0x2, {{0x0, 0x4c, 0x4, 0x3, {0x20, 0x23, 0x5}, 0x90800000, 0xb0e, 0x4, 0x4, 0x0, '', 0xf, ',^($@-,\x8e@\x15^[\x1c--', 0x6, '%\xfa$\x12.\xa3', 0x4, '+-]\''}, 0x0, '', r1, 0x0, r2}}, 0x61) r6 = getuid() write$P9_RXATTRWALK(r0, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x4}, 0xf) setxattr$security_evm(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), &(0x7f0000002600)=@sha1={0x1, "9476928135f8502080aa72c235e92253b0b07705"}, 0x15, 0x0) ioprio_get$uid(0x3, r6) [ 1841.355274] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1841.356333] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1841.357332] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1841.358204] ? wait_for_completion_io+0x270/0x270 [ 1841.359170] ? lock_is_held_type+0xd7/0x130 [ 1841.360031] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1841.361146] ? vfs_write+0x188/0xae0 [ 1841.361897] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1841.362995] ? fput+0x2a/0x50 [ 1841.363667] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1841.364730] do_syscall_64+0x3b/0x90 [ 1841.365490] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1841.366521] RIP: 0033:0x7f1fc76cdb19 [ 1841.367262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1841.370960] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1841.372480] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1841.373939] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1841.375375] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1841.376833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1841.378266] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1841.379720] [ 1841.383385] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1841.389751] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:13:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1000000000000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:13:23 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1", 0x2d, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:13:23 executing program 7: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1f, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8, 0xffffffff}}, './file0\x00'}) recvmmsg$unix(r2, &(0x7f0000003d40)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000300), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)=""/179, 0xb3}], 0x1, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000500)=""/139, 0x8b}, {&(0x7f00000005c0)=""/65, 0x41}, {&(0x7f0000000640)=""/183, 0xb7}, {&(0x7f0000000700)=""/114, 0x72}], 0x5, &(0x7f0000000800)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/35, 0x23}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/190, 0xbe}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002b00)=@abs, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002bc0)=""/230, 0xe6}], 0x2, &(0x7f0000002d00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000002dc0), 0x6e, &(0x7f0000002e40)}}, {{&(0x7f0000002e80), 0x6e, &(0x7f00000032c0)=[{&(0x7f0000002f00)=""/127, 0x7f}, {&(0x7f0000002f80)=""/191, 0xbf}, {&(0x7f0000003040)=""/51, 0x33}, {&(0x7f0000003080)=""/223, 0xdf}, {&(0x7f0000003180)=""/6, 0x6}, {&(0x7f00000031c0)=""/225, 0xe1}], 0x6}}, {{&(0x7f0000003340), 0x6e, &(0x7f00000037c0)=[{&(0x7f00000033c0)=""/236, 0xec}, {&(0x7f00000034c0)=""/172, 0xac}, {&(0x7f0000003580)=""/128, 0x80}, {&(0x7f0000003600)=""/85, 0x55}, {&(0x7f0000003680)=""/186, 0xba}, {&(0x7f0000003740)=""/68, 0x44}], 0x6}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003bc0)=[{&(0x7f00000038c0)=""/222, 0xde}, {&(0x7f00000039c0)=""/155, 0x9b}, {&(0x7f0000003a80)=""/180, 0xb4}, {&(0x7f0000003b40)=""/16, 0x10}, {&(0x7f0000003b80)=""/46, 0x2e}], 0x5, &(0x7f0000003c40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}], 0x9, 0x2, &(0x7f0000003f80)={0x77359400}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r4) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) ioprio_get$uid(0x0, r5) 12:13:23 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) [ 1841.457658] loop4: detected capacity change from 0 to 264192 [ 1841.462586] FAULT_INJECTION: forcing a failure. [ 1841.462586] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.463920] CPU: 1 PID: 12803 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1841.464795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1841.465983] Call Trace: [ 1841.466279] [ 1841.466508] dump_stack_lvl+0x8b/0xb3 [ 1841.466919] should_fail.cold+0x5/0xa [ 1841.467318] ? io_issue_sqe+0x6ea/0x6980 [ 1841.467745] ? io_arm_poll_handler+0x22f/0x7a0 [ 1841.468233] should_failslab+0x5/0x10 [ 1841.468665] kmem_cache_alloc_trace+0x55/0x3c0 [ 1841.469147] ? __fget_files+0x26b/0x470 [ 1841.469568] io_arm_poll_handler+0x22f/0x7a0 [ 1841.470044] ? io_setup_async_rw+0x620/0x620 [ 1841.470521] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1841.471115] io_queue_sqe_arm_apoll+0x61/0x1a0 [ 1841.471627] io_submit_sqes+0x7cd4/0x8fc0 [ 1841.472092] ? io_async_task_func+0x560/0x560 [ 1841.472574] ? io_rsrc_buf_put+0x50/0x50 [ 1841.473014] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1841.473566] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1841.474088] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1841.474545] ? wait_for_completion_io+0x270/0x270 [ 1841.475060] ? lock_is_held_type+0xd7/0x130 [ 1841.475514] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1841.476106] ? vfs_write+0x188/0xae0 [ 1841.476524] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1841.477109] ? fput+0x2a/0x50 [ 1841.477453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1841.478001] do_syscall_64+0x3b/0x90 [ 1841.478404] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1841.478951] RIP: 0033:0x7f61270a3b19 [ 1841.479350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1841.481306] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1841.482125] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1841.482880] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1841.483627] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1841.484385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1841.485141] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1841.485465] ramfs: Bad value for 'mode' [ 1841.485891] 12:13:23 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r2, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1841.494881] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1841.510470] ramfs: Bad value for 'mode' 12:13:23 executing program 3: ioprio_get$uid(0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8020000120901082bbd7000fddbdf250c000009d6022280b0fd79c6459ad2f83f56a4569ad8e55b84a4afc7de880ab5a82341a9b3669bc1da597cc11d1e1c974b8cc33798edbcacfb42bd653e9d55307a3d1307824252052894318d342d7b065384bda03ffbec95a55419a5080c3b94d1f5137f3436f4ac8c247999a8c31cc47fff565d39bb793d1a100769095766425f695c82c3ed39b144ed6ff8fa58e026a8cf7e376ad0506a6bfd7ec41fd5004f91315a69aa46900998e7457677d8e258f12ce17c5851730d3f0309e0fac2cf7be635c3fa23cede8a51f37229cca5f7b91e4f888708bcd4041853c5fe6fe0c82acfa340abcc672606599878cf5844aeaefbf7524e393f92f5ac92c3663334da0a15ebedfe098a301506a01ab35bbfa1d5e8ffbbb569492386c8de02d07e4395ca24c2ac03ef0d7c456216d5c3069444d0be4c0787184fd4cc0f46b83ba8d2c01ef710169a624cb6c65da1a46bede27909e744d7d1ec19e48ab3d47408cfc3014179310acc4debb95c5a8a7160eedc40d5dc48a5f42b00acde38e533a8d366b8d31a2a2a4d625ba25ba93c97f4c71ed2ed76abf626f3b2c590556c6657398f68a0147d22ba3695e3092b22e4dbcfb62307b97308002300000000000947097b62a7eaa5c8116a0a8d685ef6abdd1304541df10e88b518070f25059e5223b4391f4ff648b6266f538106149396801c1da695c2ff427189d3843290b3765705859c1d562ebac662f37338965aecb962d7c02d72c809e74edeedd54129fb1eaf3ccf20bc1ff7edc26ee5e5bd60e4ed09a00c592c71512db192b0999ebb5ee2d5f25337c63947901f6bc571ba9a213b72d3f2f10a05828649716fae74e1ec1dd243e33fa151d747d1bbcac7b1fff72c83b1b69332daadc1a32a99dac78b67439bdbcc150f6c3907e7d649a519089a4692c86e0431d970b9fd5100690008e0106ab75f8aae8911375d79acc5c9a33cf0673f2738d4d8bc3f564763f6f2de19114249713c86bfe560ae4bdacc046d69b64b1b4f7bd856f004be39ac249b2879590583730da3cabd28230400000000000c008a00feffffffffffffff"], 0x2f8}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000004) [ 1841.543788] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:13:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x4) 12:13:37 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 12:13:37 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r2, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1855.791186] loop1: detected capacity change from 0 to 256 12:13:37 executing program 7: getpeername$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @local}, &(0x7f00000002c0)=0x10) ioprio_get$uid(0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@local, @in=@empty, 0x4e23, 0x9, 0x4e22, 0xf29, 0x2, 0x0, 0x30, 0x73, 0x0, r0}, {0x5, 0x2, 0xffffffff, 0xdc0, 0x0, 0xbf8, 0x3f, 0x2}, {0x9, 0x76d5, 0x3, 0xfffffffffffffffa}, 0x7e00, 0x206e6bc0, 0x0, 0x0, 0x1, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0xff}, 0x2, @in=@multicast2, 0x3502, 0x0, 0x0, 0x1f, 0x5e9a, 0x4, 0x1000}}, 0xe8) 12:13:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x5) 12:13:37 executing program 3: ioprio_get$uid(0x3, 0x0) 12:13:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8cffffff00000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:13:37 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 12:13:37 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1", 0x2d, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1855.817340] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1855.838906] FAULT_INJECTION: forcing a failure. [ 1855.838906] name failslab, interval 1, probability 0, space 0, times 0 [ 1855.840217] CPU: 1 PID: 12837 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1855.840257] loop4: detected capacity change from 0 to 264192 [ 1855.841164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1855.841175] Call Trace: [ 1855.841180] [ 1855.841185] dump_stack_lvl+0x8b/0xb3 [ 1855.844659] should_fail.cold+0x5/0xa [ 1855.845107] ? create_object.isra.0+0x3a/0xa20 [ 1855.845630] should_failslab+0x5/0x10 [ 1855.846050] kmem_cache_alloc+0x5b/0x480 [ 1855.846505] ? mark_held_locks+0x9e/0xe0 [ 1855.846965] create_object.isra.0+0x3a/0xa20 [ 1855.847465] ? kasan_unpoison+0x23/0x50 [ 1855.847918] kmem_cache_alloc_bulk+0x387/0x670 [ 1855.848434] io_submit_sqes.cold+0x20b/0x435 [ 1855.848946] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1855.849515] ? io_async_task_func+0x560/0x560 [ 1855.850043] ? io_rsrc_buf_put+0x50/0x50 [ 1855.850509] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1855.851074] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1855.851628] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1855.852113] ? wait_for_completion_io+0x270/0x270 [ 1855.852668] ? lock_is_held_type+0xd7/0x130 [ 1855.853176] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1855.853800] ? vfs_write+0x188/0xae0 [ 1855.854223] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1855.854841] ? fput+0x2a/0x50 [ 1855.855199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1855.855785] do_syscall_64+0x3b/0x90 [ 1855.856205] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1855.856798] RIP: 0033:0x7f1fc76cdb19 [ 1855.857218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1855.859278] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1855.860128] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1855.860938] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1855.861744] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1855.862546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1855.863338] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1855.864150] [ 1855.864958] ramfs: Bad value for 'mode' [ 1855.867040] ramfs: Bad value for 'mode' [ 1855.869323] FAULT_INJECTION: forcing a failure. [ 1855.869323] name failslab, interval 1, probability 0, space 0, times 0 [ 1855.870598] CPU: 1 PID: 12845 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1855.871496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1855.872739] Call Trace: [ 1855.873026] [ 1855.873269] dump_stack_lvl+0x8b/0xb3 [ 1855.873695] should_fail.cold+0x5/0xa [ 1855.874120] ? io_arm_poll_handler+0x22f/0x7a0 [ 1855.874639] ? create_object.isra.0+0x3a/0xa20 [ 1855.875151] should_failslab+0x5/0x10 [ 1855.875568] kmem_cache_alloc+0x5b/0x480 [ 1855.876022] create_object.isra.0+0x3a/0xa20 [ 1855.876515] ? kasan_unpoison+0x23/0x50 [ 1855.876971] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1855.877490] io_arm_poll_handler+0x22f/0x7a0 [ 1855.877981] ? io_setup_async_rw+0x620/0x620 [ 1855.878470] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1855.879086] io_queue_sqe_arm_apoll+0x61/0x1a0 [ 1855.879605] io_submit_sqes+0x7cd4/0x8fc0 [ 1855.880091] ? io_async_task_func+0x560/0x560 [ 1855.880603] ? io_rsrc_buf_put+0x50/0x50 [ 1855.881058] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1855.881614] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1855.882135] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1855.882177] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1855.882623] ? wait_for_completion_io+0x270/0x270 [ 1855.882643] ? lock_is_held_type+0xd7/0x130 [ 1855.884833] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1855.885453] ? vfs_write+0x188/0xae0 [ 1855.885847] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1855.886474] ? fput+0x2a/0x50 [ 1855.886809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1855.887383] do_syscall_64+0x3b/0x90 [ 1855.887788] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1855.888395] RIP: 0033:0x7f61270a3b19 [ 1855.888806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1855.890837] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1855.891627] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1855.892421] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1855.893222] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1855.894009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1855.894797] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1855.895589] [ 1855.907189] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:13:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x6) 12:13:38 executing program 7: ioprio_get$uid(0x3, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x2, {0x2, {0x20, 0x0, 0x4}, 0x120, r0, 0x0, 0xfffffffffffffff9, 0xfffffffffffff000, 0x10001, 0xffffffff, 0x8, 0x4, 0x1000, 0x100000001, 0xde, 0x0, 0x9, 0x9, 0x4}}, 0xa0) 12:13:38 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) [ 1855.950736] loop1: detected capacity change from 0 to 256 [ 1855.963026] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:13:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xd30a000000000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:13:38 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:13:38 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 12:13:38 executing program 3: ioprio_get$uid(0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000000540)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@multicast2, @in6=@remote, 0x4e22, 0x2, 0x4e20, 0x7, 0xa, 0x80, 0x80, 0x5c, r0, r2}, {0x1000, 0x5, 0x0, 0x7, 0x101, 0x2}, {0x7, 0x4, 0x16, 0xd9}, 0x5, 0x6e6bbf, 0x2, 0x1, 0x2, 0x2}, {{@in6=@local, 0x4d5, 0x6c}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x3, 0x0, 0x8, 0x1000, 0x3}}, 0xe8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r1) [ 1855.998050] FAULT_INJECTION: forcing a failure. [ 1855.998050] name failslab, interval 1, probability 0, space 0, times 0 [ 1855.999317] CPU: 1 PID: 12858 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1856.000181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1856.001377] Call Trace: [ 1856.001647] [ 1856.001903] dump_stack_lvl+0x8b/0xb3 [ 1856.002324] should_fail.cold+0x5/0xa [ 1856.002732] ? create_io_worker+0xf6/0x630 [ 1856.003187] should_failslab+0x5/0x10 [ 1856.003582] kmem_cache_alloc_node_trace+0x59/0x3f0 [ 1856.004117] create_io_worker+0xf6/0x630 [ 1856.004551] io_wqe_enqueue+0x692/0xb90 [ 1856.004985] ? create_io_worker+0x630/0x630 [ 1856.005443] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1856.005991] ? lock_is_held_type+0xd7/0x130 [ 1856.006453] io_queue_async_work+0x271/0x5a0 [ 1856.006920] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 1856.007457] io_req_task_submit+0x3b3/0x530 [ 1856.007931] tctx_task_work+0x19f/0xe80 [ 1856.008367] ? lock_downgrade+0x6d0/0x6d0 [ 1856.008816] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 1856.009413] ? rwlock_bug.part.0+0x90/0x90 [ 1856.009878] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1856.010388] task_work_run+0xe2/0x1a0 [ 1856.010813] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 1856.011357] syscall_exit_to_user_mode+0x19/0x50 [ 1856.011882] do_syscall_64+0x48/0x90 [ 1856.012308] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1856.012859] RIP: 0033:0x7f61270a3b19 [ 1856.013265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1856.015283] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1856.016110] RAX: 0000000000000002 RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1856.016890] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1856.017642] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1856.018427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1856.019202] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1856.020002] [ 1856.034488] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:13:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x7) 12:13:38 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1", 0x2d, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1856.078675] loop1: detected capacity change from 0 to 256 12:13:38 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) [ 1856.095574] loop4: detected capacity change from 0 to 264192 [ 1856.096331] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1856.106355] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1856.110544] ramfs: Bad value for 'mode' [ 1856.120379] FAULT_INJECTION: forcing a failure. [ 1856.120379] name failslab, interval 1, probability 0, space 0, times 0 [ 1856.122766] CPU: 0 PID: 12876 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1856.124478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1856.126803] Call Trace: [ 1856.127336] [ 1856.127800] dump_stack_lvl+0x8b/0xb3 [ 1856.128610] should_fail.cold+0x5/0xa [ 1856.129428] ? create_object.isra.0+0x3a/0xa20 [ 1856.130389] should_failslab+0x5/0x10 [ 1856.131171] kmem_cache_alloc+0x5b/0x480 [ 1856.132018] create_object.isra.0+0x3a/0xa20 [ 1856.132943] ? kasan_unpoison+0x23/0x50 [ 1856.133779] kmem_cache_alloc_bulk+0x387/0x670 [ 1856.134733] io_submit_sqes.cold+0x20b/0x435 [ 1856.135668] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1856.136462] FAULT_INJECTION: forcing a failure. [ 1856.136462] name failslab, interval 1, probability 0, space 0, times 0 [ 1856.136733] ? io_async_task_func+0x560/0x560 [ 1856.138917] ? io_rsrc_buf_put+0x50/0x50 [ 1856.139772] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1856.140832] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1856.141857] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1856.142766] ? wait_for_completion_io+0x270/0x270 [ 1856.143775] ? lock_is_held_type+0xd7/0x130 [ 1856.144675] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1856.145830] ? vfs_write+0x188/0xae0 [ 1856.146614] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1856.147750] ? fput+0x2a/0x50 [ 1856.148421] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1856.149499] do_syscall_64+0x3b/0x90 [ 1856.150287] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1856.151353] RIP: 0033:0x7f1fc76cdb19 [ 1856.152120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1856.155917] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1856.157489] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1856.158948] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1856.160405] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1856.161869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1856.163326] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1856.164830] [ 1856.165305] CPU: 1 PID: 12883 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1856.166242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1856.167499] Call Trace: [ 1856.167774] [ 1856.168018] dump_stack_lvl+0x8b/0xb3 [ 1856.168468] should_fail.cold+0x5/0xa [ 1856.168884] ? create_object.isra.0+0x3a/0xa20 [ 1856.169404] should_failslab+0x5/0x10 [ 1856.169818] kmem_cache_alloc+0x5b/0x480 [ 1856.170279] create_object.isra.0+0x3a/0xa20 [ 1856.170751] ? kasan_unpoison+0x23/0x50 [ 1856.171200] kmem_cache_alloc_node_trace+0x256/0x3f0 [ 1856.171603] ramfs: Bad value for 'mode' [ 1856.171740] create_io_worker+0xf6/0x630 [ 1856.173022] io_wqe_enqueue+0x692/0xb90 [ 1856.173486] ? create_io_worker+0x630/0x630 [ 1856.173945] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1856.174529] ? lock_is_held_type+0xd7/0x130 [ 1856.174994] io_queue_async_work+0x271/0x5a0 [ 1856.175505] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 1856.176003] io_req_task_submit+0x3b3/0x530 [ 1856.176501] tctx_task_work+0x19f/0xe80 [ 1856.176938] ? lock_downgrade+0x6d0/0x6d0 [ 1856.177393] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 1856.177960] ? rwlock_bug.part.0+0x90/0x90 [ 1856.178438] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1856.178916] task_work_run+0xe2/0x1a0 [ 1856.179350] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 1856.179860] syscall_exit_to_user_mode+0x19/0x50 [ 1856.180393] do_syscall_64+0x48/0x90 [ 1856.180802] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1856.181374] RIP: 0033:0x7f61270a3b19 [ 1856.181755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1856.183763] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1856.184560] RAX: 0000000000000002 RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1856.185305] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1856.186036] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1856.186774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1856.187513] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1856.188262] [ 1856.207064] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:13:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x8) 12:13:38 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) [ 1856.285910] loop1: detected capacity change from 0 to 256 [ 1856.301270] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1856.321246] FAULT_INJECTION: forcing a failure. [ 1856.321246] name failslab, interval 1, probability 0, space 0, times 0 [ 1856.323811] CPU: 0 PID: 12891 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1856.325568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1856.327939] Call Trace: [ 1856.328476] [ 1856.328966] dump_stack_lvl+0x8b/0xb3 [ 1856.329797] should_fail.cold+0x5/0xa [ 1856.330608] ? io_arm_poll_handler+0x22f/0x7a0 [ 1856.331581] ? create_object.isra.0+0x3a/0xa20 [ 1856.332577] should_failslab+0x5/0x10 [ 1856.333377] kmem_cache_alloc+0x5b/0x480 [ 1856.334262] create_object.isra.0+0x3a/0xa20 [ 1856.335191] ? kasan_unpoison+0x23/0x50 [ 1856.336063] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1856.337067] io_arm_poll_handler+0x22f/0x7a0 [ 1856.338025] ? io_setup_async_rw+0x620/0x620 [ 1856.338961] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1856.340143] io_queue_sqe_arm_apoll+0x61/0x1a0 [ 1856.341135] io_submit_sqes+0x7cd4/0x8fc0 [ 1856.342052] ? io_async_task_func+0x560/0x560 [ 1856.343027] ? io_rsrc_buf_put+0x50/0x50 [ 1856.343903] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1856.344990] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1856.346031] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1856.346967] ? wait_for_completion_io+0x270/0x270 [ 1856.347985] ? lock_is_held_type+0xd7/0x130 [ 1856.348922] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1856.350075] ? vfs_write+0x188/0xae0 [ 1856.350883] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1856.352040] ? fput+0x2a/0x50 [ 1856.352728] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1856.353827] do_syscall_64+0x3b/0x90 [ 1856.354626] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1856.355706] RIP: 0033:0x7f61270a3b19 [ 1856.356479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1856.360325] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1856.361953] RAX: ffffffffffffffda RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1856.363479] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1856.364994] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1856.366519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1856.368026] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1856.369592] [ 1856.373617] loop4: detected capacity change from 0 to 264192 12:13:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:13:38 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:13:38 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f", 0x44, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1856.382143] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1856.413273] ramfs: Bad value for 'mode' [ 1856.418033] ramfs: Bad value for 'mode' [ 1856.421380] EXT4-fs error (device loop4): __ext4_fill_super:5273: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1856.426515] EXT4-fs (loop4): Remounting filesystem read-only [ 1856.427850] EXT4-fs (loop4): get root inode failed [ 1856.428925] EXT4-fs (loop4): mount failed 12:13:51 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 12:13:51 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 12:13:51 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f", 0x44, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:13:51 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:13:51 executing program 3: ioprio_get$uid(0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) 12:13:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0xc) 12:13:51 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioprio_get$uid(0x3, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=unix,', {[{@cache_fscache}, {@fscache}, {@nodevmap}, {@loose}, {@version_u}], [{@dont_measure}, {@context={'context', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, '+*\xd6},x.#.'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@hash}, {@smackfsroot={'smackfsroot', 0x3d, 'g#'}}]}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x80000000, 0xfff, 0x8}) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r2) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000004c0)) 12:13:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xffffff7f00000000, 0x0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1868.954878] loop4: detected capacity change from 0 to 264192 [ 1868.955754] FAULT_INJECTION: forcing a failure. [ 1868.955754] name failslab, interval 1, probability 0, space 0, times 0 [ 1868.957363] CPU: 1 PID: 12923 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1868.958244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1868.959492] Call Trace: [ 1868.959772] [ 1868.960020] dump_stack_lvl+0x8b/0xb3 [ 1868.960458] should_fail.cold+0x5/0xa [ 1868.960877] ? create_object.isra.0+0x3a/0xa20 [ 1868.961406] should_failslab+0x5/0x10 [ 1868.961827] kmem_cache_alloc+0x5b/0x480 [ 1868.962286] ? mark_held_locks+0x9e/0xe0 [ 1868.962746] create_object.isra.0+0x3a/0xa20 [ 1868.963245] ? kasan_unpoison+0x23/0x50 [ 1868.963696] kmem_cache_alloc_bulk+0x387/0x670 [ 1868.964220] io_submit_sqes.cold+0x20b/0x435 [ 1868.964710] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1868.965290] ? io_async_task_func+0x560/0x560 [ 1868.965794] ? io_rsrc_buf_put+0x50/0x50 [ 1868.966250] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1868.966805] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1868.967368] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1868.967863] ? wait_for_completion_io+0x270/0x270 [ 1868.968421] ? lock_is_held_type+0xd7/0x130 [ 1868.968898] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1868.969515] ? vfs_write+0x188/0xae0 [ 1868.969928] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1868.970521] ? fput+0x2a/0x50 [ 1868.970879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1868.971456] do_syscall_64+0x3b/0x90 [ 1868.971879] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1868.972451] RIP: 0033:0x7f1fc76cdb19 [ 1868.972864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1868.974316] loop1: detected capacity change from 0 to 256 [ 1868.974941] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1868.976876] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1868.977681] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1868.978478] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1868.978820] ramfs: Bad value for 'mode' [ 1868.979273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1868.979281] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1868.979304] [ 1868.992562] FAULT_INJECTION: forcing a failure. [ 1868.992562] name failslab, interval 1, probability 0, space 0, times 0 [ 1868.993861] CPU: 1 PID: 12921 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1868.994734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1868.995935] Call Trace: [ 1868.996200] [ 1868.996431] dump_stack_lvl+0x8b/0xb3 [ 1868.996845] should_fail.cold+0x5/0xa [ 1868.997264] ? create_object.isra.0+0x3a/0xa20 [ 1868.997754] should_failslab+0x5/0x10 [ 1868.998162] kmem_cache_alloc+0x5b/0x480 [ 1868.998588] create_object.isra.0+0x3a/0xa20 [ 1868.999050] ? kasan_unpoison+0x23/0x50 [ 1868.999472] kmem_cache_alloc_node+0x248/0x490 [ 1868.999959] copy_process+0x5c4/0x6d40 [ 1869.000382] ? filter_irq_stacks+0x90/0x90 [ 1869.000845] ? __stack_depot_save+0x35/0x450 [ 1869.001332] ? kasan_save_stack+0x1e/0x40 [ 1869.001765] ? __kasan_kmalloc+0x81/0xa0 [ 1869.002184] ? create_io_worker+0xf6/0x630 [ 1869.002644] ? __cleanup_sighand+0xb0/0xb0 [ 1869.003090] ? do_syscall_64+0x48/0x90 [ 1869.003501] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1869.004058] ? lock_is_held_type+0xd7/0x130 [ 1869.004201] EXT4-fs error (device loop4): __ext4_fill_super:5273: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1869.004504] ? find_held_lock+0x2c/0x110 [ 1869.007561] ? user_worker_create+0x16c/0x180 [ 1869.008037] ? io_wqe_dec_running+0x210/0x210 [ 1869.008518] user_worker_create+0x10e/0x180 [ 1869.008986] ? copy_process+0x6d40/0x6d40 [ 1869.009423] ? io_wqe_dec_running+0x210/0x210 [ 1869.009903] ? lockdep_init_map_type+0x2c3/0x7a0 [ 1869.010399] create_io_worker+0x253/0x630 [ 1869.010840] io_wqe_enqueue+0x692/0xb90 [ 1869.011272] ? create_io_worker+0x630/0x630 [ 1869.011721] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1869.012263] ? lock_is_held_type+0xd7/0x130 [ 1869.012712] io_queue_async_work+0x271/0x5a0 [ 1869.013193] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 1869.013682] io_req_task_submit+0x3b3/0x530 [ 1869.014135] tctx_task_work+0x19f/0xe80 [ 1869.014554] ? lock_downgrade+0x6d0/0x6d0 [ 1869.014994] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 1869.015558] ? rwlock_bug.part.0+0x90/0x90 [ 1869.016013] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1869.016485] task_work_run+0xe2/0x1a0 [ 1869.016895] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 1869.017425] syscall_exit_to_user_mode+0x19/0x50 [ 1869.017928] do_syscall_64+0x48/0x90 [ 1869.018320] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1869.018881] RIP: 0033:0x7f61270a3b19 [ 1869.019275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1869.021244] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1869.022081] RAX: 0000000000000002 RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1869.022845] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1869.023622] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1869.024399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1869.025183] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1869.025966] [ 1869.027120] EXT4-fs (loop4): Remounting filesystem read-only [ 1869.027656] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1869.027941] EXT4-fs (loop4): get root inode failed [ 1869.029973] EXT4-fs (loop4): mount failed [ 1869.031538] ramfs: Bad value for 'mode' 12:13:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1869.106027] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:13:51 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r2, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:13:51 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f", 0x44, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:13:51 executing program 3: ioprio_get$uid(0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB="03000000000000002e2f66696c653000"]) r1 = getpid() r2 = getpid() kcmp(r1, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$vcsu(&(0x7f0000000040), 0xfffffffffffffffa, 0x181001) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r3, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000480)) close(0xffffffffffffffff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r3) recvmsg$unix(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)}, 0x2000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000001500), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000001580)=""/246, 0xf6}, {&(0x7f0000001680)=""/31, 0x1f}, {&(0x7f00000016c0)=""/218, 0xda}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/79, 0x4f}], 0x6, &(0x7f00000038c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x68}, 0x40) newfstatat(0xffffffffffffff9c, &(0x7f0000003a80)='./file0\x00', &(0x7f0000003ac0), 0x400) mount$tmpfs(0x0, &(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00), 0x1021040, &(0x7f0000003b40)={[{@huge_always}], [{@uid_lt={'uid<', r5}}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, '\'\xc8SY.%}'}}, {@fsname={'fsname', 0x3d, '!'}}, {@measure}, {@euid_eq}, {@permit_directio}, {@euid_gt}]}) r7 = accept$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) write$binfmt_misc(r7, &(0x7f0000000180)={'syz1', "b5d22314de4d8126cb5d525c49b5aa827f69ba312b387f239a7461f161a63de6ba1bd102292fc0d2b849460630482833f28733bf5e3c68d9889796be9b3a3bc47aacf71a3905c39f2133ff726145d4e456fa26052e4f03e37dd0ea8776d06a288a4bcf8205034e7870e362a366d061202c591db53486e5b9aa5ec72582f9383d825c627abdfd3f50c7ca"}, 0x8e) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003980)={r2, 0x0, r6}, 0xc) 12:13:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x10) [ 1869.148910] loop4: detected capacity change from 0 to 264192 [ 1869.151317] ramfs: Bad value for 'mode' [ 1869.161604] ramfs: Bad value for 'mode' [ 1869.175724] EXT4-fs error (device loop4): __ext4_fill_super:5273: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1869.182568] loop1: detected capacity change from 0 to 256 [ 1869.183336] EXT4-fs (loop4): Remounting filesystem read-only [ 1869.183961] EXT4-fs (loop4): get root inode failed [ 1869.184511] EXT4-fs (loop4): mount failed [ 1869.214209] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1869.278116] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:14:04 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 12:14:04 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x20941) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x30}}}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6, 0x3}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x4}, {0x1}, {0x1, 0x3}, {0x4, 0x3}, {}, {0x0, 0x5}, {0x81, 0x4}, {0x5, 0x3}, {0xfa}, {0x8, 0x3}, {0x3, 0x5}, {0xa9, 0x3}, {0x8, 0x1}, {0x5c, 0x5}, {0x40, 0x2}, {0x0, 0x1}], "b33f24a33cb087ee"}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) 12:14:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) ioprio_get$uid(0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001580), 0x80000000, 0x80480) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r3) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001600)={{{@in6=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000001700)=0xe8) r5 = syz_mount_image$iso9660(&(0x7f0000001740), &(0x7f0000001780)='./file0\x00', 0x100000000, 0x6, &(0x7f0000001b00)=[{&(0x7f00000017c0)="aa393c", 0x3, 0x1}, {&(0x7f0000001800)="8b6a51075e750031c93387955819a7af2578b3c2f587b7ddbc6453bcf6df089e9f42655ffd8fa7724838bb4578eb11105c8dfa8971625019e09957112704d4105ffb45b2957e56925724df12612553b2a5ed0a163f6c", 0x56, 0x1}, {&(0x7f0000001880)="917e638442861d67515c8d792c71a4c5a6de1c495177298d9d6cd98b2e2f42dea4c04a9cf88197f2e94c44caa382ea333fc62f3e38b8a59a350c5b2493c3275b27454035e7f8a0b54d181395c83efb775e8fe86beab9eced78847ffd09e7d39d6c7f2efb490c3b09b32f894d41119ed03835c90814cde43e4bd75e38bfa9f62d4a95296dbdc281704a9453bc661e0238fa94a2514a70acb96e44ab1c6e2e5d2fe527c4bb2cd82ae09a5894de9e290366875536e70a5a1635d44a5d2f68f1929a56c5ffada7ba4c09e30e5e000aea74a32790b7f6ae8d1b8c2e05ca87ec149a2dc7a93a601383e463a0", 0xe9, 0x6}, {&(0x7f0000001980)="30efaccd", 0x4, 0x1}, {&(0x7f00000019c0)="e250300679e09cace9f2b959cf702808c26c09092f5df036b4892174892a00550a49a9aa14801ca49cdfdd1aea31ab402f26b8a0419a945b075ee2310e221febc20052b856350146fbe967d82b38cc3992c393b054a34ee4609a52b584c8355f1a", 0x61, 0x41ac}, {&(0x7f0000001a40)="0f08ba7373cb897de74f0cca2a38ab8fb49982ec8e8b3433c581775fd01c78a6d573483dde5357a7bd4e7400338f07b820430ce2d1a9edca74e2e8c9e4d8e60c2ce5ae4c0476bdd3927081859601a408f398a18ff82f204abb6ecca7154afa32ee3a8739c1e4ccbef6aecd11ecbbd2e41e3149007b7b46990613e0b16604eaf87315e364fce066f7d519d21f7d8ca34ce70ddab7f714b55a646f867a171ffc9928918a839469e58820208fc2249cb5aee1864e", 0xb3, 0x1ff}], 0x22000, &(0x7f0000001bc0)={[{@cruft}, {}, {@block={'block', 0x3d, 0x800}}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x200}}, {@sbsector={'sbsector', 0x3d, 0x1f}}], [{@appraise_type}, {@obj_user={'obj_user', 0x3d, 'syz\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0xe}}, {@uid_lt}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000300)="ab15b18f967f8d3b3a51f4e72a5848d1dfe7bc9803c83218bd82d8d8a474c0c386966fe99dd93f24706a4dee784dcd738413a37c1dbc63a78ddeb3fc1c7097cca0ed", 0x42}, {&(0x7f0000000380)="61058cd55fb0427fee3b18b8ee66eb1d578851795025eaf0ef0ba3b611b71074d49c83fa8a519120844212fcaac1bcb7cce237d4119ce7773210e8da868c453bb3fa12ed2bf3dc11a320ca22469efa94f62c645d81f8fb4bb3778bc3a73ac2367b4addd2728c34ec16fe6817ae72f43a9d24cf50820854c5c51f75c851ea8b93d06f7f9d6730786f0d4499eae1973d0be18132e00ad04396af7b0da666d29b13fb01f2f473840ff842739129a1701d22b2bea5b282", 0xb5}, {&(0x7f0000000440)="1e28955c78fa20e2119857e25173232a59e70536dbe493d02e2c284fd8adc82cf20679ac12e20982f316a886525476910230f752f820e9", 0x37}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="69fb367163e09f1a701abba3a32b55fa438e2567915703f5763e91d143c4c70ae43b431c1c7675dcabca0d782ae06403ffb44eaf712dcb5638decb6f3244e7805f51f769fbe38a9a17716637a746c5574b73b4bc8bcf5d1dee5de22e00ac", 0x5e}], 0x5, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [r0, r1, r0, 0xffffffffffffffff, r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r5, r6, r0]}}], 0x68}, 0x40) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000180)='\x00', &(0x7f0000000080), 0x2018004, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=xen,cache=loose,debug=0x00000000ffffffff,mmap,dfltuid=', @ANYRESHEX=0xee01, @ANYBLOB=',msize=0x00000000000007ff,subj_user=,defcontext=staff_u,\x00\x00j_role=/,fscontext=staff_u,\x00']) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/212, 0xd4) 12:14:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x12) 12:14:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x3, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:14:04 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 12:14:04 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:14:04 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r2, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1882.573562] loop1: detected capacity change from 0 to 256 [ 1882.587797] loop4: detected capacity change from 0 to 264192 12:14:04 executing program 3: ioprio_get$uid(0x3, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setfsuid(r0) [ 1882.607964] EXT4-fs (loop4): invalid first ino: 0 [ 1882.615853] FAULT_INJECTION: forcing a failure. [ 1882.615853] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.615957] FAULT_INJECTION: forcing a failure. [ 1882.615957] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.617057] CPU: 0 PID: 12980 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1882.620295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1882.621481] Call Trace: [ 1882.621751] [ 1882.621981] dump_stack_lvl+0x8b/0xb3 [ 1882.622403] should_fail.cold+0x5/0xa [ 1882.622804] ? create_object.isra.0+0x3a/0xa20 [ 1882.623291] should_failslab+0x5/0x10 [ 1882.623696] kmem_cache_alloc+0x5b/0x480 [ 1882.624131] create_object.isra.0+0x3a/0xa20 [ 1882.624591] ? kasan_unpoison+0x23/0x50 [ 1882.625027] kmem_cache_alloc_node_trace+0x256/0x3f0 [ 1882.625594] create_io_worker+0xf6/0x630 [ 1882.626053] io_wqe_enqueue+0x692/0xb90 [ 1882.626495] ? create_io_worker+0x630/0x630 [ 1882.626966] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1882.627527] ? lock_is_held_type+0xd7/0x130 [ 1882.627993] io_queue_async_work+0x271/0x5a0 [ 1882.628476] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 1882.628973] io_req_task_submit+0x3b3/0x530 [ 1882.629454] tctx_task_work+0x19f/0xe80 [ 1882.629887] ? lock_downgrade+0x6d0/0x6d0 [ 1882.630347] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 1882.630932] ? rwlock_bug.part.0+0x90/0x90 [ 1882.631400] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1882.631890] task_work_run+0xe2/0x1a0 [ 1882.632316] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 1882.632847] syscall_exit_to_user_mode+0x19/0x50 [ 1882.633372] do_syscall_64+0x48/0x90 [ 1882.633791] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1882.634360] RIP: 0033:0x7f61270a3b19 [ 1882.634762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1882.636733] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1882.637571] RAX: 0000000000000002 RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1882.638346] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1882.639111] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1882.639887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1882.640668] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1882.641455] [ 1882.641708] CPU: 1 PID: 12968 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1882.643483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1882.645872] Call Trace: [ 1882.646415] [ 1882.646886] dump_stack_lvl+0x8b/0xb3 [ 1882.647715] should_fail.cold+0x5/0xa [ 1882.648542] ? create_object.isra.0+0x3a/0xa20 [ 1882.649531] should_failslab+0x5/0x10 [ 1882.650334] kmem_cache_alloc+0x5b/0x480 [ 1882.651203] ? mark_held_locks+0x9e/0xe0 [ 1882.652072] create_object.isra.0+0x3a/0xa20 [ 1882.653018] ? kasan_unpoison+0x23/0x50 [ 1882.653888] kmem_cache_alloc_bulk+0x387/0x670 [ 1882.654878] io_submit_sqes.cold+0x20b/0x435 [ 1882.655831] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1882.656907] ? io_async_task_func+0x560/0x560 [ 1882.657888] ? io_rsrc_buf_put+0x50/0x50 [ 1882.658775] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1882.659825] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1882.660881] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1882.661806] ? wait_for_completion_io+0x270/0x270 [ 1882.662847] ? lock_is_held_type+0xd7/0x130 [ 1882.663759] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1882.664935] ? vfs_write+0x188/0xae0 [ 1882.665754] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1882.666928] ? fput+0x2a/0x50 [ 1882.667615] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1882.668724] do_syscall_64+0x3b/0x90 [ 1882.669562] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1882.670655] RIP: 0033:0x7f1fc76cdb19 [ 1882.671446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1882.675329] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1882.676910] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1882.678432] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1882.679915] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1882.681430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1882.682937] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1882.684475] 12:14:04 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) ioprio_get$uid(0x3, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hfsplus\x00', 0x200000, &(0x7f0000000280)='\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='.>\x00\x00\x00e0\x00']) ioprio_set$uid(0x3, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in6=@empty}}, {{@in=@empty}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8) 12:14:04 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r2, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1882.711503] ramfs: Bad value for 'mode' [ 1882.718118] ramfs: Bad value for 'mode' [ 1882.720396] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:14:04 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1882.773216] loop4: detected capacity change from 0 to 264192 12:14:04 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 1882.785865] EXT4-fs (loop4): invalid first ino: 0 [ 1882.828540] FAULT_INJECTION: forcing a failure. [ 1882.828540] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.829879] CPU: 0 PID: 13006 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1882.830753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1882.831922] Call Trace: [ 1882.832186] [ 1882.832415] dump_stack_lvl+0x8b/0xb3 [ 1882.832838] should_fail.cold+0x5/0xa [ 1882.833244] ? copy_process+0x5c4/0x6d40 [ 1882.833672] should_failslab+0x5/0x10 [ 1882.834074] kmem_cache_alloc_node+0x55/0x490 [ 1882.834560] copy_process+0x5c4/0x6d40 [ 1882.834966] ? filter_irq_stacks+0x90/0x90 [ 1882.835418] ? __stack_depot_save+0x35/0x450 [ 1882.835898] ? kasan_save_stack+0x1e/0x40 [ 1882.836334] ? __kasan_kmalloc+0x81/0xa0 [ 1882.836769] ? create_io_worker+0xf6/0x630 [ 1882.837239] ? __cleanup_sighand+0xb0/0xb0 [ 1882.837678] ? do_syscall_64+0x48/0x90 [ 1882.838092] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1882.838653] ? lock_is_held_type+0xd7/0x130 [ 1882.839127] ? find_held_lock+0x2c/0x110 [ 1882.839561] ? user_worker_create+0x16c/0x180 [ 1882.840049] ? io_wqe_dec_running+0x210/0x210 [ 1882.840536] user_worker_create+0x10e/0x180 [ 1882.841004] ? copy_process+0x6d40/0x6d40 [ 1882.841468] ? io_wqe_dec_running+0x210/0x210 [ 1882.841956] ? lockdep_init_map_type+0x2c3/0x7a0 [ 1882.842483] create_io_worker+0x253/0x630 [ 1882.842936] io_wqe_enqueue+0x692/0xb90 [ 1882.843376] ? create_io_worker+0x630/0x630 [ 1882.843846] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1882.844408] ? lock_is_held_type+0xd7/0x130 [ 1882.844877] io_queue_async_work+0x271/0x5a0 [ 1882.845375] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 1882.845868] io_req_task_submit+0x3b3/0x530 [ 1882.846341] tctx_task_work+0x19f/0xe80 [ 1882.846777] ? lock_downgrade+0x6d0/0x6d0 [ 1882.847233] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 1882.847812] ? rwlock_bug.part.0+0x90/0x90 [ 1882.848273] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1882.848757] task_work_run+0xe2/0x1a0 [ 1882.849209] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 1882.849741] syscall_exit_to_user_mode+0x19/0x50 [ 1882.850256] do_syscall_64+0x48/0x90 [ 1882.850661] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1882.851210] RIP: 0033:0x7f61270a3b19 [ 1882.851601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1882.853582] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1882.854395] RAX: 0000000000000002 RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1882.855157] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1882.855927] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1882.856697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1882.857477] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1882.858253] [ 1895.050461] loop1: detected capacity change from 0 to 256 [ 1895.062165] FAULT_INJECTION: forcing a failure. [ 1895.062165] name failslab, interval 1, probability 0, space 0, times 0 [ 1895.063421] CPU: 0 PID: 13023 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1895.064280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1895.065471] Call Trace: [ 1895.065742] [ 1895.065972] dump_stack_lvl+0x8b/0xb3 [ 1895.066384] should_fail.cold+0x5/0xa [ 1895.066785] ? create_object.isra.0+0x3a/0xa20 [ 1895.067279] should_failslab+0x5/0x10 [ 1895.067672] kmem_cache_alloc+0x5b/0x480 [ 1895.068094] ? mark_held_locks+0x9e/0xe0 [ 1895.068522] create_object.isra.0+0x3a/0xa20 [ 1895.068984] ? kasan_unpoison+0x23/0x50 [ 1895.069425] kmem_cache_alloc_bulk+0x387/0x670 [ 1895.069910] io_submit_sqes.cold+0x20b/0x435 [ 1895.070383] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1895.070907] ? io_async_task_func+0x560/0x560 [ 1895.071381] ? io_rsrc_buf_put+0x50/0x50 [ 1895.071808] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1895.072331] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1895.072846] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1895.073313] ? wait_for_completion_io+0x270/0x270 [ 1895.073820] ? lock_is_held_type+0xd7/0x130 [ 1895.074275] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1895.074846] ? vfs_write+0x188/0xae0 12:14:17 executing program 3: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000300)=""/105, 0x69}, {&(0x7f0000000380)=""/194, 0xc2}, {&(0x7f0000000480)=""/177, 0xb1}, {&(0x7f0000000540)=""/74, 0x4a}, {&(0x7f0000000840)=""/51, 0x33}, {&(0x7f0000000600)=""/245, 0xf5}], 0x6, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x68}, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) clock_gettime(0x0, &(0x7f0000002200)) r4 = signalfd(r1, &(0x7f0000000940)={[0x8]}, 0x8) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) recvmmsg$unix(r4, &(0x7f0000002100), 0x0, 0x40010122, &(0x7f0000002240)={r5, r6+10000000}) lchown(&(0x7f00000005c0)='./file0\x00', r3, 0x0) lchown(&(0x7f0000000200)='./file0\x00', r2, r0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) ioprio_get$uid(0x3, r8) ioprio_get$uid(0x3, r7) 12:14:17 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 12:14:17 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 12:14:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x18) 12:14:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x4, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:14:17 executing program 7: ioprio_get$uid(0x3, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004700)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000180)=""/105, 0x69}, {&(0x7f0000000200)=""/236, 0xec}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/57, 0x39}, {&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f0000000440)=""/254, 0xfe}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x7, &(0x7f00000015c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f00000016c0)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001740)=""/105, 0x69}, {&(0x7f00000017c0)=""/188, 0xbc}, {&(0x7f0000001880)=""/99, 0x63}, {&(0x7f0000001900)=""/131, 0x83}, {&(0x7f00000019c0)=""/76, 0x4c}, {&(0x7f0000001a40)=""/169, 0xa9}], 0x6, &(0x7f0000001b80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001bc0)=""/105, 0x69}], 0x1, &(0x7f0000001c80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001d40)=""/220, 0xdc}], 0x1, &(0x7f0000001e80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001f40)=@abs, 0x6e, &(0x7f0000003200)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/66, 0x42}, {&(0x7f0000003040)=""/181, 0xb5}, {&(0x7f0000003100)=""/207, 0xcf}], 0x4, &(0x7f0000003240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000003280)=@abs, 0x6e, &(0x7f0000003380)=[{&(0x7f0000003300)=""/31, 0x1f}, {&(0x7f0000003340)=""/24, 0x18}], 0x2}}, {{&(0x7f00000033c0)=@abs, 0x6e, &(0x7f0000004640)=[{&(0x7f0000003440)=""/172, 0xac}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/104, 0x68}, {&(0x7f0000004580)=""/123, 0x7b}, {&(0x7f0000004600)=""/51, 0x33}], 0x5, &(0x7f00000046c0)=[@cred={{0x1c}}], 0x20}}], 0x7, 0x10101, &(0x7f00000048c0)) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f0000004900)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@msize={'msize', 0x3d, 0x8}}, {@access_client}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@mmap}, {@dfltuid={'dfltuid', 0x3d, r0}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_lt}, {@dont_measure}, {@fsname={'fsname', 0x3d, '/,:&&-[.()%-&'}}]}}) 12:14:17 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:14:17 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1895.075241] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1895.076098] ? fput+0x2a/0x50 [ 1895.076434] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1895.076976] do_syscall_64+0x3b/0x90 [ 1895.077384] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1895.077915] RIP: 0033:0x7f1fc76cdb19 [ 1895.078300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1895.080191] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1895.080975] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1895.081751] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1895.082484] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1895.083238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1895.083971] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1895.084730] [ 1895.098051] FAULT_INJECTION: forcing a failure. [ 1895.098051] name failslab, interval 1, probability 0, space 0, times 0 [ 1895.100373] CPU: 1 PID: 13022 Comm: syz-executor.6 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1895.102051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1895.104296] Call Trace: [ 1895.104818] [ 1895.105275] dump_stack_lvl+0x8b/0xb3 [ 1895.106114] should_fail.cold+0x5/0xa [ 1895.106942] ? create_object.isra.0+0x3a/0xa20 [ 1895.107877] should_failslab+0x5/0x10 [ 1895.108636] kmem_cache_alloc+0x5b/0x480 [ 1895.109465] create_object.isra.0+0x3a/0xa20 [ 1895.110352] ? kasan_unpoison+0x23/0x50 [ 1895.111166] kmem_cache_alloc+0x239/0x480 [ 1895.111991] alloc_pid+0xcd/0xd80 [ 1895.112693] ? copy_thread+0x304/0x950 [ 1895.113466] ? copy_namespaces+0x1c1/0x450 [ 1895.114317] copy_process+0x3e72/0x6d40 [ 1895.115114] ? filter_irq_stacks+0x90/0x90 [ 1895.115963] ? __stack_depot_save+0x35/0x450 [ 1895.116869] ? __cleanup_sighand+0xb0/0xb0 [ 1895.117748] ? do_syscall_64+0x48/0x90 [ 1895.118525] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1895.119582] ? lock_is_held_type+0xd7/0x130 [ 1895.120441] ? find_held_lock+0x2c/0x110 [ 1895.121237] ? user_worker_create+0x16c/0x180 [ 1895.122051] ramfs: Bad value for 'mode' [ 1895.122157] ? io_wqe_dec_running+0x210/0x210 [ 1895.123507] user_worker_create+0x10e/0x180 [ 1895.124375] ? copy_process+0x6d40/0x6d40 [ 1895.124523] ramfs: Bad value for 'mode' [ 1895.125215] ? io_wqe_dec_running+0x210/0x210 [ 1895.126561] ? lockdep_init_map_type+0x2c3/0x7a0 [ 1895.127517] create_io_worker+0x253/0x630 [ 1895.128357] io_wqe_enqueue+0x692/0xb90 [ 1895.129165] ? create_io_worker+0x630/0x630 [ 1895.130052] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1895.131084] ? lock_is_held_type+0xd7/0x130 [ 1895.131959] io_queue_async_work+0x271/0x5a0 [ 1895.132854] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 1895.133793] io_req_task_submit+0x3b3/0x530 [ 1895.134662] tctx_task_work+0x19f/0xe80 [ 1895.135471] ? lock_downgrade+0x6d0/0x6d0 [ 1895.136311] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 1895.137429] ? rwlock_bug.part.0+0x90/0x90 [ 1895.138276] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1895.139198] task_work_run+0xe2/0x1a0 [ 1895.140001] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 1895.141006] syscall_exit_to_user_mode+0x19/0x50 [ 1895.141969] do_syscall_64+0x48/0x90 [ 1895.142720] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1895.143743] RIP: 0033:0x7f61270a3b19 [ 1895.144478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1895.148130] RSP: 002b:00007f6124619188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1895.149669] RAX: 0000000000000002 RBX: 00007f61271b6f60 RCX: 00007f61270a3b19 [ 1895.151084] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1895.152502] RBP: 00007f61246191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1895.153915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1895.155335] R13: 00007ffdc673536f R14: 00007f6124619300 R15: 0000000000022000 [ 1895.156765] [ 1895.169817] loop4: detected capacity change from 0 to 264192 12:14:17 executing program 3: ioprio_get$uid(0x3, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000014c0)=@abs, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000080)=""/4096, 0x103b}, {&(0x7f0000001540)=""/232, 0xda}, {&(0x7f0000001180)=""/113, 0x71}, {&(0x7f0000001200)=""/198, 0xfebd}, {&(0x7f0000001300)=""/70, 0x46}, {&(0x7f0000001380)=""/99, 0x63}], 0x6}, 0x40002002) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000001080), 0x1206081, &(0x7f00000010c0)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@aname={'aname', 0x3d, '\\:)'}}, {@access_client}, {@aname={'aname', 0x3d, '-]$@'}}, {@cache_none}, {@fscache}, {@cachetag={'cachetag', 0x3d, '[$^$'}}, {@posixacl}], [{@appraise_type}]}}) 12:14:17 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:14:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x5, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1895.183020] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:14:17 executing program 3: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) ioprio_get$uid(0x3, r0) 12:14:17 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) [ 1895.219419] EXT4-fs (loop4): invalid first ino: 0 12:14:17 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) [ 1895.262462] FAULT_INJECTION: forcing a failure. [ 1895.262462] name failslab, interval 1, probability 0, space 0, times 0 [ 1895.263879] CPU: 0 PID: 13051 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1895.264766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1895.265977] Call Trace: [ 1895.266256] [ 1895.266487] dump_stack_lvl+0x8b/0xb3 [ 1895.266898] should_fail.cold+0x5/0xa [ 1895.267304] ? create_object.isra.0+0x3a/0xa20 [ 1895.267792] should_failslab+0x5/0x10 [ 1895.268195] kmem_cache_alloc+0x5b/0x480 [ 1895.268624] ? mark_held_locks+0x9e/0xe0 [ 1895.269059] create_object.isra.0+0x3a/0xa20 [ 1895.269526] ? kasan_unpoison+0x23/0x50 [ 1895.269960] kmem_cache_alloc_bulk+0x387/0x670 [ 1895.270451] io_submit_sqes.cold+0x20b/0x435 [ 1895.270927] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 1895.271466] ? io_async_task_func+0x560/0x560 [ 1895.271964] ? io_rsrc_buf_put+0x50/0x50 [ 1895.272398] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1895.272941] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1895.273459] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1895.273934] ? wait_for_completion_io+0x270/0x270 [ 1895.274443] ? lock_is_held_type+0xd7/0x130 [ 1895.274914] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1895.275483] ? vfs_write+0x188/0xae0 [ 1895.275890] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1895.276455] ? fput+0x2a/0x50 [ 1895.276808] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1895.277370] do_syscall_64+0x3b/0x90 [ 1895.277780] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1895.278339] RIP: 0033:0x7f1fc76cdb19 [ 1895.278736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1895.280716] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1895.281540] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1895.282308] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1895.283068] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1895.283832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1895.284603] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1895.285402] 12:14:17 executing program 7: ioprio_get$uid(0x3, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x4, 0x9, 0x1, 0xff, 0x0, 0xffffffff00000000, 0x64008, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x81, 0xe4}, 0x10000, 0x0, 0x9, 0x5, 0x6, 0x400, 0xfffa, 0x0, 0xffff4de3, 0x0, 0xfffffffffffff377}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r3, 0x0, r3, 0x0, 0x0, r3, r3, r3, r4]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1, r4}}, './file0\x00'}) 12:14:17 executing program 3: fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) [ 1895.308308] ramfs: Bad value for 'mode' 12:14:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x24) [ 1895.322586] ramfs: Bad value for 'mode' 12:14:17 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:14:17 executing program 7: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) ioprio_get$uid(0x3, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x4e20, 0x0, 0x4e22, 0xe2bc, 0xa, 0xb0, 0x80, 0x21, 0x0, r2}, {0x6, 0x8543, 0x0, 0x0, 0x4, 0x3, 0x9, 0x1f}, {0x6, 0xfffffffffffffffe, 0xff2, 0x1000}, 0x2, 0x6e6bbe, 0x1, 0x0, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d3, 0x6c}, 0xa, @in6=@mcast1, 0x0, 0x1, 0x1, 0x79, 0x5, 0x7542, 0x40}}, 0xe8) [ 1895.375071] loop4: detected capacity change from 0 to 264192 12:14:17 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1895.394492] EXT4-fs (loop4): unsupported inode size: 0 [ 1895.395081] EXT4-fs (loop4): blocksize: 1024 12:14:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2e) 12:14:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x6, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1895.467485] ramfs: Bad value for 'mode' [ 1895.478219] ramfs: Bad value for 'mode' 12:14:32 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 12:14:32 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) 12:14:32 executing program 7: ioprio_get$uid(0x3, 0x0) r0 = getpid() r1 = getpid() kcmp(r0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getgid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001e00)=0x0) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r4, 0x0, r4, 0x0, 0x0, r4, r4, r4, r5]) r6 = getpid() r7 = getpid() kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001f40)={0x0, 0x0}, &(0x7f0000001f80)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001fc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002000)=0x0) getresuid(&(0x7f0000002040), &(0x7f0000002080)=0x0, &(0x7f00000020c0)) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r12, 0x0, r12, 0x0, 0x0, r12, r12, r12, r13]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000000c0)="003747094ad35a7ba854214c959e2e3dd9b33cc58597764f08cb97e49d1a3ad8aab7d3849806fef767854ab27f7a6065254651fde1ce440bc55c022691f3966c2245ea9dd873f77d45f3b1adf1de4858f32bea44525942d6cc6dafda7f05fe9a9370d68bd915494ca9c15b795f4669491cf2d33e698091b5c42fc949995aea1c993d788a731b0eff9874a8ece17ba65fbd9f15b7fd494831795a030d8b217ed6d1cfb7eab5acd8f438fe3d4d3d2dbeb6a9540d40e0c0034e7094d6154655f8d3967933e734a2c2e235b7019b2dc24c7d50b70161102f166afeb36458b9fb7ba7c4712f2d5bb40425c382164faab406a2", 0xf0}, {&(0x7f00000001c0)="463b8fc81759f88f", 0x8}, {&(0x7f0000000200)="087e8e49c3eb215ab45ff6", 0xb}, {&(0x7f0000000240)="67325b3fce49252dd3848960d50a1b825a89c48d07d37542490318e04d8b5b0754817d5e4fb775abfdab653ad913bb7f92e6eac9e71290f87c72bfec42b7bb0304f83943107617cec0c8f571256024f29b9f3e476002f88d286f102412b87e2ed0a7ce0a40a2458308dec0ad2c885564b2972fff89c1cf0908a223", 0x7b}, {&(0x7f00000002c0)="890eb4f3fc4d89c33045876bd36c343dac20af6bc49d9402e260e7b823ec3362b48baca9177919b0db70f3df101f4248a81b563098e4e606b5a1d2979a24d1ea1338927765bc7399b8ae47cf599a689b6940f992c018c4fc45a8f14f48a0c9a8fc4ec3999b4ffb36040883091147e395f7eb22b328d520651945e81b1dd19b8223159ef44784056411fb545c5ac9eacbfc100782ca0fe6288f27101eaafeed942313d4d14be6ce055bfcf2efa32037881e77f1c937caf338952db6408e231b30", 0xc0}, {&(0x7f0000000380)="2b974a276a558c5dc48b3499112e406f19e8397b577f62a11a449dc547acb990cadc18fa9cc77e259ebf18efa99c1c490a8078c21327dd8a07d62733763ad4df13fd5445dabeb1d84cade9bf09e61a014b5f1f93746008b97fe91960e5ea9dfef8c3b7c97e4634b9298fef5ae33d3391ab44abeaef3bb5853d2cbae19ec20762c07ab4d7ba451f21644c5f549a34ac927c94fff9ec232cc956cff2", 0x9b}, {&(0x7f0000000440)="4bbb9ff17eb8dab442f13a80c2facdb5886f42706c1eb320b9b55cfe494621e33519e16ad12a2da6fa05ec6a8d667298696a96c7defd394c459d163f9081ec6729d254001ac7e789a0562788a8b252ecdc0f4f780f57fd33b7b1f71566a34dd8c82bf86ce6c3fb7ed0bd7f57e81baa637b9ca4a92694ea5576e7122382ca478d9673cb58b783a0", 0x87}, {&(0x7f0000000500)="2a7b1aa7e1c907425557e3ec70df10813d7e0ca44bb0f09ec668cf3037be2489ef42af3beff5ccbbc9dce467d5d23b249738efa07b0ceb133a8e6f95aa4220d1aef00e7984d7863c3d3f23bac20c6fa4ca4ea1a7d8120dda5fb6854d3073449446ea58423603749f91bf0476a6c34dc145c6531fdda9e89f8fc91dc22a32ab989cc3032fbb3137b6803c86809a3a9bfb1527b425af58623287bc891cfa231499c67b4192ee3c3966b1c550d8e0cf79919f103b777aab2ae1d0533b77b6e79415f6b0a72beb2c61bb926cc5170c8f7bef9fc75250aea0b076aa9e74455c06b6c0c23ff8fc9b39", 0xe6}, {&(0x7f0000000600)="ce8c4bdc4067ecda51f36b3fbf016fe428af8ba5e6a9d342db0e4ec65895183eda3edf13c89671902969aecaf49dd88d3b26e9476cd200255eb694c2c2a2bad5915c07c565756518135ddf677f91f85314034e", 0x53}], 0x9, &(0x7f0000002100)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="00001c00"], 0x130, 0x40000c0}}], 0x1, 0x2404c010) 12:14:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x7, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:14:32 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:14:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0xc0) 12:14:32 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:14:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x134}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x1001) ioprio_get$uid(0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg(r2, &(0x7f0000004400)=[{{&(0x7f00000001c0)=@can={0x1d, r4}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)="44196b7cf350255ae0caf229e54d0a2bf1e5cb47", 0x14}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x4, 0xfe, 0x5, 0x5, 0x28, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x10, 0x7fff, 0x7}}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg(r6, &(0x7f0000004400)=[{{&(0x7f00000001c0)=@can={0x1d, r8}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)="44196b7cf350255ae0caf229e54d0a2bf1e5cb47", 0x14}], 0x1}}], 0x1, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg(r9, &(0x7f0000004400)=[{{&(0x7f00000001c0)=@can={0x1d, r11}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)="44196b7cf350255ae0caf229e54d0a2bf1e5cb47", 0x14}], 0x1}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10e10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xac, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x9, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000080), 0x0, 0x3f}, {&(0x7f00000000c0)="cc0dde1b948577edc2b5b0dc678c58acf92aca95294dad009c45d599f6e51be813ad3a4bd6369bfe11a744a89bfe95e20eadc1ba5f91ebf54a41cb47c5d40ad6a1a5a8bca7d5d11671d6749cd20525e85cb6878398d62fc8a61fd98c32ed150a5d8f489f1849a15ea89c0f668795f5c78fe9f70fe3b729", 0x77}, {&(0x7f0000000140)="76fd53731f5d29132b290f4c302248d70b8a2dfd09a6c33360a3376059a429ff9079173f76c0dd8d3f9b017fe50395375d4ce4e1ad182782c696a4f34225035bd5b92f09095e05b42042", 0x4a, 0x3ff}], 0x1, &(0x7f0000000240)={[{@fat=@dos1xfloppy}, {@dots}, {@nodots}, {@fat=@sys_immutable}, {@fat=@errors_continue}, {@nodots}], [{@smackfsfloor}]}) [ 1910.342252] loop1: detected capacity change from 0 to 256 [ 1910.347526] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1910.378621] ramfs: Bad value for 'mode' [ 1910.387534] ramfs: Bad value for 'mode' [ 1910.396883] loop4: detected capacity change from 0 to 264192 12:14:32 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_io_uring_setup(0x3776, &(0x7f0000000180)={0x0, 0x5004, 0x1, 0x0, 0x337}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000200)) write$binfmt_aout(r1, &(0x7f0000000240)={{0x3, 0x40, 0x8, 0x22c, 0x191, 0xc01, 0x2a, 0x7}, "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", ['\x00', '\x00']}, 0x1220) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2c, 0x25dfdbff}, 0x2c}, 0x1, 0x0, 0x0, 0x24001010}, 0x4045000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000015c0)={'erspan0\x00', &(0x7f0000001580)={'syztnl1\x00', 0x0, 0x8, 0x10700, 0x8, 0x2, {{0x7, 0x4, 0x2, 0x2, 0x1c, 0x66, 0x0, 0x18, 0x2f, 0x0, @remote, @loopback, {[@generic={0x86, 0x4, "9558"}, @ra={0x94, 0x4}]}}}}}) syz_io_uring_setup(0x7c62, &(0x7f00000014c0)={0x0, 0x9b19, 0x8, 0x1, 0x326}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001540), &(0x7f0000001700)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000001800)={0x800, {{0xa, 0x4e23, 0x8, @loopback, 0x4d4e}}, {{0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff551a}}}, 0x108) syz_io_uring_submit(r2, r3, &(0x7f00000017c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r4, 0x80, &(0x7f0000001740)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x1}, 0x0, 0x0, 0x1}, 0x3ff) r5 = accept4(r4, &(0x7f0000001940)=@tipc, &(0x7f00000019c0)=0x80, 0x0) r6 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001a00)={{{@in6=@empty, @in=@local, 0x4e20, 0x0, 0x4e24, 0x9, 0x935653ddfd28cca0, 0x80, 0x20, 0x89, 0x0, r6}, {0x80000001, 0x6, 0xfffffffffffffffc, 0x9, 0x81, 0xffffffffffffffff, 0x2000000000000, 0x4}, {0x6, 0x3ff, 0x200, 0x80000001}, 0x3f, 0x6e6bc0, 0x1, 0x0, 0x3, 0x3}, {{@in=@empty, 0x4d3, 0xff}, 0xa, @in=@loopback, 0x3504, 0x1, 0x0, 0x1, 0xffff, 0xad52, 0xffffffff}}, 0xe8) ioprio_get$uid(0x3, 0x0) getuid() [ 1910.400691] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:14:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0xf0) [ 1910.412474] FAULT_INJECTION: forcing a failure. [ 1910.412474] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.414964] CPU: 0 PID: 13104 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1910.416716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1910.419133] Call Trace: [ 1910.419669] [ 1910.420142] dump_stack_lvl+0x8b/0xb3 [ 1910.420969] should_fail.cold+0x5/0xa [ 1910.421806] ? io_setup_async_rw+0x199/0x620 [ 1910.422748] should_failslab+0x5/0x10 [ 1910.423553] __kmalloc+0x72/0x330 [ 1910.424299] io_setup_async_rw+0x199/0x620 [ 1910.425195] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1910.426372] io_write+0x941/0xbe0 [ 1910.427123] ? io_read+0xff0/0xff0 [ 1910.427879] ? x86_pmu_enable+0xa20/0xd90 [ 1910.428783] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1910.429935] io_issue_sqe+0xe8a/0x6980 [ 1910.430772] ? lock_release+0x3b2/0x6f0 [ 1910.431611] ? __fget_files+0x26b/0x470 [ 1910.432447] ? lock_downgrade+0x6d0/0x6d0 [ 1910.433325] ? find_held_lock+0x2c/0x110 [ 1910.434192] ? io_openat2+0xbc0/0xbc0 [ 1910.435008] ? lock_release+0x3b2/0x6f0 [ 1910.435856] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1910.437023] ? lock_is_held_type+0xd7/0x130 [ 1910.437959] io_submit_sqes+0x16ba/0x8fc0 [ 1910.438878] ? io_async_task_func+0x560/0x560 [ 1910.439843] ? io_rsrc_buf_put+0x50/0x50 [ 1910.440809] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1910.441880] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1910.442913] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1910.443832] ? wait_for_completion_io+0x270/0x270 [ 1910.444854] ? lock_is_held_type+0xd7/0x130 [ 1910.445777] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1910.446933] ? vfs_write+0x188/0xae0 [ 1910.447731] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1910.448894] ? fput+0x2a/0x50 [ 1910.449599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1910.450695] do_syscall_64+0x3b/0x90 [ 1910.451494] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1910.451771] loop1: detected capacity change from 0 to 256 [ 1910.452575] RIP: 0033:0x7f1fc76cdb19 12:14:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x8, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1910.452598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1910.457906] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1910.459499] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1910.460996] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1910.462494] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1910.463989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1910.465479] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1910.467009] [ 1910.476045] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1910.484452] EXT4-fs (loop4): unsupported inode size: 0 [ 1910.485792] EXT4-fs (loop4): blocksize: 1024 12:14:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x112) [ 1910.532733] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1910.563335] ramfs: Bad value for 'mode' 12:14:32 executing program 3: ioprio_get$uid(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x267}}, './file0\x00'}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) [ 1910.573172] ramfs: Bad value for 'mode' [ 1910.601405] loop1: detected capacity change from 0 to 256 [ 1910.620498] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1910.654293] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1924.251612] loop1: detected capacity change from 0 to 256 [ 1924.261273] ramfs: Bad value for 'mode' 12:14:46 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:14:46 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 12:14:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r1, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000100)={0x26, 0x1f, 0x14, 0xe, 0x7, 0x9, 0x0, 0x55, 0x1}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r1) open_tree(r1, &(0x7f0000000080)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)=')%}\x00', &(0x7f0000000040)='*\x00', 0x0) ioprio_get$uid(0x3, 0x0) 12:14:46 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 12:14:46 executing program 7: ioprio_get$uid(0x3, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffa) 12:14:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x9, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:14:46 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:14:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x300) [ 1924.265327] loop4: detected capacity change from 0 to 264192 [ 1924.274317] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1924.281063] ramfs: Bad value for 'mode' [ 1924.284760] FAULT_INJECTION: forcing a failure. [ 1924.284760] name failslab, interval 1, probability 0, space 0, times 0 [ 1924.287083] CPU: 1 PID: 13163 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1924.288701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1924.290904] Call Trace: [ 1924.291413] [ 1924.291851] dump_stack_lvl+0x8b/0xb3 [ 1924.292618] should_fail.cold+0x5/0xa [ 1924.293368] ? create_object.isra.0+0x3a/0xa20 [ 1924.294278] should_failslab+0x5/0x10 [ 1924.295020] kmem_cache_alloc+0x5b/0x480 [ 1924.295820] create_object.isra.0+0x3a/0xa20 [ 1924.296676] ? kasan_unpoison+0x23/0x50 [ 1924.297549] __kmalloc+0x1ed/0x330 [ 1924.298359] io_setup_async_rw+0x199/0x620 [ 1924.299294] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1924.300497] io_write+0x941/0xbe0 [ 1924.301274] ? io_read+0xff0/0xff0 [ 1924.302063] ? x86_pmu_enable+0xa20/0xd90 [ 1924.302998] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1924.304163] io_issue_sqe+0xe8a/0x6980 [ 1924.305021] ? lock_release+0x3b2/0x6f0 [ 1924.305896] ? __fget_files+0x26b/0x470 [ 1924.306672] ? lock_downgrade+0x6d0/0x6d0 [ 1924.307478] ? find_held_lock+0x2c/0x110 [ 1924.308278] ? io_openat2+0xbc0/0xbc0 [ 1924.309020] ? lock_release+0x3b2/0x6f0 [ 1924.309828] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1924.310903] ? lock_is_held_type+0xd7/0x130 [ 1924.311746] io_submit_sqes+0x16ba/0x8fc0 [ 1924.312592] ? io_async_task_func+0x560/0x560 [ 1924.313486] ? io_rsrc_buf_put+0x50/0x50 [ 1924.314300] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1924.315333] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1924.316413] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1924.317370] ? wait_for_completion_io+0x270/0x270 [ 1924.318446] ? lock_is_held_type+0xd7/0x130 [ 1924.319387] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1924.320576] ? vfs_write+0x188/0xae0 [ 1924.321394] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1924.322597] ? fput+0x2a/0x50 [ 1924.323254] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1924.324269] do_syscall_64+0x3b/0x90 [ 1924.325006] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1924.326013] RIP: 0033:0x7f1fc76cdb19 [ 1924.326730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1924.330295] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1924.331766] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1924.333144] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1924.334524] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1924.336016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1924.337546] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1924.339131] [ 1924.348924] EXT4-fs (loop4): unsupported inode size: 0 [ 1924.350284] EXT4-fs (loop4): blocksize: 1024 12:14:46 executing program 7: sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0xd, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010000}, 0x800) 12:14:46 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:14:46 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) 12:14:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xa, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:14:46 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1924.496766] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:14:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x480) 12:14:46 executing program 7: ioprio_get$uid(0x3, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x400, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r0, r1) [ 1924.568566] loop4: detected capacity change from 0 to 264192 [ 1924.571713] ramfs: Bad value for 'mode' [ 1924.601712] ramfs: Bad value for 'mode' [ 1924.604703] EXT4-fs (loop4): unsupported inode size: 0 [ 1924.606091] EXT4-fs (loop4): blocksize: 1024 12:15:02 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:15:02 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x2, 0x0, 0x0, 0x0) [ 1940.681457] loop4: detected capacity change from 0 to 264192 12:15:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x500) 12:15:02 executing program 3: ioprio_get$uid(0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r0) fstat(r0, &(0x7f0000000000)) 12:15:02 executing program 7: ioprio_get$uid(0x3, 0x0) r0 = getuid() ioprio_get$uid(0x0, r0) 12:15:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xb, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:15:02 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:15:02 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) [ 1940.726774] loop1: detected capacity change from 0 to 256 12:15:02 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1940.746256] EXT4-fs (loop4): unsupported inode size: 0 [ 1940.747501] EXT4-fs (loop4): blocksize: 1024 [ 1940.751206] ramfs: Bad value for 'mode' [ 1940.759838] FAULT_INJECTION: forcing a failure. [ 1940.759838] name failslab, interval 1, probability 0, space 0, times 0 [ 1940.762227] CPU: 1 PID: 13327 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1940.763957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1940.766324] Call Trace: [ 1940.766862] [ 1940.767329] dump_stack_lvl+0x8b/0xb3 [ 1940.768153] should_fail.cold+0x5/0xa [ 1940.768958] ? io_issue_sqe+0x6ea/0x6980 12:15:02 executing program 3: r0 = getpid() r1 = getpid() kcmp(r0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/net\x00') ioprio_get$uid(0x3, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) [ 1940.769825] ? io_arm_poll_handler+0x22f/0x7a0 [ 1940.770952] should_failslab+0x5/0x10 [ 1940.771751] kmem_cache_alloc_trace+0x55/0x3c0 [ 1940.772710] ? __fget_files+0x26b/0x470 [ 1940.773552] io_arm_poll_handler+0x22f/0x7a0 [ 1940.774504] ? io_setup_async_rw+0x620/0x620 [ 1940.775441] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1940.776608] io_queue_sqe_arm_apoll+0x61/0x1a0 [ 1940.777575] io_submit_sqes+0x7cd4/0x8fc0 [ 1940.778494] ? io_async_task_func+0x560/0x560 12:15:02 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x3, 0x0, 0x0, 0x0) [ 1940.779454] ? io_rsrc_buf_put+0x50/0x50 [ 1940.780413] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1940.781471] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1940.782520] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1940.783441] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1940.784487] ? xfd_validate_state+0x59/0x180 [ 1940.785414] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 1940.786540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1940.787626] do_syscall_64+0x3b/0x90 [ 1940.788424] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1940.789501] RIP: 0033:0x7f1fc76cdb19 [ 1940.790289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1940.794115] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1940.795689] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1940.797167] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1940.798649] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1940.800166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1940.802017] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1940.803520] [ 1940.812674] ramfs: Bad value for 'mode' [ 1940.821310] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:15:02 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:15:03 executing program 7: ioprio_get$uid(0x3, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r0) ioprio_set$uid(0x0, 0xffffffffffffffff, 0x6007) [ 1940.894094] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:15:03 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:15:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x10, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:15:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x555) 12:15:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x0, 0x0, 0x8, 0x0, "d0797eb8034b53617a4b8da679abef0bb5ff47fe758b19b1c1515841c5f7e671d61e4469d96b611b0066a2d69f35ecde4dfa3458c6b0099764f7e354adc454423fd2a0b138ee1a420f497e4aea1edcd5"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000001500)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x1b, 0x0, "dff16a013326ca89201507f9766eb8ef6d4026cb9036b086426538b2caaacde7804c41fd9e3e67799bf0ff63c9fda7d1db7d82d40e8813d417c98d1f262f38d72d16fb2f6bdfbe10911c6abb00c66419"}, 0xd8) r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x2, 0x88000) sendmmsg(r1, &(0x7f0000001440)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x2, 0x2, {0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)="4c439f864cee69098697bb651e0db3f3de342256ce0dc6f95d3048f2ca9fdf9695cf6d4fa288c5d75d93f8dba012e6ead7345146ddd1c2b64fab0ae00baab3d784e520f5feb7ee59b69828633ab7fec3831cf7284e", 0x55}, {&(0x7f00000002c0)="67d9efdc1ab628573f8f76670a20698cb74e62f5d82d4e4b78d169", 0x1b}, {&(0x7f0000000300)="b311b28542e3583b596015ba90783a1ac280f46f5ab58d542c77610ed5c792a71cb30840a4dbcfedd04d5e76567ff4a9b09369d3b0c7d1ecbb36c27698e6ac7ce54b825898091535fff4f8a6835afba1ccfb60d9cb65e94f08aff980e83406", 0x5f}, {&(0x7f0000000380)="112e3819b5ace5b508d1f0c878ec376915ea1bb974b53a6f6e87bc8c1fbfa36e71d89918fd39f5fceb65f5de7b639c49fcce42290697049fcb7c3bbf8acc6048711e002552160cd2f12a94ce661603672d95beb16089d6db668160314c07fe808ae1ca1fa15d3abf09e8f2980ed22d4d1132693075a2313c1c0bf8c2d8a82b4ecf6fbc3634afac41954b8e134ed58c67a2c5531212e403e0afb9ab6a221f153377f57b2d9619731936ac25a4e616888d", 0xb0}, {&(0x7f0000000440)}, {&(0x7f0000000480)="39cc90a832f86c85d74f21a6c0e5ea00b922dee3a0cad36d5fb8a7041b7981db58236e0846cffeadadfce6ca4dfc5578666625cd2b972eabf27065341ae96257fbf6da6a7da19f647b375d7cd93107bfee3d9cd8cee2695faa19b9a89330fc0a5aaa094b11c3682924268357fa6537bea0584c44f46721c544eed0470a45db769254e0dd83615f995df194e1f863c2dbfbccfc0dee8f382d005fbb", 0x9b}, {&(0x7f0000000540)="e2ff7b47f4dc42020c3b9a4953ffde566eee89ca6d20935e786e1e1baf943967e6293b712e8e27e8898278a9d5174236660df77e7fbc9245b042b1b2e58ad4db43e8a28b75b7a15d2014cfea98eab71db2f17b99af1c094df2e7f772c76fd11c407d034b4e88f20276a8cdd83928c2be7ea173bdb1b09d", 0x77}, {&(0x7f00000005c0)="de8de84a09fa9ce8c33d3fd60beef8e588c69297e13530aa3398b2e57051ef6739654a48c02629a4c4de388f2927f7e2bca4f5a7177325bbb711b16be3b7bc61e56fa7b73166863336504c719f608a8513b2595e84631ecd57b820", 0x5b}, {&(0x7f0000000640)="6c19bc8df934", 0x6}, {&(0x7f0000000680)="f2f562cee52ba0e30711c7476950207adb6b8afa63377f032c95bdca5f46e1b2cb8af54de541f573a0dd118ef42eaa24c7b48318e5a5baef44a4af336fb8520ca85ef75229adb21d1cdd8ff448ac37a1dc26", 0x52}], 0xa, &(0x7f00000007c0)=[{0x58, 0x104, 0x0, "ce6bacc3fabb7b1d11108a23d0e5b026f250bb94b60a850773247cfc7f569c18a789cde21a104d5655f1688153928e73797b3d0c34402101d5a3f6de0ba2593760b0dd90c9a97376"}, {0x60, 0x103, 0x7, "2a5888cdea5ac4854d2a8ce5a9f31a338be2515d4f9371049bb05bc676573f9dbdfa8b5e34103d8070db86a97b050e5e8748b9e4644f3d94b00716679d1c6740561533ed3c72cde93d"}, {0x40, 0x6, 0x81, "c9b31a15a35847307544b8591a2ffa7d594bd57776fb6152b27776d245f47705d6e37e64f239a3914ea0a10927cd1b"}, {0x40, 0x105, 0x2, "b47e72becf2aa80de4136b28072ed4ef11ac00aa3c4690cf77620aaed7fe8e88ad333006045a85cc3da916"}, {0xe0, 0x3a, 0x1, "e94ab34a11704638c55d92266d97af71f80d92430e6dcffb5dac0a0730543a03ad6ec6c4730d18168dfa759cb4ec6b9a5b29aa834e4cccf64dd8c044582e5d4c5cef24b88a8e8e39d180c5254cd5a010292b0a6e936fe51544035ce596cc3bff5aab417a6877621f2de3b6d442e90c827d61aab90b59a9034967faa7821c39f9571413aa1b2298511f6239052a7d95eb3fdc345856afcf5199aa07b0720fa3aa31b81e30ed7f60eb186d5a19099792a95921753b087a6d1e13d4786e2f8783b1d72fc137c9ee0ba96b0a1882d7f25698"}, {0x98, 0x10c, 0x6, "43f80c37921e9b301427a1a1655d26fa26e2060ecf8f67e674d689295217271e096418be2b6a3cda88f9d267e1c09c502dcfaebf858e12dfbe542823ff3b666f825adbf1b09416b3fcd7e8bea13eb4b0b8b36628a663b0608be2a2030161c3c49c52c2dbc38f07ff76cf4fc3c3e33795a62bf11b2919c77a003543ad5f74e9f87315e1e18b"}, {0x10, 0x1, 0x7}, {0x48, 0x10c, 0xfffffff9, "e3eacbf5aea05c32124e1d4da47f364eafe9644b5d81c8ab8412e5e36cceeeef54ca1f3ed25d0c832f830663d599a0b9a5803b"}], 0x308}}, {{&(0x7f0000000b00)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b80)="9ddb266170adf8d70322f0dd695ff5abe301169a18e3d7f677416715276c55e8d0047347877158d8ec2543d4df4a3b6e238888cd45c4bbe9d2f8fa4d64e32f3c44f9ad8d9c3fdf3c203ec90cc1324a4e0025b46ada967f365eb2a36f13be075dc4a08451eaf1cfd9d58ca156bd35dc0ec0dd2160912400cc99c0da3c2498104210c5cf13a4c165b41064edf47fd7eeed50daffef4c72cf83c9e01e14d43c20e5b019335e3bb870629bec13647bc512a689e524d27c1fe0ad905284b82875ad9dba8b4ce8bc64db39ec7c95ba", 0xcc}, {&(0x7f0000000c80)="40fb0159f0243c111e7de979764e02859a7be0b1241dc621dae25e42d29187787ee303f1bf98835858d093308ee00833298a967fb957725b077755bcac3c3f919b2fbd08091845efe1e386a05188226a4e55e64a7e95c066f32f70997c29d18877812224d5808d9cd66dd8651f0938a0eb3d7421", 0x74}, {&(0x7f0000000d00)="36ca8c7c2ab26b95d0ae9c2f121be8b54877ceca98ea81fc3ac4bb1e3889e248c506ba108ad3314b87f5696e0c8f696cc8c12f6df91da8ed9dad21b61ca7a48a30385fb75c0a514b39b1a86eecca3a86c873839fccd4685661173f67011ef8b08b8eae331cf89dce0f87c770b6848c0a6630e829fef322cfed35a6c44c9454d6fad15e256838b5005d6c3ff83ffca16fca03e0502df545f51877415cc41d8c76ffede20cf179ed1d52485e5f1747ca48b83c03fc26bcd2c6ca26dd57ede932ad6439e47b2a622d10f2c218c648dc643d24d4efc3a26dad6f227b66246ca8664a573efe302a2087d6d254b2a044cc46404478d912dd67", 0xf6}, {&(0x7f0000000e00)="5397bff581e104bd20dcd0aeffc0c3dd2126f36faef710328c2b8d77eedb8f616e8ac39182c8", 0x26}, {&(0x7f0000000e40)="9abea7014a77a81dc5d2b8516cb93e3c472226b140873358f9ddb59400c244b5e77342d968e45bc036aa84616b5f7402305904c0ed80877dab55fb880919c2e8b24cac8d06b3a4613df3d1db", 0x4c}], 0x5, &(0x7f0000000f40)=[{0x38, 0x109, 0x0, "4bc2a0755be33bbc8980bb28ffdeae13c825ddb855a2939238628cd0c5436e320f0ce3be0623db68"}, {0x60, 0x109, 0x5, "118f5cfac8cd0021c6b50d03026292be53ff3bab53281760a281e56c540c022a6909135bf58c683453d7dbadac4d65ae054140771150847db6e222af1e7cbf1491e57869d42778a779220d"}, {0x90, 0x88, 0x7ff, "8d053a5c8db30c5e8f07f3ed68b7a6adc7215318aae1e73ab32e6d2a902b92cda9c7b7c170d33b0f2f24b4c5fd0410504d11d3ad6eade09f4f83c9ffb57b1db336219d98b28d4d934b1208cf993558dd5957a129007f5b0b7056be2f24adbd70e43e529090b34a372e8a4077607f757cb4247a7ea2facb24d57a3e9a964235"}, {0xd8, 0x11, 0x76, "ad0064306fc968e98e024bee42b3d80977ebdc1fd9466a867aa77b34a2ad022e4b22cf536044c11aeaa8fceaf9bf94c595ca7318164a5d666b937d270a83726f1b121958967f4003e5b91af4a0e9533447eca58d6250740c4358617d79c3acfa99f17a41dda007e5654be019f194977555cfad4cab8faa4ba41e23fed7b835b90a74614572b13b69744009de6f8c9ffab6052e008311054527076d8454e72251e990b5983b33f41ef5c0a1fe5b9705f709789e48dc978e564b86818b480a68a91c9675719f"}, {0x108, 0x19c, 0x7, "4ae7ffb82cb9e83e3f38c4cb9e2b4f5a4b81a5325e3c3238c7e96e63b7c5c4207d655cae979473f7c9dbee51f30486eb900f0d0586e3aae891da28dcebbe5b4faf30345f862240d8a7e2602d6f2cf427c1a860a78f8816a12f15bca9042bfaa019b064c099be1635b98ba641a1281cfee23283501d2fda3e364ed4e39677f27c8170af96a279fcb271215698e8ac26a62a46f78f63eb32c6526dfc02ae334c01dfa7a29a78b8616b9fabcb559fcd3684a0589da10e17768baf7bc4975e00a93d3146674da7046bdd05c5527c57788beb3a3709d26f6650c92920ab5df21d3849777ea476453ddd63aa6fffa87e23a166fa37eeffb274"}, {0x68, 0x10b, 0x400, "47fc58e29d3a6c272881340f3cc8aa78542949584cb5e807f0863c71665f8a70366a30624d8386d9bc1bd165a6646f012e5b6412b2262dea78870380511937a218dd9ebb3b8741e97c52dd6b1967bf06ee6484"}, {0x88, 0x105, 0x7, "2c554be9d8070ffe9355548f3a4bfef61f7594eefe56dbf3f161c6c9c3554bdfc4278cf83050815f4a079f3862e5e1663530597a26827e98d5f8dba7d04063e0c8542d7543b1333f930b1487e7aaaa1d46c0746c3865ebd078b6fd1137e81cf4400813c7b9b427700c0aef7ea95179f54926847aae3a"}, {0x48, 0x10d, 0x73ac, "a3c4eaa72d6a310611a9d33629de0ef3fa46f38a88f354bba4c7a222791e2ff1f87413b991a53a0e44d7744ff16d6a4efd02"}, {0xa8, 0x3a, 0x5, "91b0cdca3dbafef087e9dc25e646de6fc1f790673fe3cfab2a1b143008a253f0ee6ed8aa4af2d98352bc68c835fc86bc9e6d469342d32c60425cab73aaa76b62644ebebe1b1e6d721fea81b1d31c0d7dc2adfa7e47153a47c67cc3b74700101e7484d2428593cad2bdcd4f18bdc8db3670d335917f14fa6af124307b24214131166664b90148c35640b8590816fd348aa271b5d4"}], 0x4e8}}], 0x2, 0x80) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@mcast2}, 0x14) close(r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r3) close(r3) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x3, 0x8}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000014c0), 0x4) close(r4) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e21, 0x1f, @ipv4={'\x00', '\xff\xff', @remote}, 0x7ff}, 0x1c) [ 1940.971481] ramfs: Bad value for 'mode' [ 1940.982682] ramfs: Bad value for 'mode' [ 1941.446831] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 12:15:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x300, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1954.952894] loop1: detected capacity change from 0 to 256 [ 1954.962435] loop4: detected capacity change from 0 to 264192 [ 1954.969669] FAULT_INJECTION: forcing a failure. [ 1954.969669] name failslab, interval 1, probability 0, space 0, times 0 [ 1954.970933] CPU: 0 PID: 13373 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1954.971817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1954.972995] Call Trace: [ 1954.973265] [ 1954.973494] dump_stack_lvl+0x8b/0xb3 [ 1954.973905] should_fail.cold+0x5/0xa [ 1954.974323] ? io_setup_async_rw+0x199/0x620 [ 1954.974790] should_failslab+0x5/0x10 [ 1954.975186] __kmalloc+0x72/0x330 [ 1954.975556] io_setup_async_rw+0x199/0x620 [ 1954.976003] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1954.976584] io_write+0x941/0xbe0 [ 1954.976951] ? io_read+0xff0/0xff0 [ 1954.977326] ? x86_pmu_enable+0xa20/0xd90 [ 1954.977790] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1954.978360] io_issue_sqe+0xe8a/0x6980 [ 1954.978772] ? lock_release+0x3b2/0x6f0 [ 1954.979186] ? __fget_files+0x26b/0x470 [ 1954.979604] ? lock_downgrade+0x6d0/0x6d0 [ 1954.980037] ? find_held_lock+0x2c/0x110 [ 1954.980470] ? io_openat2+0xbc0/0xbc0 [ 1954.980870] ? lock_release+0x3b2/0x6f0 [ 1954.981288] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1954.981866] ? lock_is_held_type+0xd7/0x130 [ 1954.982334] io_submit_sqes+0x16ba/0x8fc0 [ 1954.982788] ? io_async_task_func+0x560/0x560 [ 1954.982832] EXT4-fs (loop4): unsupported inode size: 0 [ 1954.983269] ? io_rsrc_buf_put+0x50/0x50 [ 1954.983293] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1954.984395] EXT4-fs (loop4): blocksize: 1024 [ 1954.984774] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1954.986710] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1954.987169] ? wait_for_completion_io+0x270/0x270 [ 1954.987675] ? lock_is_held_type+0xd7/0x130 [ 1954.988129] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1954.988707] ? vfs_write+0x188/0xae0 [ 1954.989097] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1954.989342] ramfs: Bad value for 'mode' [ 1954.989671] ? fput+0x2a/0x50 [ 1954.990808] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1954.991544] do_syscall_64+0x3b/0x90 [ 1954.991943] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1954.992479] RIP: 0033:0x7f1fc76cdb19 [ 1954.992871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1954.994785] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1954.995566] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1954.996303] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1954.997060] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1954.997795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1954.998542] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1954.999300] 12:15:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x600) 12:15:17 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 12:15:17 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:15:17 executing program 7: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000440)) r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="e9ad0e4b54185223a44466be592def3dbe4ffee30b986933cc2aed84f8eb29f90fa53b8df25c4182", 0x28, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r0, 0xcb, 0x94}, &(0x7f0000000200)={'enc=', 'raw', ' hash=', {'wp384\x00'}}, &(0x7f0000000280)="583dccb5f9ff6ee7725c969237004b5bc123b427b4a4b286d9d427a03413538c835bb8761de58963eb4c069d9b96fbe2b0e63e11f8d7cebb999d3f2b3f409a4aef835280ebb59ed7964fd294e748d8adf8fb5e3c9c92184a742181f7eeefcdd3c32f36b541b18759992f3c3b7766a8d14d82c500e164e39852209c84daf59b943241683adbc4d86a474d95af860493251276b5121b77f19765710ee22f44f17b63a77658d07ec58b15b257fd358f7e40a3808870fe3efc5a77343d76697175bfd515fc3d7bac8ec0d1d1b5", &(0x7f0000000380)=""/148) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000000)=""/237) ioprio_get$uid(0x3, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) [ 1954.999296] ramfs: Bad value for 'mode' 12:15:17 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:15:17 executing program 3: ioprio_get$uid(0x3, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="c2bd2e2768046c7a5a349c42cbf116f7945feb3b40ae9c13e89a3ed85a6b657dc3c9fa283494e8dddfd2956f52dae2419988c2125179bc2f4eda3af354f7fe31a8e550bb2ccd09b0b1a502333a8169c1cc3a3d53f5f698f38a769123a46bf0cd1925eef10d7c4e810e1d33af8c543265de9679eebb537e377979f47d1fc976797c6710020c2d60ef7ed7fbe4db4599d5a9c3c56879ba9cb78aa232dd6dbb9ed1cf1170d3bb62a9721fd378a4a25b0fbd7691348ff5f2007903ea295bab3ff9eed377192a6edf99ffd9ba67c41c97ff8057296674b2f42088ec", 0xd9, 0x3}, {&(0x7f0000000180)="2104eb165aa2c0c6844f05c2b6322f7a886481b69b389a729bdf2db44853be863dc402e595b6c46576e812668c5d8da6a294dea4d69c988ea50b5bbbb4d170a6360eb8670fdeb075f5eeab3f48d2d3f35c54271c632d57eaff23ff2f116e", 0x5e, 0x1}], 0x0, &(0x7f0000000300)={[{@max_batch_time={'max_batch_time', 0x3d, 0x40}}, {@noauto_da_alloc}, {@data_err_ignore}], [{@uid_lt={'uid<', r0}}, {@obj_role}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfsdef={'smackfsdef', 0x3d, 'A+}+$\x98'}}, {@permit_directio}, {@fowner_gt={'fowner>', 0xee00}}, {@subj_type}]}) 12:15:17 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x4, 0x0, 0x0, 0x0) [ 1955.023183] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:15:17 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000240)={0x2000000a, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f00000001c0)=0xe8) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={r1, r5, r3}, 0xc) ioprio_get$uid(0x3, r2) fsetxattr$security_evm(r0, &(0x7f00000002c0), &(0x7f0000000300)=@ng={0x4, 0x12, "c9a9a4bd51e097c2c1006612c9f126c12434"}, 0x14, 0x0) [ 1955.057582] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:15:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x700) [ 1955.090954] loop1: detected capacity change from 0 to 256 [ 1955.109494] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:15:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x500, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:15:17 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:15:17 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1955.182231] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1955.205839] loop4: detected capacity change from 0 to 264192 [ 1955.215408] EXT4-fs (loop4): unsupported inode size: 0 [ 1955.215944] EXT4-fs (loop4): blocksize: 1024 [ 1955.221210] ramfs: Bad value for 'mode' [ 1955.229803] ramfs: Bad value for 'mode' 12:15:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x600, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:15:41 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:15:41 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 12:15:41 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x5, 0x0, 0x0, 0x0) 12:15:41 executing program 7: setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) ioprio_get$uid(0x3, r2) 12:15:41 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:15:41 executing program 3: ioprio_get$uid(0x3, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1a3980, 0x42, 0x10}, 0x18) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r2, 0x5307) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) name_to_handle_at(r2, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)=@raw={0x3c, 0x4e, {"a8e4c2cb53573661a58ed0a33af0fd4664fa5d47eb17e10cca13dfabcddfba456df83b1c486925af3af4ea5e22c7913cd89ed132bbc7feb9e41b"}}, &(0x7f0000000140), 0x400) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r1, 0x0, r1, 0x0, 0x0, r1, r1, r1, r4]) fchown(r0, 0xee00, r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="2827d45975c5eb0f1425e2fd2fbc2d543108d0a928541b461038919ff8171ef10023631994d7f163437e17096f7a4178c044715923433f89281efbf8ac685bcd8d00d289f9bf7406df5c10af229006df77d60984b061a12530ffb7237ad86f3dc55054c383efeb01352a261a0baab108b5a5c779e7dd7c712aea1db2f82cf01a8b20234d95", @ANYRES16=0x0, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="05003400f800000004001501040008010400cc00"], 0x30}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r7 = getpid() r8 = getpid() kcmp(r7, r8, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x58, r3, 0x3a5b458cce451ef2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x51}, @void, @val={0xc, 0x99, {0x9, 0x19}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x24}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) 12:15:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0xc00) [ 1979.356541] FAULT_INJECTION: forcing a failure. [ 1979.356541] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.358795] CPU: 1 PID: 13418 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1979.360389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1979.362546] Call Trace: [ 1979.363058] [ 1979.363488] dump_stack_lvl+0x8b/0xb3 [ 1979.364240] should_fail.cold+0x5/0xa [ 1979.364982] ? io_setup_async_rw+0x199/0x620 [ 1979.365861] should_failslab+0x5/0x10 [ 1979.366609] __kmalloc+0x72/0x330 [ 1979.367285] io_setup_async_rw+0x199/0x620 [ 1979.368111] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1979.369174] io_write+0x941/0xbe0 [ 1979.369859] ? io_read+0xff0/0xff0 [ 1979.370556] ? x86_pmu_enable+0xa20/0xd90 [ 1979.371418] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1979.372447] ? lock_chain_count+0x20/0x20 [ 1979.373262] ? find_held_lock+0x2c/0x110 [ 1979.374071] io_issue_sqe+0xe8a/0x6980 [ 1979.374857] ? lock_release+0x3b2/0x6f0 [ 1979.375637] ? __fget_files+0x26b/0x470 [ 1979.376417] ? lock_downgrade+0x6d0/0x6d0 [ 1979.377236] ? io_openat2+0xbc0/0xbc0 [ 1979.377990] ? kick_process+0xe8/0x170 [ 1979.378781] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1979.379870] ? lock_is_held_type+0xd7/0x130 [ 1979.380730] io_submit_sqes+0x16ba/0x8fc0 [ 1979.381583] ? io_async_task_func+0x560/0x560 [ 1979.382484] ? io_rsrc_buf_put+0x50/0x50 [ 1979.383314] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1979.384303] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1979.385274] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1979.386147] ? wait_for_completion_io+0x270/0x270 [ 1979.387109] ? lock_is_held_type+0xd7/0x130 [ 1979.387961] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1979.389036] ? vfs_write+0x188/0xae0 [ 1979.389778] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1979.390864] ? fput+0x2a/0x50 [ 1979.391228] ramfs: Bad value for 'mode' [ 1979.391493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1979.393313] do_syscall_64+0x3b/0x90 [ 1979.394061] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1979.395090] RIP: 0033:0x7f1fc76cdb19 [ 1979.395811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1979.399397] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1979.400885] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1979.402283] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1979.403690] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1979.405088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1979.406485] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1979.407914] [ 1979.415344] ramfs: Bad value for 'mode' [ 1979.418807] loop4: detected capacity change from 0 to 264192 [ 1979.426849] loop1: detected capacity change from 0 to 256 [ 1979.453190] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1979.454087] EXT4-fs (loop4): unsupported inode size: 0 [ 1979.455998] EXT4-fs (loop4): blocksize: 1024 12:15:41 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x6, 0x0, 0x0, 0x0) 12:15:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x700, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:15:41 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:15:41 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:15:41 executing program 7: ioprio_get$uid(0x3, 0x0) r0 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@private2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000280)=""/28, 0x1c}, {&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f00000003c0)=""/209, 0xd1}], 0x4, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x40}, 0x20) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r4, 0x0, r4, 0x0, 0x0, r4, r4, r4, r5]) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r7, 0x0, r7, 0x0, 0x0, r7, r7, r7, r8]) r9 = getgid() r10 = msgget$private(0x0, 0x0) setregid(r3, r2) msgsnd(r10, &(0x7f0000000140)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r10, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {}, [{0x2, 0x6, r0}, {0x2, 0x1, r1}, {0x2, 0x4, 0xee00}], {0x4, 0x2}, [{0x8, 0x1, r2}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x6, r3}, {0x8, 0x0, r5}, {0x8, 0x0, r6}, {0x8, 0x0, r7}, {0x8, 0xaa6bb38f39b7b697, r9}], {0x10, 0x3}, {0x20, 0x5}}, 0x74, 0x2) [ 1979.592654] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:15:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1030) [ 1979.621276] ramfs: Bad value for 'mode' [ 1979.643181] ramfs: Bad value for 'mode' [ 1979.651349] loop4: detected capacity change from 0 to 264192 12:15:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r0) r1 = timerfd_create(0x4, 0x40000) fchmod(r1, 0x80) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) ioprio_get$uid(0x3, 0x0) [ 1979.690182] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1979.714626] loop1: detected capacity change from 0 to 256 12:15:41 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 12:15:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x900, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 1979.754017] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1979.839922] FAULT_INJECTION: forcing a failure. [ 1979.839922] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.841972] CPU: 1 PID: 13470 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1979.843411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1979.845335] Call Trace: [ 1979.845764] [ 1979.846143] dump_stack_lvl+0x8b/0xb3 [ 1979.846829] should_fail.cold+0x5/0xa [ 1979.847492] ? create_object.isra.0+0x3a/0xa20 [ 1979.848291] should_failslab+0x5/0x10 [ 1979.848928] kmem_cache_alloc+0x5b/0x480 [ 1979.849634] create_object.isra.0+0x3a/0xa20 [ 1979.850451] ? kasan_unpoison+0x23/0x50 [ 1979.851202] __kmalloc+0x1ed/0x330 [ 1979.851850] io_setup_async_rw+0x199/0x620 [ 1979.852616] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1979.853589] io_write+0x941/0xbe0 [ 1979.854207] ? io_read+0xff0/0xff0 [ 1979.854853] ? x86_pmu_enable+0xa20/0xd90 [ 1979.855615] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1979.856563] ? lock_chain_count+0x20/0x20 [ 1979.857339] ? find_held_lock+0x2c/0x110 [ 1979.858098] io_issue_sqe+0xe8a/0x6980 [ 1979.858796] ? lock_release+0x3b2/0x6f0 [ 1979.859495] ? __fget_files+0x26b/0x470 [ 1979.860183] ? lock_downgrade+0x6d0/0x6d0 [ 1979.860750] ramfs: Bad value for 'mode' [ 1979.860913] ? io_openat2+0xbc0/0xbc0 [ 1979.862408] ? kick_process+0xe8/0x170 [ 1979.863139] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1979.864118] ? lock_is_held_type+0xd7/0x130 [ 1979.864921] io_submit_sqes+0x16ba/0x8fc0 [ 1979.865710] ? io_async_task_func+0x560/0x560 [ 1979.866521] ? io_rsrc_buf_put+0x50/0x50 [ 1979.867284] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1979.868200] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1979.869107] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1979.869882] ? wait_for_completion_io+0x270/0x270 [ 1979.870751] ? lock_is_held_type+0xd7/0x130 [ 1979.871541] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1979.872521] ? vfs_write+0x188/0xae0 [ 1979.873184] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1979.874179] ? fput+0x2a/0x50 [ 1979.874763] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1979.875688] do_syscall_64+0x3b/0x90 [ 1979.876375] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1979.877306] RIP: 0033:0x7f1fc76cdb19 [ 1979.877984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1979.881312] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1979.882692] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1979.883973] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1979.885262] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1979.886530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1979.887853] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1979.888520] ramfs: Bad value for 'mode' [ 1979.889150] [ 1979.890793] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:15:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xa00, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:15:55 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 12:15:55 executing program 7: ioprio_get$uid(0x3, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={[{@subsystem='memory'}, {@memory_localevents}, {@memory_localevents}, {@memory_localevents}, {@memory_recursiveprot}, {@memory_localevents}, {}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}]}) 12:15:55 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x7, 0x0, 0x0, 0x0) [ 1993.856891] loop1: detected capacity change from 0 to 256 12:15:55 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:15:55 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:15:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1200) 12:15:55 executing program 3: newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioprio_get$uid(0x3, r2) [ 1993.877892] loop4: detected capacity change from 0 to 264192 [ 1993.882464] ramfs: Bad value for 'mode' [ 1993.888204] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1993.890672] ramfs: Bad value for 'mode' 12:15:56 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 1993.904848] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1993.911615] FAULT_INJECTION: forcing a failure. [ 1993.911615] name failslab, interval 1, probability 0, space 0, times 0 [ 1993.912991] CPU: 1 PID: 13501 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 1993.913984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1993.915363] Call Trace: [ 1993.915677] [ 1993.915953] dump_stack_lvl+0x8b/0xb3 [ 1993.916427] should_fail.cold+0x5/0xa [ 1993.916903] ? io_issue_sqe+0x6ea/0x6980 [ 1993.917407] ? io_arm_poll_handler+0x22f/0x7a0 [ 1993.917963] should_failslab+0x5/0x10 [ 1993.918428] kmem_cache_alloc_trace+0x55/0x3c0 [ 1993.918993] ? __fget_files+0x26b/0x470 [ 1993.919478] io_arm_poll_handler+0x22f/0x7a0 [ 1993.920020] ? io_setup_async_rw+0x620/0x620 [ 1993.920585] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1993.921261] io_queue_sqe_arm_apoll+0x61/0x1a0 [ 1993.921845] io_submit_sqes+0x7cd4/0x8fc0 [ 1993.922394] ? io_async_task_func+0x560/0x560 [ 1993.922974] ? io_rsrc_buf_put+0x50/0x50 [ 1993.923503] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 1993.924142] __do_sys_io_uring_enter+0xee0/0x1e80 [ 1993.924769] ? io_submit_sqes+0x8fc0/0x8fc0 [ 1993.925319] ? wait_for_completion_io+0x270/0x270 [ 1993.925924] ? lock_is_held_type+0xd7/0x130 [ 1993.926476] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1993.927188] ? vfs_write+0x188/0xae0 [ 1993.927668] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1993.928366] ? fput+0x2a/0x50 [ 1993.928775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1993.929423] do_syscall_64+0x3b/0x90 [ 1993.929900] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1993.930549] RIP: 0033:0x7f1fc76cdb19 [ 1993.931023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1993.933327] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 12:15:56 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@grpquota}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 1993.934249] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 1993.935307] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 1993.936157] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1993.937020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1993.937870] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 1993.938737] 12:15:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xad3, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:15:56 executing program 7: r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000000040)="690af17d6ef20c29d0f5a20ad499530bf05fd095f612e46fa5116c7321c491e8f0ad5f274638c80d25a3b0ee575d0f8b2bb640fd9aec30fa6a0a9b212fc616873d482ad7a522b56eefa9dcef39f60f0001b3b23760fb33a15f8c9d2a682c5250e36a4f4dc412ac5f2ba694221a5e551c4d374f90f283fb2a9e0fe5c50c68d9bacf30dc9db00817b6e056fad3fb2a14a52f503291de202448adc52a3a594c57ddc4bad999"}) r1 = dup(r0) write(r1, &(0x7f0000000140)="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", 0xfa) 12:15:56 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:15:56 executing program 3: ioprio_get$uid(0x3, 0x0) setfsuid(0xee00) [ 1993.999889] loop4: detected capacity change from 0 to 264192 [ 1994.004161] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1994.011471] ramfs: Bad value for 'mode' [ 1994.014089] ramfs: Bad value for 'mode' [ 1994.021896] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 12:15:56 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x8, 0x0, 0x0, 0x0) 12:15:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1201) [ 1994.044467] loop1: detected capacity change from 0 to 256 12:15:56 executing program 3: ioprio_get$uid(0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000012c0)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private2}}, &(0x7f00000013c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10009}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)=@getpolicy={0x80, 0x15, 0x100, 0x70bd2b, 0x25dfdbff, {{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x4e24, 0x5, 0x4e24, 0x0, 0xa, 0xa0, 0x60, 0x3c, 0x0, r0}}, [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x33}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa, 0x8e}}, @replay_thresh={0x8, 0xb, 0x1314}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x44000) [ 1994.065308] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1994.109934] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:16:11 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 12:16:11 executing program 7: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) ioprio_get$uid(0x3, r0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000540)=0xe8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000580)=0x0) fstat(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r5, 0x0, r5, 0x0, 0x0, r5, r5, r5, r6]) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000001c0)="f288479b994a0db530edef76ce1147117c6de791ed1a34380e3554e8deedfad1984763efb7f2e6c125fb37dc9d6df2aa2cc8add5b3463926d5e6bb06e03a5c582d5b51e152c80aa3bd2e55b21dd79fa81cd71613012959cb67503f01bd526d15abc2250388c87d34bfddc736847fc5b5142161d4657dacde735605e2319ace7276ce09b0eb440a5b74041f6c370a4d47a6eaeabb15e04c382e3d7ab96c924d8a496dc6ff548c100d2f6ddb73268f023c6f7545f0d59c56c8f87afb53501edea963551faf71d602520d49a360cc1e9924e45c561ec8781ffc5c06eef701", 0xdd}, {&(0x7f00000002c0)="88a6ad213eb11620a8a7ecc8e4869c56765706be5bcb2ce8e9aa6bf03fa7fcb44e8e77c271d409e916269ebfec9be270e0419131a2d5d9b3d36d218571498e62d859", 0x42}], 0x2, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, r0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x60, 0x4000800}, 0xc4689fd3ab302f6) 12:16:11 executing program 3: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000080)={{}, 0x2, &(0x7f0000000040)=[0x6, 0x3ff], 0x28f9d01, 0x2, [0x7, 0x3, 0x3, 0x8]}) ioprio_get$uid(0x0, 0x0) 12:16:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xb00, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:16:11 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:16:11 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:16:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1800) 12:16:11 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc, 0x0, 0x0, 0x0) [ 2008.921681] loop4: detected capacity change from 0 to 264192 12:16:11 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x10, 0x0, 0x0, 0x0) 12:16:11 executing program 7: stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) [ 2008.933496] ramfs: Bad value for 'mode' 12:16:11 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 2008.955365] ramfs: Bad value for 'mode' [ 2008.958685] loop1: detected capacity change from 0 to 256 [ 2008.965372] FAULT_INJECTION: forcing a failure. [ 2008.965372] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.967748] CPU: 0 PID: 13558 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 2008.969467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2008.971822] Call Trace: [ 2008.972353] [ 2008.972817] dump_stack_lvl+0x8b/0xb3 [ 2008.973635] should_fail.cold+0x5/0xa [ 2008.974442] ? lock_chain_count+0x20/0x20 [ 2008.975347] ? create_object.isra.0+0x3a/0xa20 [ 2008.976331] should_failslab+0x5/0x10 [ 2008.977139] kmem_cache_alloc+0x5b/0x480 [ 2008.978014] create_object.isra.0+0x3a/0xa20 [ 2008.978957] ? kasan_unpoison+0x23/0x50 [ 2008.979822] kmem_cache_alloc_trace+0x22e/0x3c0 [ 2008.980828] io_arm_poll_handler+0x22f/0x7a0 [ 2008.981776] ? io_setup_async_rw+0x620/0x620 [ 2008.982716] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2008.983916] io_queue_sqe_arm_apoll+0x61/0x1a0 [ 2008.984897] io_submit_sqes+0x7cd4/0x8fc0 [ 2008.985812] ? io_async_task_func+0x560/0x560 [ 2008.986774] ? io_rsrc_buf_put+0x50/0x50 [ 2008.987651] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 2008.988707] __do_sys_io_uring_enter+0xee0/0x1e80 [ 2008.989749] ? io_submit_sqes+0x8fc0/0x8fc0 [ 2008.990667] ? wait_for_completion_io+0x270/0x270 [ 2008.991688] ? lock_is_held_type+0xd7/0x130 [ 2008.992603] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2008.993760] ? vfs_write+0x188/0xae0 [ 2008.994551] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2008.995722] ? fput+0x2a/0x50 [ 2008.996402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2008.997498] do_syscall_64+0x3b/0x90 [ 2008.998292] entry_SYSCALL_64_after_hwframe+0x44/0xae 12:16:11 executing program 7: ioprio_get$uid(0x3, 0xee01) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x7f, 0x8}, {0x6, 0x8}]}, 0x14, 0x2) [ 2008.999379] RIP: 0033:0x7f1fc76cdb19 [ 2009.000340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2009.004221] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2009.005825] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 2009.007337] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 2009.008848] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 2009.010354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2009.011867] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 2009.013406] [ 2009.035346] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2009.103409] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:16:23 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 12:16:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) ioprio_get$uid(0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r1) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) r5 = getpid() r6 = getpid() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000029c0)={&(0x7f00000002c0)={0x16d4, 0x37, 0x2, 0x70bd29, 0x25dfdbfd, {0x1f}, [@typed={0x8, 0x67, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x3e, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x104, 0x8f, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x83, 0x0, 0x0, @uid=r2}, @typed={0x14, 0x58, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xb3, 0x54, 0x0, 0x0, @binary="44e4af0627c334da89af9b4568865bcd05bd98125f3a7a36051f35bc044d1620a522c61445cf90a536fb5601f6eadf619ba19f52166a7caed200832fe810a52c397ca89b7de4ee9e6f9432df009c4afc733a5ae91dbf3b07482f044bf313e8388b6e07d917617d24c15e356a303447d27446eb0a5d552d0d3823da8e0bd008b81b7282d80592418d878332b11df7848266012efff00d5e6bd8fd4d6fe63f02555db271d1866a1d33568107b823c0ca"}, @typed={0x4, 0x20}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x81, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="f03f8f5a0226a31526e60a8977608e94c49c22436b5b0de3ff7b124a9ac6640f0e88b29801e1a3bcc12e9158289fade97a080a8754e329ef9d09c011a57627ed16e4670e1cdd7d30c95e4e048bd2c38a99c9cb8a3fc01b5e4eb867e37a70d3a6bb6b6ff2848d4a68c67c2e8da5faca5d92a7bfc3a1ca460f6967", @typed={0x1004, 0x15, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x95, 0x0, 0x0, @u32=0x3}, @nested={0x1bf, 0x1b, 0x0, 0x1, [@generic="d517033604b198c3aec3f3ba1723e7208cfd2736613902ddd71d22865edc8747064b89f5c322d5f7e960fe95497d86917194feb9fe4ae4b4e1327a6e34a3e979415fbf14d22e17d90921eb441f766cfcf2d959a1de88fdc2685fbbdec671500e1c9ad135d072a604b8f1c110b12789f761100bb4546b6a0235b9985f04944705ef7091f3fc8b8fb65b2c781f4a614b7f072a529dc34d69b40107ef8363692b8da2e5e2a28374b9699ab2314b7b6ee371818f7d9409fd5738446fd48989989ed729c1e5e80bea5ff7e9aa8b6b", @typed={0xc, 0x8a, 0x0, 0x0, @u64=0x101}, @typed={0x4, 0x10}, @typed={0x7, 0x4b, 0x0, 0x0, @str='!\'\x00'}, @typed={0x8, 0x3b, 0x0, 0x0, @u32=0x6}, @generic="0a2ccf39bfb0d331a3e3be5386bd37d8d67b15698f12da469582bcee39ff26621176a75c53bddc1443da7fee4bfd8435c1ecd3c28e07182aead66cacc7a18d8f6354f1c41ea21adc61d9b244d29e5e7c8937b7704443b4ade1c7e2a2fb1a39cb8f127d88dca840c24f48a31010", @generic="77af849387c0052a18d82236aef91331482507a1ead15b24f48d7c623f68830ce6843a13afa2ec91897ce8655eb6f81d36f8f1f1d801907847c95239aca6f995c70872a15122934084ad3d717de781217e35c25831a7f86919ed2e6220f08548e0bf"]}, @nested={0x346, 0x32, 0x0, 0x1, [@generic="36a97600b75fd0a991d78a62da12ac2f56eaf0a13e4d92990360b267a1a5c9fcd625bbb8612ec65d55f5848a3457a1e4a4d70e914e059555415c35035ac7962f477220b3d419dc86bdb0cbcf765143c5e39084430dad4c833cb51002fc57156ebb0ca7cbbdbbd28bcbf5bb3882dea5c49414edb472e195d4f384c1d2d1cfc594dec33a944861663b0cbe4f29a947a32f8eb1e875723ca6d60ccdce3481a4297b61c2933875b93a745ebbc19c780eb82704773de0aa0cbda0446afa785419c124eb6f81fc7c0e5dcb58fbcdf781f8882deda89ff5a9c9c2a02a6e524a9abdb1ade9337275d60bbaf3", @typed={0x8, 0x39, 0x0, 0x0, @uid=r3}, @typed={0xc, 0x75, 0x0, 0x0, @u64=0x4}, @generic="a61560878e3790adba2d8148c0ded7b93ce408f4693d25824ccee475cf5f4e8b4a7f12c8acc5fe64b5562356cd82045c34c4e52c336fe60e9027ec784f690b96060050abe8338a66e7bac913a41f6dc0b6a6087beab5649ca239d245e510cefb6925ad0887f5c29e39edc180f023f987b45e40adac653d540440f51aeaec8e34cc49efb4ba7ef30541a208394df52e544a5cba249b99e9c52258ab396926c3705d89a061f174bce0bb42deb3184ee9bb5153ed43321a8dc70d1f442f1b1fd8525de1186a3fff09d2664681046e73e965eb972fe99c1c53cb1edb1cb75a84c7dd9ab98ca6eb8680f41e34f2a40cbd463915a3400861", @generic="ffd6ccdc00c7cf21b4a9c3b9bea2574ff2c51324d36afe4dd1400b8b7f10883362ce53971e57d514ba591660d786ff2074f7b409ac150d584600e5e2554b8f329547e8d156005c78dc54fce4d2f2456913047deade129a68efbe85c168c0e6fc38e557071c51123d2ddd1d57448985ac2e134742f6af1d7564064e92", @typed={0x8, 0x27, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x4d, 0x0, 0x0, @pid=r7}, @generic="c79971af1be2bbcb88b5ea377bd91d0df954ce3e80922b14a3e70367f1714daa1038a586cf6f760c624a8c0235db7f91b5bf29581df38763afac75142c9876a60df6457f88a0ab325cebf58dd954e46f0ee22368c3267d48378cd87a6f67c1881e66525047e45c45a9acc565412b8edaee93d70fe6762ea55add020875b1aa24d3405bd10d5f22de4537157f2e69781d72f2bc1ac7d0a0b55aa575f06a174a843c0d97d32d259fe8ba82499279ac7b924c24f7ce70559e0be0246f6901abecba5153971f38"]}, @typed={0x8, 0x4c, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}}]}, 0x16d4}, 0x1, 0x0, 0x0, 0x48000}, 0x20044080) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(0xffffffffffffffff) stat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r8, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={r6, r8, r4}, 0xc) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x5, 0x3a360a37}, {0x86e, 0x80}]}, 0x14, 0x3) 12:16:23 executing program 3: ioprio_get$uid(0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r1, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r1) ioctl$CDROMPLAYTRKIND(r1, 0x5304, &(0x7f0000000240)={0xc7, 0x81, 0x2, 0x3}) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000, 0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x4e21, 0x1, 0x4e21, 0x5b, 0xa, 0x0, 0x80, 0x1, 0x0, r2}, {0x2, 0x100000000, 0x8, 0x73, 0x0, 0x8000, 0x6, 0xfffffffffffffffe}, {0x6, 0xd3, 0x0, 0xd9bf}, 0x3, 0x6e6bb8, 0x2, 0x1, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x33}, 0xb, @in=@rand_addr=0x64010100, 0x3504, 0x2, 0x3, 0x3, 0x4, 0x2, 0x1}}, 0xe8) 12:16:23 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x12, 0x0, 0x0, 0x0) 12:16:23 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:16:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2000) 12:16:23 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:16:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xd30a, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 2021.664178] loop1: detected capacity change from 0 to 256 [ 2021.679280] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2021.719600] loop4: detected capacity change from 0 to 264192 [ 2021.747311] ramfs: Bad value for 'mode' [ 2021.758570] FAULT_INJECTION: forcing a failure. [ 2021.758570] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.761226] CPU: 1 PID: 13600 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 2021.762961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2021.765365] Call Trace: [ 2021.765900] [ 2021.766367] dump_stack_lvl+0x8b/0xb3 [ 2021.767190] should_fail.cold+0x5/0xa [ 2021.768034] ? create_object.isra.0+0x3a/0xa20 [ 2021.769022] should_failslab+0x5/0x10 [ 2021.769829] kmem_cache_alloc+0x5b/0x480 [ 2021.770702] create_object.isra.0+0x3a/0xa20 [ 2021.771679] ? kasan_unpoison+0x23/0x50 [ 2021.772537] __kmalloc+0x1ed/0x330 [ 2021.773306] io_setup_async_rw+0x199/0x620 [ 2021.774206] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2021.775425] io_write+0x941/0xbe0 [ 2021.776182] ? io_read+0xff0/0xff0 [ 2021.776948] ? x86_pmu_enable+0xa20/0xd90 [ 2021.777854] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2021.778980] ? lock_chain_count+0x20/0x20 [ 2021.779957] ? find_held_lock+0x2c/0x110 [ 2021.780795] io_issue_sqe+0xe8a/0x6980 [ 2021.781581] ? lock_release+0x3b2/0x6f0 [ 2021.782354] ? __fget_files+0x26b/0x470 [ 2021.783140] ? lock_downgrade+0x6d0/0x6d0 [ 2021.783985] ? io_openat2+0xbc0/0xbc0 [ 2021.784747] ? kick_process+0xe8/0x170 [ 2021.785530] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2021.786618] ? lock_is_held_type+0xd7/0x130 [ 2021.787492] io_submit_sqes+0x16ba/0x8fc0 [ 2021.788342] ? io_async_task_func+0x560/0x560 [ 2021.789247] ? io_rsrc_buf_put+0x50/0x50 [ 2021.790056] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 2021.791044] __do_sys_io_uring_enter+0xee0/0x1e80 [ 2021.792018] ? io_submit_sqes+0x8fc0/0x8fc0 [ 2021.792880] ? wait_for_completion_io+0x270/0x270 [ 2021.793829] ? lock_is_held_type+0xd7/0x130 [ 2021.794680] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2021.795783] ? vfs_write+0x188/0xae0 [ 2021.796521] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2021.797600] ? fput+0x2a/0x50 [ 2021.798230] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.799292] do_syscall_64+0x3b/0x90 [ 2021.800033] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2021.801046] RIP: 0033:0x7f1fc76cdb19 [ 2021.801772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.805382] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2021.806857] RAX: ffffffffffffffda RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 2021.808272] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 2021.808384] ramfs: Bad value for 'mode' [ 2021.809668] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 2021.809685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2021.809699] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 2021.809741] [ 2021.819935] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:16:23 executing program 3: ioprio_get$uid(0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x15c, 0x7, 0x0, 0x301, 0x70bd26, 0x25dfdbfc, {0x3, 0x0, 0x4}, [@nested={0x148, 0x6b, 0x0, 0x1, [@generic="0d148b5fd723337bbece205d177d526ec972a04d64261444b5ecad1982508ea86b203dab35abf1973faec8e4247b90116cf2f2eaeb0cfd885cc9f0cfc0311a2d69d0b2ddb60e7ac12ad8568c0609273ff4916879832c06bbe3bb42f9c221d317636469e8bd4f53413d7e7b42dee03414a56a0ee60aa27e3758d27b371cd90edf0e39a7b170b671da3367ec7a79a46343d10e7b717ae1375cfc9a1cf8b91cac61c5012f7a5ef59ba7942c1e8ebcda033b3773604c", @generic="539086cc98e207940a92138d938d9932f1910d8d4ec85f210ab6bc6400c24480426ae3b71a6e5b53379b710448cd73df162d", @typed={0x8, 0x1f, 0x0, 0x0, @u32=0x81}, @generic="0dc8c111e8fc56", @generic, @generic="df5651574a26e0fc6096719451476cb4cd43be93a2ea10b9612f438345eacdc85f1346d03479014332c374278b5d9f8563692d1352768ce035c40032268479f53c40c09cbdd477", @typed={0x5, 0x96, 0x0, 0x0, @str='\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000030}, 0x80) 12:16:23 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x18, 0x0, 0x0, 0x0) 12:16:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2400) 12:16:24 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 2021.927699] loop1: detected capacity change from 0 to 256 12:16:24 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:16:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xedc0, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 2021.958642] loop4: detected capacity change from 0 to 264192 [ 2021.964416] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:16:24 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000003a40)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003880)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000200)=""/75, 0x4b}], 0x2, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000000480)=""/254, 0xfe}, {&(0x7f0000000580)=""/12, 0xc}, {&(0x7f00000005c0)=""/154, 0x9a}], 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="28000000000000000100000001000004", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000002b80)=[{&(0x7f00000007c0)=""/11, 0xb}, {&(0x7f0000000800)=""/216, 0xd8}, {&(0x7f0000000900)=""/223, 0xdf}, {&(0x7f0000000a00)=""/33, 0x21}, {&(0x7f0000000a40)=""/182, 0xb6}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/101, 0x65}], 0x8, &(0x7f0000002c00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002c40)=@abs, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002cc0)=""/35, 0x23}, {&(0x7f0000002d00)=""/39, 0x27}, {&(0x7f0000002d40)=""/49, 0x31}], 0x3, &(0x7f0000002dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000002ec0), 0x6e, &(0x7f0000003180)=[{&(0x7f0000002f40)=""/63, 0x3f}, {&(0x7f0000002f80)=""/91, 0x5b}, {&(0x7f0000003000)=""/152, 0x98}, {&(0x7f00000030c0)=""/180, 0xb4}], 0x4, &(0x7f00000031c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003280)=""/67, 0x43}, {&(0x7f0000003300)=""/109, 0x6d}, {&(0x7f0000003380)=""/171, 0xab}], 0x3, &(0x7f0000003480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000003580)=@abs, 0x6e, &(0x7f0000003740)=[{&(0x7f0000003600)=""/40, 0x28}, {&(0x7f0000003640)=""/231, 0xe7}], 0x2, &(0x7f0000003780)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x7, 0x40, &(0x7f0000003a80)={r0, r1+60000000}) statx(r4, &(0x7f0000003ac0)='./file0\x00', 0x4000, 0x10, &(0x7f0000003b00)) ioprio_get$uid(0x0, r2) io_setup(0x1, &(0x7f0000003c00)=0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r7, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r7, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r7) openat2(r5, &(0x7f0000003f40)='./file1\x00', &(0x7f0000003f80)={0x307200, 0x34, 0x9}, 0x18) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x1c, 0x0, 0x4, 0x1f, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4044050) clock_gettime(0x0, &(0x7f0000003d40)={0x0, 0x0}) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000003fc0), 0x14082, 0x0) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000004040), r3) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000004740)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004700)={&(0x7f0000004080)={0x664, r11, 0x400, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x62c, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x40}, 0xb8e}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}, {0x428, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x8}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x8}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xd8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1ff, @remote, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4f4806e4a31eea82796ea057407a84582a8cbadde748b4b2d1f1d66727f8854c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7f, @rand_addr=' \x01\x00', 0x3ff}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}, 0x7ff}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0xc4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6f40e6faf3983556eb07fda9340b8514dd6c2d367933e63a91ee8df4a649dd16"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8f739bc399ea034d2fd6ee6c70ed58526d9fc4280f4041521b74f00ae9c740ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x401, @private0, 0xffffff91}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5486208fdc6cc84bfa52f870b86914120ca68be3aa71c3b9fdd83f8ff1bcbe7d"}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x664}, 0x1, 0x0, 0x0, 0x24000040}, 0x40) io_pgetevents(r6, 0x80, 0x7, &(0x7f0000003c40)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000003d80)={r8, r9+10000000}, &(0x7f0000003e00)={&(0x7f0000003dc0)={[0x3]}, 0x8}) 12:16:24 executing program 3: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r5, 0x0, r5, 0x0, 0x0, r5, r5, r5, r6]) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r7, 0x0, r7, 0x0, 0x0, r7, r7, r7, r8]) setgroups(0x3, &(0x7f0000000340)=[r4, r8, r3]) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010005000000000002000400", @ANYRES32=r1, @ANYBLOB="040000000000000008000500", @ANYRES32=0xee01, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000000aaca16604acdde455719ef2abbfd844bbbbfd6824192a90551525ca8fd585cfa63326474f9007672d4a4082a4df5a0ab91fb09baf328f152d21bcd060572d3c5dc6f2deeed4c98d0d40d9cdd1f3dca8ae0fb11bfdae4f3c96473fa7790485fadd42b3ff8ef9b2b83e480e8e493cf3fd4503298d4eb8f181644e4d6e9145ee4341e8ec0d1d74ea6c1f1d4fa52123f80a4abf73f", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=r6, @ANYBLOB="10000100000000002000040000000000"], 0x4c, 0x0) ioprio_get$uid(0x3, r0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x4, {0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}}}, 0x80) [ 2022.075401] ramfs: Bad value for 'mode' [ 2022.092345] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2022.104326] ramfs: Bad value for 'mode' 12:16:24 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 12:16:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2e00) 12:16:24 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x1e, 0x0, 0x0, 0x0) 12:16:24 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)={[{@errors_remount}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:16:24 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 2022.182287] loop4: detected capacity change from 0 to 264192 [ 2022.215050] loop1: detected capacity change from 0 to 256 12:16:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xe0ffff, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 2022.245865] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2022.255175] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. 12:16:24 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 2022.370583] FAULT_INJECTION: forcing a failure. [ 2022.370583] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.373003] CPU: 0 PID: 13661 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 2022.374615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2022.376824] Call Trace: [ 2022.377318] [ 2022.377754] dump_stack_lvl+0x8b/0xb3 [ 2022.378515] should_fail.cold+0x5/0xa [ 2022.379278] ? create_object.isra.0+0x3a/0xa20 [ 2022.380180] should_failslab+0x5/0x10 [ 2022.380921] kmem_cache_alloc+0x5b/0x480 [ 2022.381722] create_object.isra.0+0x3a/0xa20 [ 2022.382585] ? kasan_unpoison+0x23/0x50 [ 2022.383380] kmem_cache_alloc_node_trace+0x256/0x3f0 [ 2022.384374] create_io_worker+0xf6/0x630 [ 2022.385180] io_wqe_enqueue+0x692/0xb90 [ 2022.385968] ? create_io_worker+0x630/0x630 [ 2022.386822] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 2022.387848] ? lock_is_held_type+0xd7/0x130 [ 2022.388696] io_queue_async_work+0x271/0x5a0 [ 2022.389566] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 2022.390460] io_req_task_submit+0x3b3/0x530 [ 2022.391322] tctx_task_work+0x19f/0xe80 [ 2022.392108] ? lock_downgrade+0x6d0/0x6d0 [ 2022.392922] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 2022.393977] ? rwlock_bug.part.0+0x90/0x90 [ 2022.394804] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2022.395706] task_work_run+0xe2/0x1a0 [ 2022.396463] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 2022.397419] syscall_exit_to_user_mode+0x19/0x50 [ 2022.398333] do_syscall_64+0x48/0x90 [ 2022.399064] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2022.400069] RIP: 0033:0x7f1fc76cdb19 [ 2022.400783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.404332] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.405794] RAX: 0000000000000002 RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 2022.407161] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 2022.408533] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.409897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2022.411275] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 2022.412669] [ 2022.463442] loop4: detected capacity change from 0 to 264192 [ 2022.466988] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2022.483792] ramfs: Bad value for 'mode' [ 2022.496778] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2022.502906] ramfs: Bad value for 'mode' 12:16:40 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 12:16:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x1000000, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:16:40 executing program 7: sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xfffffffffffffe0f, 0x0, 0x604, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) ioprio_get$uid(0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="5ff9b22764c069ea3030fd9e6a871ee17e96d1b780b8586a31bd2036a07df450b183a34453e9c9650a9638def3e07bdcb306b4acad0d3946a2af28b5379e845bbffedefa5693ad3ee233bfc9ffa6f5d9bdeea2ae9e1c"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x134}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={0x30, r4, 0x5, 0x1, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="f8"}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x11c, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xfd, 0x5b, "7665251239a279c1fd951845b639632a97f25f318ceb3e1365a1565833a4c1086ffb2f7211f1ac47532b82e55a886ec22a44e295570475702aaf80a3f062a55f44a0a79c6cf0b6483603168bbe55fc79aaef62b59cf4ed35f4aa1367e9a4c1521b72c10051fc13583198c955718931cff2e1f77af1c95a3314e3d85e478d9519c1f8b346333049e8b0a236602e0ee9d203f8dbbc03caedab124b257b8ee2b0e5b7b895f91fc23ed3fa026d41487d4cdf48372f062db4be4e8fb4ad1d3589b804646799f884265cdb99dce991b363b969c316d1dd87c7561e29136f420cf0fbf2178733be72fc2d2a31e466f2ea58adfdc0ab62864e7ed3e4a5"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 12:16:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x3010) 12:16:40 executing program 3: ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f00000000c0)={0x4f35b3b, 0xf}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x0, r0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYBLOB="f7ffffffffffffff0100000000000000dd03000000000000070000000000000005000000020000000800000000000000000000000d49000038dc0000050000000100000000000000001000000000000006000000000077219eb60000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/160]) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) setresuid(r1, r2, r3) 12:16:40 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x24, 0x0, 0x0, 0x0) 12:16:40 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:16:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) [ 2038.054449] ramfs: Bad value for 'mode' [ 2038.057604] ramfs: Bad value for 'mode' [ 2038.064994] loop1: detected capacity change from 0 to 256 [ 2038.068752] loop4: detected capacity change from 0 to 264192 [ 2038.110769] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2038.112199] FAULT_INJECTION: forcing a failure. [ 2038.112199] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.114768] CPU: 0 PID: 13685 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 2038.116528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2038.118889] Call Trace: [ 2038.119425] [ 2038.119901] dump_stack_lvl+0x8b/0xb3 [ 2038.120726] should_fail.cold+0x5/0xa [ 2038.121538] ? copy_process+0x5c4/0x6d40 [ 2038.122407] should_failslab+0x5/0x10 [ 2038.123211] kmem_cache_alloc_node+0x55/0x490 [ 2038.124181] copy_process+0x5c4/0x6d40 [ 2038.125014] ? filter_irq_stacks+0x90/0x90 [ 2038.125919] ? __stack_depot_save+0x35/0x450 [ 2038.126874] ? kasan_save_stack+0x1e/0x40 [ 2038.127793] ? __kasan_kmalloc+0x81/0xa0 [ 2038.128655] ? create_io_worker+0xf6/0x630 [ 2038.129558] ? __cleanup_sighand+0xb0/0xb0 [ 2038.130457] ? do_syscall_64+0x48/0x90 [ 2038.131285] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2038.132441] ? lock_is_held_type+0xd7/0x130 12:16:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x2000000, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 2038.133347] ? find_held_lock+0x2c/0x110 [ 2038.134338] ? user_worker_create+0x16c/0x180 [ 2038.135322] ? io_wqe_dec_running+0x210/0x210 [ 2038.136292] user_worker_create+0x10e/0x180 [ 2038.137210] ? copy_process+0x6d40/0x6d40 [ 2038.138103] ? io_wqe_dec_running+0x210/0x210 [ 2038.139068] ? lockdep_init_map_type+0x2c3/0x7a0 [ 2038.140088] create_io_worker+0x253/0x630 [ 2038.140979] io_wqe_enqueue+0x692/0xb90 [ 2038.141835] ? create_io_worker+0x630/0x630 [ 2038.142751] ? __sanitizer_cov_trace_switch+0x63/0xf0 12:16:40 executing program 7: socketpair(0x2e, 0x2, 0x8, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000300)=""/175, 0xaf, 0x2040, &(0x7f0000000100)={0xa, 0x4e24, 0xde92, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="74c116e4850900fa06cb6f0000f5", @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf25160000000c009900040000004e0000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a001a0008021100000000000a000600ffffffffffff00000a001a0008021100000000000a001a000802110000010000"], 0x74}, 0x1, 0x0, 0x0, 0x20004080}, 0x1) ioprio_get$uid(0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) quotactl(0x7, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)="ec47e3f5bb2ba90282a7450172c7521b56") openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40200, 0x42, 0x3}, 0x18) [ 2038.143854] ? lock_is_held_type+0xd7/0x130 [ 2038.144810] io_queue_async_work+0x271/0x5a0 [ 2038.145747] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 2038.146710] io_req_task_submit+0x3b3/0x530 [ 2038.147652] tctx_task_work+0x19f/0xe80 [ 2038.148501] ? lock_downgrade+0x6d0/0x6d0 [ 2038.149401] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 2038.150547] ? rwlock_bug.part.0+0x90/0x90 [ 2038.151485] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2038.152447] task_work_run+0xe2/0x1a0 [ 2038.153303] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 2038.154356] syscall_exit_to_user_mode+0x19/0x50 [ 2038.155389] do_syscall_64+0x48/0x90 [ 2038.156201] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2038.157302] RIP: 0033:0x7f1fc76cdb19 [ 2038.158086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.161931] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2038.163533] RAX: 0000000000000002 RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 2038.165027] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 2038.166518] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 2038.168017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2038.169504] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 2038.171013] 12:16:40 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 2038.172506] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2038.242046] ramfs: Bad value for 'mode' [ 2038.254484] ramfs: Bad value for 'mode' 12:16:53 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x2a, 0x0, 0x0, 0x0) 12:16:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x3000000, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:16:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:16:53 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:16:53 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 12:16:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x3f00) 12:16:53 executing program 7: ioprio_get$uid(0x3, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) setreuid(r0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) setreuid(r1, r2) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20450, &(0x7f0000000080)=ANY=[@ANYBLOB='memory_remursiveprot,memory_localevents,memory_localevents,memory_reprot,devices,cpuacct,nsdelegate,memory_recursiveprot,rlimit,smackfsroot=\\$@,\x00']) 12:16:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x2, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x811}, 0x805) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) getuid() stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) ioprio_get$uid(0x3, r2) 12:16:53 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x30, 0x0, 0x0, 0x0) [ 2051.638640] loop4: detected capacity change from 0 to 264192 [ 2051.648416] loop1: detected capacity change from 0 to 256 [ 2051.672445] ramfs: Bad value for 'mode' [ 2051.683282] ramfs: Bad value for 'mode' [ 2051.687378] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2051.691776] FAULT_INJECTION: forcing a failure. [ 2051.691776] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.693613] CPU: 1 PID: 13731 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 2051.694882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2051.696648] Call Trace: [ 2051.697052] [ 2051.697408] dump_stack_lvl+0x8b/0xb3 [ 2051.698030] should_fail.cold+0x5/0xa [ 2051.698688] ? create_object.isra.0+0x3a/0xa20 [ 2051.699410] should_failslab+0x5/0x10 [ 2051.700011] kmem_cache_alloc+0x5b/0x480 [ 2051.700647] create_object.isra.0+0x3a/0xa20 [ 2051.701333] ? kasan_unpoison+0x23/0x50 [ 2051.701955] kmem_cache_alloc_node+0x248/0x490 [ 2051.702661] copy_process+0x5c4/0x6d40 [ 2051.703420] ? filter_irq_stacks+0x90/0x90 [ 2051.704323] ? __stack_depot_save+0x35/0x450 [ 2051.705263] ? kasan_save_stack+0x1e/0x40 [ 2051.705940] ? __kasan_kmalloc+0x81/0xa0 [ 2051.706594] ? create_io_worker+0xf6/0x630 [ 2051.707279] ? __cleanup_sighand+0xb0/0xb0 [ 2051.707995] ? do_syscall_64+0x48/0x90 [ 2051.708627] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2051.709509] ? lock_is_held_type+0xd7/0x130 [ 2051.710191] ? find_held_lock+0x2c/0x110 [ 2051.710819] ? user_worker_create+0x16c/0x180 [ 2051.711515] ? io_wqe_dec_running+0x210/0x210 [ 2051.712227] user_worker_create+0x10e/0x180 [ 2051.712899] ? copy_process+0x6d40/0x6d40 [ 2051.713551] ? io_wqe_dec_running+0x210/0x210 [ 2051.714266] ? lockdep_init_map_type+0x2c3/0x7a0 [ 2051.715016] create_io_worker+0x253/0x630 [ 2051.715666] io_wqe_enqueue+0x692/0xb90 [ 2051.716300] ? create_io_worker+0x630/0x630 [ 2051.716969] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 2051.717780] ? lock_is_held_type+0xd7/0x130 [ 2051.718453] io_queue_async_work+0x271/0x5a0 [ 2051.719145] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 2051.719902] io_req_task_submit+0x3b3/0x530 [ 2051.720577] tctx_task_work+0x19f/0xe80 [ 2051.721204] ? lock_downgrade+0x6d0/0x6d0 [ 2051.721839] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 2051.722674] ? rwlock_bug.part.0+0x90/0x90 [ 2051.723328] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2051.724040] task_work_run+0xe2/0x1a0 [ 2051.724645] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 2051.725428] syscall_exit_to_user_mode+0x19/0x50 [ 2051.726177] do_syscall_64+0x48/0x90 [ 2051.726772] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2051.727583] RIP: 0033:0x7f1fc76cdb19 [ 2051.728182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2051.731070] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2051.732278] RAX: 0000000000000002 RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 2051.733482] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 2051.734656] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 2051.735787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2051.736922] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 2051.738065] 12:16:53 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:16:53 executing program 7: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x10000, 0x10340) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000180)={0x8, 0x0, {0x2, @struct={0x7, 0x7}, 0x0, 0x9, 0x80, 0x33b2, 0xfff, 0x2, 0x22, @usage=0x100, 0x2, 0x8, [0x1ff, 0x0, 0x40, 0x9, 0x2, 0x4]}, {0x2, @struct={0x2, 0x3}, 0x0, 0x10001, 0x9, 0xffffffffffffdaf1, 0x100000000, 0x1, 0x0, @usage=0x200, 0xff, 0x73cf, [0x3, 0xfff, 0x80, 0x2, 0x7, 0x9]}, {0x5, @usage=0xffff, 0x0, 0xaa3, 0x1, 0x3, 0x7, 0x3, 0x20, @struct={0x6, 0xffffff34}, 0x1d, 0x0, [0x3ff, 0x6, 0x1, 0x3, 0x9, 0x7f]}, {0x80000001, 0xfff, 0x6}}) ioprio_get$uid(0x3, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f0000000080)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@none}, {@none}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@name={'name', 0x3d, ']-'}}], [{@appraise}, {@subj_user}, {@fsname}, {@smackfsdef={'smackfsdef', 0x3d, '\\%'}}, {@hash}]}) [ 2051.777678] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. 12:16:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x4000000, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 2051.825904] ramfs: Bad value for 'mode' 12:16:53 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x36, 0x0, 0x0, 0x0) [ 2051.830270] ramfs: Bad value for 'mode' 12:16:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x5505) 12:16:54 executing program 7: ioprio_get$uid(0x0, 0xee01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@empty, @in=@private=0xa010101, 0x4e20, 0x6ec, 0x4e24, 0xffff, 0xa, 0x20, 0x0, 0x32, 0x0, 0xffffffffffffffff}, {0x9, 0x9, 0x2, 0x7, 0xcff, 0x5, 0x2, 0x6}, {0x2c2, 0x3, 0xfff, 0x9}, 0x9, 0x6e6bb3, 0x2, 0x0, 0x1, 0x2}, {{@in6=@private2, 0x4d5, 0x6c}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x3, 0x2, 0x40, 0x8, 0x1, 0x9}}, 0xe8) 12:16:54 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 2051.982261] loop1: detected capacity change from 0 to 256 12:16:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x40, 0x3}) 12:16:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x5000000, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 2052.035664] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:16:54 executing program 3: ioprio_get$uid(0x3, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x8, 0xffffffff}, {0x4, 0x8}]}, 0x14, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 12:16:54 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) [ 2052.115233] ramfs: Bad value for 'mode' [ 2052.125186] FAULT_INJECTION: forcing a failure. [ 2052.125186] name failslab, interval 1, probability 0, space 0, times 0 [ 2052.127542] CPU: 0 PID: 13886 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 2052.129227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2052.131468] Call Trace: [ 2052.131995] [ 2052.132441] dump_stack_lvl+0x8b/0xb3 [ 2052.133233] should_fail.cold+0x5/0xa [ 2052.134007] ? create_object.isra.0+0x3a/0xa20 [ 2052.134951] should_failslab+0x5/0x10 [ 2052.135730] kmem_cache_alloc+0x5b/0x480 [ 2052.136582] create_object.isra.0+0x3a/0xa20 [ 2052.137505] ? kasan_unpoison+0x23/0x50 [ 2052.138411] kmem_cache_alloc_node_trace+0x256/0x3f0 [ 2052.139616] create_io_worker+0xf6/0x630 [ 2052.140490] io_wqe_enqueue+0x692/0xb90 [ 2052.141328] ? create_io_worker+0x630/0x630 [ 2052.142216] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 2052.143273] ? lock_is_held_type+0xd7/0x130 [ 2052.144171] io_queue_async_work+0x271/0x5a0 [ 2052.145090] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 2052.146029] io_req_task_submit+0x3b3/0x530 [ 2052.146912] tctx_task_work+0x19f/0xe80 [ 2052.147739] ? lock_downgrade+0x6d0/0x6d0 [ 2052.148583] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 2052.149682] ? rwlock_bug.part.0+0x90/0x90 [ 2052.150558] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2052.151488] task_work_run+0xe2/0x1a0 [ 2052.152306] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 2052.153300] syscall_exit_to_user_mode+0x19/0x50 [ 2052.154259] do_syscall_64+0x48/0x90 [ 2052.155014] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2052.156072] RIP: 0033:0x7f1fc76cdb19 [ 2052.156806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2052.160498] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2052.162014] RAX: 0000000000000002 RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 2052.163464] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 2052.164907] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 2052.166343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2052.167776] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 2052.169237] [ 2052.177523] ramfs: Bad value for 'mode' [ 2052.178650] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:16:54 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:16:54 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)) ioctl$FITRIM(r0, 0xc0185879, 0x0) 12:17:07 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x3c, 0x0, 0x0, 0x0) 12:17:07 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 12:17:07 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)) ioctl$FITRIM(r0, 0xc0185879, 0x0) 12:17:07 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000240)='./file1\x00'}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:17:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x8004) 12:17:07 executing program 7: ioprio_get$uid(0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x100000000, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000280)="af4faf7e4f615926cef8a45ee757c63120aac4e31009ea3eb6c1241e6a569542d2867fde1319b92edc380117a789f57d63bf5eb378152d4a18464a53090a6c542a7ebf9d5a292f792c", 0x49, 0x3}, {&(0x7f0000000300)="016dd75a1fccca777588ae90d41d7f239a9423ffd6a96a205267766914ed8bbd427aa92bc0d86dde41731802350839d8651cc26b6d37fa0f9b5719412ebacab12426e8e0fbf9396f96889cbba0c3be3e05d73c71f7a418d2cd5e72b07ab01d60c1863fcfa32454f0e93f31e8396ed34508de31ec0ca953e05d4f538adefed001d87f2b37f0", 0x85, 0x1}], 0x1, &(0x7f0000000400)={[{}, {'}}^^/&----$#.'}, {'c'}, {'.}B/'}, {'-&}&V/{)\\^)#'}, {'%-\\}!:,$'}, {'#'}, {'.,(:{^{}-'}, {'(5\x99(@'}, {'-\x81][\\(&./}:{[-\x85[[,:[(--$}^'}], [{@smackfsdef={'smackfsdef', 0x3d, ')*(,.\\!*]@'}}, {@fowner_lt}, {@obj_user={'obj_user', 0x3d, ',//'}}, {@subj_user={'subj_user', 0x3d, ')'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@audit}]}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000040)='./file0\x00', r2, r3, 0x100) r4 = accept$unix(r1, &(0x7f0000000500)=@abs, &(0x7f0000000580)=0x6e) getpeername$unix(r4, &(0x7f00000005c0)=@abs, &(0x7f0000000640)=0x6e) openat(0xffffffffffffffff, &(0x7f0000000680)='.\x00', 0x400, 0x164) 12:17:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x6000000, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:17:07 executing program 3: ioprio_get$uid(0x3, 0x0) r0 = msgget(0x1, 0x317) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0x0}}, './file0\x00'}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(r2, r3, 0xee00) setresuid(0x0, r2, 0x0) clock_gettime(0x0, &(0x7f0000004440)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004280)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000140)=""/235, 0xeb}, {&(0x7f0000000240)=""/133, 0x85}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/50, 0x32}], 0x5, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/72, 0x48}, {&(0x7f0000000680)=""/77, 0x4d}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000000800)=""/97, 0x61}, {&(0x7f0000000880)=""/236, 0xec}, {&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)=""/251, 0xfb}], 0x8, &(0x7f0000000c40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000000d40), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000dc0)=""/212, 0xd4}, {&(0x7f0000000ec0)=""/22, 0x16}, {&(0x7f0000000f00)=""/236, 0xec}, {&(0x7f0000001000)=""/134, 0x86}, {&(0x7f00000010c0)=""/55, 0x37}, {&(0x7f0000001100)=""/188, 0xbc}], 0x6, &(0x7f0000001240)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000012c0), 0x6e, &(0x7f0000002840)=[{&(0x7f0000001340)=""/143, 0x8f}, {&(0x7f0000001400)=""/67, 0x43}, {&(0x7f0000001480)=""/176, 0xb0}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/143, 0x8f}, {&(0x7f0000002600)=""/34, 0x22}, {&(0x7f0000002640)=""/243, 0xf3}, {&(0x7f0000002740)=""/143, 0x8f}, {&(0x7f0000002800)=""/25, 0x19}], 0x9, &(0x7f0000002900)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000029c0)=""/236, 0xec}, {&(0x7f0000002ac0)=""/97, 0x61}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/56, 0x38}], 0x4, &(0x7f0000003bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000003c40)=@abs, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003cc0)=""/151, 0x97}, {&(0x7f0000003d80)=""/28, 0x1c}, {&(0x7f0000003dc0)=""/171, 0xab}, {&(0x7f0000003e80)=""/36, 0x24}], 0x4, &(0x7f0000003f00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003f40)=@abs, 0x6e, &(0x7f0000004140)=[{&(0x7f0000003fc0)=""/87, 0x57}, {&(0x7f0000004040)=""/237, 0xed}], 0x2, &(0x7f0000004180)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x7, 0x2003, &(0x7f0000004480)={r4, r5+10000000}) r7 = fcntl$getown(0xffffffffffffffff, 0x9) msgctl$IPC_SET(r0, 0x1, &(0x7f00000044c0)={{0x1, 0x0, r1, r2, r6, 0x4, 0x2}, 0x0, 0x0, 0x7, 0xd7, 0x4, 0x4, 0x80000000, 0x80, 0x8, 0x6, r7, 0xffffffffffffffff}) [ 2065.371401] loop7: detected capacity change from 0 to 264192 [ 2065.383847] nfs: Unknown parameter '}}^^/&----$#.' [ 2065.386689] ramfs: Bad value for 'mode' [ 2065.399474] loop1: detected capacity change from 0 to 256 [ 2065.401506] ramfs: Bad value for 'mode' [ 2065.407391] loop4: detected capacity change from 0 to 264192 [ 2065.411346] loop7: detected capacity change from 0 to 264192 [ 2065.411610] FAULT_INJECTION: forcing a failure. [ 2065.411610] name failslab, interval 1, probability 0, space 0, times 0 [ 2065.414876] CPU: 1 PID: 13912 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 2065.416525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2065.418704] Call Trace: [ 2065.419204] [ 2065.419634] dump_stack_lvl+0x8b/0xb3 [ 2065.420413] should_fail.cold+0x5/0xa [ 2065.421173] ? alloc_pid+0xcd/0xd80 [ 2065.421903] should_failslab+0x5/0x10 [ 2065.421944] nfs: Unknown parameter '}}^^/&----$#.' [ 2065.422644] kmem_cache_alloc+0x5b/0x480 [ 2065.422673] ? memcpy+0x39/0x60 [ 2065.425191] alloc_pid+0xcd/0xd80 [ 2065.425886] ? copy_thread+0x304/0x950 [ 2065.426672] ? copy_namespaces+0x1c1/0x450 [ 2065.427522] copy_process+0x3e72/0x6d40 [ 2065.428330] ? filter_irq_stacks+0x90/0x90 [ 2065.429169] ? __stack_depot_save+0x35/0x450 [ 2065.430065] ? __cleanup_sighand+0xb0/0xb0 [ 2065.430898] ? do_syscall_64+0x48/0x90 [ 2065.431671] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2065.432747] ? lock_is_held_type+0xd7/0x130 [ 2065.433599] ? find_held_lock+0x2c/0x110 [ 2065.434394] ? user_worker_create+0x16c/0x180 12:17:07 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x48, 0x0, 0x0, 0x0) [ 2065.435282] ? io_wqe_dec_running+0x210/0x210 [ 2065.436460] user_worker_create+0x10e/0x180 [ 2065.437316] ? copy_process+0x6d40/0x6d40 [ 2065.438149] ? io_wqe_dec_running+0x210/0x210 [ 2065.439049] ? lockdep_init_map_type+0x2c3/0x7a0 [ 2065.440005] create_io_worker+0x253/0x630 [ 2065.440835] io_wqe_enqueue+0x692/0xb90 [ 2065.441629] ? create_io_worker+0x630/0x630 [ 2065.442479] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 2065.443502] ? lock_is_held_type+0xd7/0x130 [ 2065.444364] io_queue_async_work+0x271/0x5a0 [ 2065.445247] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 2065.446151] io_req_task_submit+0x3b3/0x530 [ 2065.447004] tctx_task_work+0x19f/0xe80 [ 2065.447796] ? lock_downgrade+0x6d0/0x6d0 [ 2065.448654] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 2065.449719] ? rwlock_bug.part.0+0x90/0x90 [ 2065.450554] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2065.451452] task_work_run+0xe2/0x1a0 [ 2065.452231] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 2065.453198] syscall_exit_to_user_mode+0x19/0x50 [ 2065.454126] do_syscall_64+0x48/0x90 [ 2065.454867] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2065.455888] RIP: 0033:0x7f1fc76cdb19 [ 2065.456618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2065.460256] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2065.461734] RAX: 0000000000000002 RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 2065.463132] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 2065.464548] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 2065.465942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2065.467330] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 2065.468759] [ 2065.475551] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:17:07 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000240)='./file1\x00'}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 2065.578786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. 12:17:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x7000000, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:17:22 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000240)='./file1\x00'}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:17:22 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x4c, 0x0, 0x0, 0x0) 12:17:22 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)) ioctl$FITRIM(r0, 0xc0185879, 0x0) 12:17:22 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 12:17:22 executing program 7: ioprio_get$uid(0x3, 0x0) keyctl$get_persistent(0x16, 0xee01, 0xfffffffffffffffc) 12:17:22 executing program 3: ioprio_get$uid(0x3, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000, 0x7ff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getpid() mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80480, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@common=@access_user}, {@rq={'rq', 0x3d, 0x3}}, {@rq={'rq', 0x3d, 0x1000}}], [{@appraise_type}, {@pcr={'pcr', 0x3d, 0x6}}, {@hash}, {@uid_lt={'uid<', r0}}]}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x2, 0x0, r1, 0xffffffffffffffff, r2, 0x204, 0x401}, 0x0, 0x0, 0x1ff, 0x3, 0x3f, 0x1, 0x7, 0x7fff, 0x9, 0x20, r3, r4}) 12:17:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0xc000) [ 2080.670967] loop4: detected capacity change from 0 to 264192 [ 2080.675971] ramfs: Bad value for 'mode' [ 2080.679297] loop1: detected capacity change from 0 to 256 [ 2080.691560] ramfs: Bad value for 'mode' [ 2080.699236] FAULT_INJECTION: forcing a failure. [ 2080.699236] name failslab, interval 1, probability 0, space 0, times 0 [ 2080.700505] CPU: 0 PID: 13964 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 2080.701399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2080.702623] Call Trace: [ 2080.702902] [ 2080.703140] dump_stack_lvl+0x8b/0xb3 [ 2080.703578] should_fail.cold+0x5/0xa [ 2080.704012] ? create_object.isra.0+0x3a/0xa20 [ 2080.704529] should_failslab+0x5/0x10 [ 2080.704945] kmem_cache_alloc+0x5b/0x480 [ 2080.705385] create_object.isra.0+0x3a/0xa20 [ 2080.705862] ? kasan_unpoison+0x23/0x50 [ 2080.706297] kmem_cache_alloc+0x239/0x480 [ 2080.706747] alloc_pid+0xcd/0xd80 [ 2080.707141] ? copy_thread+0x304/0x950 [ 2080.707560] ? copy_namespaces+0x1c1/0x450 [ 2080.708024] copy_process+0x3e72/0x6d40 [ 2080.708465] ? filter_irq_stacks+0x90/0x90 [ 2080.708944] ? __stack_depot_save+0x35/0x450 [ 2080.709449] ? __cleanup_sighand+0xb0/0xb0 [ 2080.709905] ? do_syscall_64+0x48/0x90 [ 2080.710333] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2080.710915] ? lock_is_held_type+0xd7/0x130 [ 2080.711392] ? find_held_lock+0x2c/0x110 [ 2080.711830] ? user_worker_create+0x16c/0x180 [ 2080.712344] ? io_wqe_dec_running+0x210/0x210 [ 2080.712831] user_worker_create+0x10e/0x180 [ 2080.713294] ? copy_process+0x6d40/0x6d40 [ 2080.713745] ? io_wqe_dec_running+0x210/0x210 [ 2080.714235] ? lockdep_init_map_type+0x2c3/0x7a0 [ 2080.714752] create_io_worker+0x253/0x630 [ 2080.715200] io_wqe_enqueue+0x692/0xb90 [ 2080.715636] ? create_io_worker+0x630/0x630 [ 2080.716111] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 2080.716672] ? lock_is_held_type+0xd7/0x130 [ 2080.717142] io_queue_async_work+0x271/0x5a0 [ 2080.717624] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 2080.718134] io_req_task_submit+0x3b3/0x530 [ 2080.718604] tctx_task_work+0x19f/0xe80 [ 2080.719037] ? lock_downgrade+0x6d0/0x6d0 [ 2080.719483] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 2080.720069] ? rwlock_bug.part.0+0x90/0x90 [ 2080.720544] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2080.721067] task_work_run+0xe2/0x1a0 [ 2080.721488] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 2080.722027] syscall_exit_to_user_mode+0x19/0x50 [ 2080.722533] do_syscall_64+0x48/0x90 [ 2080.722959] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2080.723519] RIP: 0033:0x7f1fc76cdb19 [ 2080.723914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2080.725904] RSP: 002b:00007f1fc4c43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2080.726721] RAX: 0000000000000002 RBX: 00007f1fc77e0f60 RCX: 00007f1fc76cdb19 [ 2080.727485] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000003 [ 2080.728256] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 2080.729022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2080.729792] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 2080.730587] 12:17:22 executing program 7: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x0, r0) [ 2080.750390] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. 12:17:22 executing program 3: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4020}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4094}, 0x8000) ioprio_get$uid(0x3, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8000, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x1}}, {@common=@posixacl}, {@timeout={'timeout', 0x3d, 0x3}}, {@common=@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@common=@fscache}, {@sq={'sq', 0x3d, 0x1}}], [{@obj_user={'obj_user', 0x3d, ','}}]}}) [ 2080.768718] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:17:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x8000000, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:17:22 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 12:17:23 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x60, 0x0, 0x0, 0x0) 12:17:23 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x0, 0x3}) [ 2081.024817] ramfs: Bad value for 'mode' [ 2081.033005] ramfs: Bad value for 'mode' [ 2081.046012] FAULT_INJECTION: forcing a failure. [ 2081.046012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2081.047272] CPU: 0 PID: 13994 Comm: syz-executor.2 Not tainted 5.16.0-rc5-next-20211217 #1 [ 2081.048201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2081.049434] Call Trace: [ 2081.049725] [ 2081.049976] dump_stack_lvl+0x8b/0xb3 [ 2081.050452] should_fail.cold+0x5/0xa [ 2081.050897] _copy_to_user+0x2e/0x150 [ 2081.051303] simple_read_from_buffer+0xcc/0x160 [ 2081.051819] proc_fail_nth_read+0x194/0x220 [ 2081.052307] ? proc_fault_inject_read+0x230/0x230 [ 2081.052831] ? security_file_permission+0xb1/0xd0 [ 2081.053364] ? proc_fault_inject_read+0x230/0x230 [ 2081.053896] vfs_read+0x1b6/0x5f0 [ 2081.054280] ksys_read+0x12d/0x250 [ 2081.054669] ? __ia32_sys_pwrite64+0x230/0x230 [ 2081.055172] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2081.055726] do_syscall_64+0x3b/0x90 [ 2081.056158] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2081.056697] RIP: 0033:0x7f1fc768069c [ 2081.057110] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2081.059042] RSP: 002b:00007f1fc4c43170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2081.059886] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1fc768069c [ 2081.060674] RDX: 000000000000000f RSI: 00007f1fc4c431e0 RDI: 0000000000000006 12:17:23 executing program 7: ioprio_get$uid(0x3, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setfsuid(r0) 12:17:23 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 2081.061453] RBP: 00007f1fc4c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 2081.062433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2081.063224] R13: 00007ffe9ad13aef R14: 00007f1fc4c43300 R15: 0000000000022000 [ 2081.064018] [ 2081.097714] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:17:23 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8) setxattr$security_capability(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000200)=@v3={0x3000000, [{0x9, 0x2}, {0x6, 0x1002}], r1}, 0x18, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r2, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2800) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x581001, 0xd2) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r4, 0x0, r4, 0x0, 0x0, r4, r4, r4, r5]) fchownat(r2, &(0x7f0000000080)='./file0\x00', r3, r5, 0x1400) 12:17:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x9000000, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:17:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0xf000) 12:17:23 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) [ 2081.136435] loop1: detected capacity change from 0 to 256 [ 2081.143307] loop4: detected capacity change from 0 to 264192 [ 2081.149553] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2081.158391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. 12:17:23 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)) 12:17:23 executing program 7: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 12:17:23 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 2081.302208] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2081.317481] ramfs: Bad value for 'mode' [ 2081.334114] ramfs: Bad value for 'mode' [ 2081.351213] loop4: detected capacity change from 0 to 264192 [ 2081.397736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. 12:17:37 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x68, 0x0, 0x0, 0x0) 12:17:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x80000) 12:17:37 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setuid(r0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) ioprio_get$uid(0x0, r1) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x9, 0xffff9ce5, 0x7, 0x3f, 0x3}) 12:17:37 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:17:37 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 12:17:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xa000000, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:17:37 executing program 7: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) 12:17:37 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)) ioctl$FITRIM(r0, 0xc0185879, 0x0) [ 2095.697965] loop1: detected capacity change from 0 to 256 [ 2095.704625] ramfs: Bad value for 'mode' [ 2095.705417] loop4: detected capacity change from 0 to 264192 [ 2095.714583] ramfs: Bad value for 'mode' [ 2095.716421] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2095.769373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2095.787329] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2096.293784] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 12:17:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xb000000, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:17:51 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:17:51 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x48, 0x0, 0x0, 0x0) 12:17:51 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x102, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x4, @bearer=@udp='udp:syz1\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xc00}, 0x40001) statx(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x4000, 0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r1) 12:17:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x200000) 12:17:51 executing program 7: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) ioprio_get$uid(0x3, r0) 12:17:51 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x6c, 0x0, 0x0, 0x0) 12:17:51 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x0, 0x0, 0x0, 0x0) [ 2109.451620] loop1: detected capacity change from 0 to 256 12:17:51 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x2, 0x0, 0x0, 0x0) 12:17:51 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 2109.489661] ramfs: Bad value for 'mode' [ 2109.498730] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2109.508504] ramfs: Bad value for 'mode' 12:17:51 executing program 7: ioprio_get$uid(0x3, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000080)="b45bc785b3dc6115263787679a399c5dbbb01a3ea02d6612f3ddc671312518a0afe81c3e43d9bbe0571e2ece98e7c9619bfe5e8b9d18e250e84ec69dfc11aabe8b231ecc9a39921aae953259ba288d537b4f363ff51af601ddda1dbd0e92efe5eb013588b58b28a34d75eb3d1767266370f606f74d1ff8030cb53878dfdcf80fe72d20db38598b4b78feac330e11d95432f7b778dae76119ff602ad820ad66c3aba03acb", 0xa4, 0x2}, {&(0x7f0000000140)="63af328e47301d257e7751ecdd4d11c3", 0x10, 0x100000000}, {&(0x7f0000000180)="c62e0fd25c42c1", 0x7, 0x3ff}], 0x88810, &(0x7f0000000300)={[{@numtail}, {@utf8}], [{@seclabel}, {@dont_measure}, {@dont_hash}, {@fowner_lt={'fowner<', r0}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '[\xc1'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '-'}}]}) 12:17:51 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:17:51 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0, 0x0, 0x20001f00}], 0x0, &(0x7f00000000c0)) ioctl$FITRIM(r0, 0xc0185879, 0x0) [ 2109.591930] loop7: detected capacity change from 0 to 264192 12:17:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x10000000, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 2109.620755] loop7: detected capacity change from 0 to 264192 12:17:51 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioprio_get$uid(0x0, r1) [ 2109.650161] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2109.656890] loop4: detected capacity change from 0 to 264192 12:17:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x80ffff) 12:17:51 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x74, 0x0, 0x0, 0x0) [ 2109.689617] ramfs: Bad value for 'mode' 12:17:51 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x3, 0x0, 0x0, 0x0) [ 2109.712436] ramfs: Bad value for 'mode' [ 2109.721824] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. 12:17:51 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:17:51 executing program 3: prctl$PR_GET_IO_FLUSHER(0x3a) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@multicast1, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000180)=0xe8) setresuid(0x0, r0, r1) ioprio_get$uid(0x3, r0) 12:17:51 executing program 7: ioprio_get$uid(0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r3, 0x0, r3, 0x0, 0x0, r3, r3, r3, r4]) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r5, 0x0, r5, 0x0, 0x0, r5, r5, r5, r6]) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r7, 0x0, r7, 0x0, 0x0, r7, r7, r7, r8]) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r9, 0x0, r9, 0x0, 0x0, r9, r9, r9, r10]) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {}, [{0x2, 0x2, 0xee00}, {0x2, 0x3}, {0x2, 0x2, r0}], {0x4, 0x4}, [{0x8, 0x1, r1}, {0x8, 0x2, r2}, {0x8, 0x2, r4}, {0x8, 0x4, 0xee00}, {0x8, 0x1, r6}, {0x8, 0x3}, {0x8, 0x0, 0xee00}, {0x8, 0x2, r7}, {0x8, 0x5, r9}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x5}}, 0x8c, 0x7) 12:18:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x8cffffff, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:18:03 executing program 3: ioprio_get$uid(0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0/file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, r0) 12:18:03 executing program 7: ioprio_get$uid(0x3, 0xee01) 12:18:03 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:18:03 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:18:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0xc00000) 12:18:03 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x7a, 0x0, 0x0, 0x0) 12:18:03 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x4, 0x0, 0x0, 0x0) [ 2121.703809] loop1: detected capacity change from 0 to 256 [ 2121.718871] ramfs: Bad value for 'mode' [ 2121.724972] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2121.730225] ramfs: Bad value for 'mode' 12:18:03 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:18:03 executing program 3: ioprio_get$uid(0x3, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x7, 0x1}, {0x0, 0x4b}], 0xffffffffffffffff}, 0x18, 0x3) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000480)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r0) r1 = dup2(r0, r0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000340)={0x20000000}) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)='&', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)='W\xaf\x00', &(0x7f0000000200)='security.capability\x00'], &(0x7f00000002c0)=[&(0x7f0000000280)=',\'\x00'], 0x1000) 12:18:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0xf0ffff) [ 2121.784763] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:18:03 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x5, 0x0, 0x0, 0x0) 12:18:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xc0ed0000, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:18:03 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xf0, 0x0, 0x0, 0x0) 12:18:04 executing program 4: ioprio_get$uid(0x3, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={[{@subsystem='memory'}, {@memory_localevents}, {@memory_localevents}, {@memory_localevents}, {@memory_recursiveprot}, {@memory_localevents}, {}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}]}) [ 2121.899322] ramfs: Bad value for 'mode' [ 2121.904673] ramfs: Bad value for 'mode' 12:18:18 executing program 3: ioprio_get$uid(0x3, 0x0) stat(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfff, 0x1, &(0x7f0000001080)=[{&(0x7f0000000080)="68a4978ec1dee7b52e219daacb7467034c587db01da577078291a9bb8f5c4db933d45304860c48f40be0e31214a4b99d04c441a466caea490d33802d6bf4146fb490527aa785e64ca2d2f7fe88a918cbac6677023a758de0f032c40f3508084dd9d40dc62687e0713185255e143bb4b27eb4dd65a47773f7f86ba2ce9e0f3f5a0c17a86bde62b5e6a650f1eb2c976c010ea1f30dabeb0c6a5a777376e59751516697a93cd534d5c39bd6177dc517e2a3f9214b270e71dc6b2266436bb7ad14dd2f7213258a77788112d2dc1205adef8b32caf265169f5b44c5a5fb5438481ac365c9c48b3f9752bfe954b676896807c5bc017802c351d04b3f34d72c28c8ed8e1b29f941fb8c66f31dd272466d471076eceb5102e0ceb69486625340c3dbaa33dfff4a91e1940876fb7f896aeae4f6732db20b17ca13439adc97d61760daf6ff4746a43755de75c609a7dfa92d2e7cc63f0e3b0298afc61a8126eca00036774a47a711ab8a1db68372cd4a7e88721b98d3495b33ef0aaaaeb803497e59a55134cc47a5a7896822173dab8e399d337266fc7cf5248798687eb6d3e9d9889fb1f949a43d0ef92ab80f015dcd652d419b8f8b77b2e84131d6abed2a9ce6672449938a2465ca642d7a55ca811cbe19b12a76650bb6cccee285ca81a305fa0c3a901dfed408b33835ace992e2cd9f2acf05a4e5be02a4c6e425817c4dbb4ffb6ad8cce3bfb759c03dec28f00ce35736a290e874b71492da6ab560e4e4f9700593e7a4386c166d5f7bff1b874cf76df68c7630c199e7e25d60947b0069e85e2416c46b6325b243ccc540397b8b8c8f4bf2b56f1c34640b4a99096cd52d3bf9cca3c3e56bd79dfde18065f53c1ed1b814673ac4a2c5572e51022538141c88d9dbd52c4e6d264de23f38feb58f9c155d23124355f90eeb0c7174b1304abed9fa2db2a326f74ef69da96de40a50add27182a06b5e5fc1a67883870aa942c66c036d368e7464993ed97021a308311388b1221cd6c848678a0a42d72572c16c4fbbce590b368e0e77952f84c82c1a738f3192783b9ebef1e1b49e459f06600559b3377b216b3c8efbd8d89ca7c15794ca8066dd0ed1ee2fe6c5cb9da90f8f33789b044b7fc05a88dc9f0952ebc832c0f6fe1ef51e196e2bd12d0dbabfc4c182a12fb51150dcfa85252679af1f7dcfb6df71c72bdb816cdb2875949c10806d52b8b4573980d09815765f98b08d273f4774a941dd1ab0d0bcd97ecb9714eb58905e9594bf9b19c3ed5639c2597821b79e8773bed1495901793d17f683d2da4c65b3753819128a9c9e4640ebe73bbbd72a680628a978e23533518f4c708865313d4ed2a8faebb205716c3195390a7d778c45f47589cf62bdc0cc2de31ad05b0b7b92e2577350a30fee0f137265ef631e50a5edef40bf08b38432fe2d97027eff044c17d143718442fcffdbde5754a1642e6a86f4d20bace2ef773c09af4895ebf37a32a5af7098f653f94af345f27390acf2914c2fc2e5cb1154ab818f1d6d6b38bb0239ae121ced77de0a62baa351a78e22cbffbab6359afc2aec0b9e309ccb8b05dbdc9ff7be402435e9b381c5018c51aaef57e721f587ada750ca4e11710b38b77a3c2981531ce62a38facbb29c374ffd54220aef5cb3aad0b49957d5798aa0fcab89833dac7fb4bd0adc36bc4d65d8f4fe68ed882ebf00aa90d9f45410e9132335aaec8fe3bad330330fb166c58302f6633ae2be8e775da0bd33ba721f9a006620caa1d73c890aa20c65e2cf5ff821d9b5f49ac84ab1fafa808724953a22f74ad39f9267b757a921dc6c12a2532cd275ceb83ca2d145e9748263e9019667d032d8bc83476f4620c8e75eacb87aa973a59c4e7b78b900805d3b2219b8b4e0e067c0ea586650f342a7842f4abb37e1fa6a4e7b744cd10dcf2b7c4f01c0045701415a472025f2c496d40288b35f8830960c6bb8eb70e6ed26ea00865c90543404ecaf3ad7a87c7d644db1a3b61644320237d56f5a42f07eed1338f3b98f731ed97eb36672e7e9e1d8d14963b9d5a52f6a12c3d76404aa88a72a51a7edb729a01e8d4c38e8bd214336604241661c93575dbd6512c59c5fa09352fcca249dbe55e2988b22d5fc817bce966317abdb29bd217425f213fbd9b6c621988f38bc1bc4ab9711ce062565e8f83be568c2df6d648bfd737d18749deaa9396e4cf477d4917aa41ec8a3efa843b21a0abc6e667923adc5a7618be5042f124eac022e08c3f53b55fc109f1f87a70f93d0a1117dd60586ce5601aa6019d42640d41b32c9ba3b2d123b91ecf98fcd0cab0ad4a4a32533c187362c52cd08e23cd3deb2d0494b7cabc9b11b29846739e771de4679d02100279638defcbc738dd20fcf40c023827cee057084827630675cf775f2970b370240a57d6e1ca881e60cc4dde89455a1303545ee62cf2345cebd90ddd36cee437a4b0de53459de45ceeb862a9052d828cb0fd8f98e9418b846cacc4cc77cc0d50d5337ba961132af2c4b8230bbec2566cabacdfda830c07a8d73d1fecf4b8622f4b9aafffe5635e566928814dabcd2c88088c0a85f0cfc2e711adc4920b3bafbd788dddf0186316705e36f4dc42e8d00798ace904939c86e0fd21eb38ed18d00e5cff04a97d9e9d182a1901bf4364b9fcd4f596de86861b8c3f502ace6be86f58cb1fcca7834be3f78418f0ef3d63b0bf5659a44ba74c21328aa24318a6a4af2be2148172d94e284e7972393f7fe2eb00167e88091454db0b634563f19fbf8047de63c80e5d053840093d94777b39b6238449aec9e940f6c18bb0f4c90481d85373ca1fddad3b5106bb9be173a64c0234867fa47bcdcd55baa1b9c2ae1a7960a2a03e54754d08596a65a02c00657f0dfae8c069d2c7dfb1388fd95e6ea909155d0dc7ea562acda4821b7c578eb867527408206e2e8bc77791bc6d5ca7bf64f2a263eedd36dfc6c9cc2c316a66ebd7110dd6f13ffb4fe08ad359c4786f9a0584b22edafc0a445127e35306aaeec4bed52ac7ce0bf51bd3ed2c9bd87f8ded3a3b02acbc2d7865d054b61fd644fa15e92187031d0c46e67dc01f1924c4c7c594f5eb8bb0dfbcf9f78f1257657265f922e402e141e58b74c1b8a937b67c4a475d43337cfbee92af25f21d6f7097272e2b634328f22ce6dde602091ab9daeeb1ad8cf24c07bc73e6b9cf1a9eb99c11dda93993100eebd265f3beff8dd9704900a85c14bdea0d9447950622dbaeadceb042913f9307369c9cb01ecf29ed0f557118ef320530a75bad4ffe2204cda7e7b3f31c28a15cbe17486f2a906b29598e5dacaf0724d673b3cc6024664a2f1651c531f1b3afe377b6885b5b3678f10de232f927f631429a911e6ae34f9b8cc02731e062206f0eb57f064bfa0f1072f3af9736ee10c577cdf1686a2a46452d261b4b19b2438eb7322e4828c77663e4684025c5969a14d10d14b9fcee1e560e0107b0a5ac8e8864b5735970e87c4442ae5f8ed93140f1f5fb531a01e9d2b24965bfaf015a282903da6528baa2217d9a4f030f9d843e62e5a9a022b1dd86221b990842626cd34be04353b007ec59ccd1c242c67cc52bb79181c5109e322861b708e03bebb8629335e311f9129079783f904d7e309a6f935b1583a1c4f017fcce547a8f373c737bb3fa809c941179d2f986bc798c569ff2c12a5b52a965d62c4cacffca5fe13576d9523181122ac6200ccd20cb35e4a1e1f458c4ced1c5b0d6a501635130e400b6ab155270dfa36328f9fb6920473d7ff84954e04cbade157b67f1bc16f9aae64123a649b8effbd6b3a1c4d5804dbc16225bfe11e501f4e3a7de4b441746c36d9b54dc5d0544d047d2ce6d9b1d4567db69847ef9c471644b82ff31730e6403f90efdeb0727073e75bb31c742f9ea0406d4568c30458d70c1f7b28464ec3114874b6f3c801de2d0e6bae6d36ead385de8942bad3d4b4f2a43cf3f47cb65ba8fb67d9d1cf696d93779deee01503d8f2f255e71d89237eb300fea0f66ce78e183b361b041e379a3de0ac1c7ad16280c29887b3827e13a6baea0237f1b5455b31f66aede93904f0198f3bf9c95ada816749f1f747da9c68744f664dddb8d736c6577a92880f574dda0ffadd5fa728c4072e9415df6b2a26ef1b820d0d1af6c4c7feecca650ad4f675b393ed4e64f58c600dfccb4d762b9dd4645f5c9f39a0772016bf9aa02767d40386de4b5b07e3d3f3cf4a025e5eac7e8946bd4a2e5af7b8f75c6da1ef38545be8074be769ec8a9ec74c970dcff5371414d73a2d15d125cbc2d82be0674c4690cf3e4a66ff2ba2a72db29685883f68d0c0126f4bbfe940459b6e65d599ef6be33bb6e967d8ec6a4a6fb71ac68e0370870bbf9b344ada05197a7483938e6f15cea0cbd9a3902665bfd1fe6a90b5064a5473a00166adfef7894ef6568be8be7f926b56b81f5b1d1d12adec70830a3b43e8129faaab88cd199608907c5029666cc6700cd36051b59ce1ddc08d2bebc32ca74e59dbdf25079a9c8b3fead4bee8356b3d8d4a1b79d4b2bc2ec62aff701a346b54d7785dbc4b0af39fb87b92ee65884d4a36652c2facedffc13f350526ec14833010f12e62911bf214ff39fc58866ca7b4bcd65c01c15f6a8ff6e003eff403023c3fbeca022b5c254d2c5ed1726b8337d27f12577a6dd6018c24feeac2869c66df0abb2f1a419f0ede0667e34b5893b5d53d3e562571bd96c25206acc535378127f4e5dc7e09d2aa8a00a7f9770174e36f6672b8a97978a659e7baec5792c7eddbc04701e9dfea760846b55d58b7e57763df4e6f9c97d17d67d738115fbd737236a84aac9b1278c50d15c6415273a8d660b08d8ac08ca50b895e7799da4de41fc66eacc9cc3843b41d13db914a225d6988fb7655b088875c3412f26c52d18fef5640c43bd1be30e4b399b41439750a4dfa8fd142b896cd713d90afc26c8bcefd9db18442e507e3b3563cd2be147e3aee922aee50d68a552221a815196883ac5bc237c9e376f88626687cc1460dc4ea78b6d02d0d2ff8b7bc334af7ac489d09579c32dcb1911be5f6184cbe9e12295ba0edbd551736fe1493de2809c642f8d61dfc93886db01c2ab4f230f3f6e419911f8972db4fc909a89af7210d76eeaf1588bba9948789cf443a7f84c822389d22972b2526462d8b8617299ecb3d9dc188a589d22a0e58dcdd6debccacd201cba0ae291f0f2299065ce87d28db5545c3fab395fce5d765c6a520800cf10509ef1b85ea9f123df032f814b287a391989577d00a8a612454a811d6538b9eda2bd263fa460e5f1f58eed0ddd1231cbe4f7c5d1deca53b5a0fd22dd501b9e1d928d8513e097111d5f781e8c074e468bd82402689486d0913587026e0610b7cd3029defeae90d5242b829b4b5ed937c3161412f3f502e2ee9583aec5674aedce612d0eb538e015f0c5e7e1aa7364d52e48b27ac8bb1deecb7a852f028931825624cae9f8bd9d2ef892e0f87b9abd333e3eae71bce5f473dde7a252ff6c656f37fe172e6e808cd010ef560d1d15f7d6f8ba9d50301a1e6544188cd9a641e9182179530765ee3c828507f16739fbff2797108394dc8a30efb8d2c6bb1e6e825225356b9a6691a08b48e51de6dfe083bf94897d1dcf64631a1fb1cdaa8005a67e5fc497d0ddaaf59f9fdbc262578ad8c9cfe989e449aa390bbfb32d1b4def397656f31f853bece7a30fbe6b5deb6337953bb260cf818adb63ade0e3b3505d35075b3e0dfaaae84bfc3ba9be0cd5bf35478cfa5918d452aad482301e80d684ea1a7b5a66c8e29ce21", 0x1000, 0x80}], 0x1, &(0x7f0000001180)={[{@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@showexec}, {@dots}], [{@audit}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xee00}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, '.'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x62, 0x32, 0x32, 0x39, 0x64, 0x33, 0x38], 0x2d, [0x30, 0x62, 0x61, 0x37], 0x2d, [0x36, 0x63, 0x65, 0x3e], 0x2d, [0x65, 0x69, 0x39, 0x63], 0x2d, [0x39, 0x36, 0x65, 0x64, 0x37, 0x30, 0x32, 0x30]}}}]}) 12:18:18 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:18:18 executing program 4: ioprio_get$uid(0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r0) fstat(r0, &(0x7f0000000000)) 12:18:18 executing program 7: ioprio_get$uid(0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000014c0)={{{@in6=@initdev, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f00000015c0)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r3, 0x0, r3, 0x0, 0x0, r3, r3, r3, r4]) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r5, 0x0, r5, 0x0, 0x0, r5, r5, r5, r6]) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001c00)=@broute={'broute\x00', 0x20, 0x5, 0x5f6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001600], 0x0, &(0x7f0000001480), &(0x7f0000001600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x8, 0x8917, 'macsec0\x00', 'bridge0\x00', 'wlan0\x00', 'ip6tnl0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @multicast, [], 0xae, 0x116, 0x166, [@owner={{'owner\x00', 0x0, 0x18}, {{r1, r2, r4, r5, 0x2, 0x3}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}], @common=@log={'log\x00', 0x28, {{0x7f, "484dc1dc31679d6bdd11f4dc2ed0a875ecc52bc00a5ededfbcd965d2c2bb", 0xd}}}}, {0x9, 0x14, 0x0, 'syz_tun\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', 'vcan0\x00', @broadcast, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, [0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x1f, 0x2, {0x4}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x3, 0x14, 0x2, 'nr0\x00', 'veth1_to_bond\x00', 'vlan0\x00', 'macvlan1\x00', @empty, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0x101, 0xff, 0xff], 0x6e, 0xbe, 0x10e, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xffffff00, 'syz1\x00', {0x200}}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz1\x00', {0x401}}}}}]}, {0x0, '\x00', 0x3, 0x0, 0x2, [{0x9, 0x2, 0x8, 'team0\x00', 'geneve0\x00', 'veth0_to_batadv\x00', 'bridge_slave_0\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff], @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], 0xe6, 0xe6, 0x12e, [@mac={{'mac\x00', 0x0, 0x10}, {{@broadcast, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0xff, 0x2, 0x5c37, 0xab7e, 0x5, 0x2b, 0x1}}}], [], @common=@ERROR={'ERROR\x00', 0x20, {"c0910b27f9730d39d7f76a0634ed1ab39ba8e4bb78fbb41b3e5641bb9fd8"}}}, {0x5, 0x16, 0x88f5, 'wg0\x00', 'wg2\x00', 'ip6erspan0\x00', 'veth0_to_bond\x00', @random="2c156ea0057e", [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0xa6, 0xa6, 0xde, [@mac={{'mac\x00', 0x0, 0x10}, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x1}}}], [], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffe}]}, 0x66e) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) setresuid(0x0, r7, 0x0) r8 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x3, &(0x7f00000012c0)=[{&(0x7f00000001c0)="9691f576790a95f5b76bdd217d559c58f135431c352d0afb875540436b88bc69a196433ba83bf756b3a84600e60e9a228d75f744f247b3b69af665fa1043cd59993168ca6e7dce779b8f9e56812aa28b2e0f62", 0x53, 0x1}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="06aac9dedf9bd08528c89816137f492a078d82f47ccc03b6a34a63b59101af851e4b8937288ddeabcef828b72fac13621cc23f866a5a6f56fdbf6be1e14300e3a2abe9e0c2a1a1e8e59bd0d9f321955dd5b733f345b439647f26ec5feada0d5a68d56406b47d466bfa63", 0x6a}], 0xa00001, &(0x7f0000001340)={[{@dots}, {@dots}], [{@audit}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@obj_type={'obj_type', 0x3d, '])'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_eq={'euid', 0x3d, r7}}]}) accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000001400)=0x10) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@loopback, @in=@empty}}, {{@in6=@private0}}}, &(0x7f00000013c0)=0xe8) 12:18:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1000000) 12:18:18 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x6, 0x0, 0x0, 0x0) 12:18:18 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x300, 0x0, 0x0, 0x0) 12:18:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xd30a0000, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 2136.067022] loop1: detected capacity change from 0 to 256 [ 2136.085759] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2136.101855] loop7: detected capacity change from 0 to 8 [ 2136.112752] ramfs: Bad value for 'mode' 12:18:18 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 2136.131288] FAT-fs (loop7): Unrecognized mount option "audit" or missing value [ 2136.133211] ramfs: Bad value for 'mode' 12:18:18 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r2, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:18:18 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x7, 0x0, 0x0, 0x0) 12:18:18 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x348, 0x0, 0x0, 0x0) 12:18:18 executing program 3: ioprio_get$uid(0x3, 0xee00) 12:18:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xf6ffffff, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:18:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2000000) [ 2136.253647] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:18:18 executing program 7: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x0, r0) setfsuid(r0) 12:18:18 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 2136.364909] ramfs: Bad value for 'mode' 12:18:18 executing program 3: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0xf7, 0xca, 0xfa, 0x0, 0x7fffffff, 0xc028, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x67b4, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x8, 0x3, 0xceb, 0x2, 0x80000001, 0x8, 0x69db, 0x0, 0xfffffffa, 0x0, 0x40}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8) write$cgroup_type(0xffffffffffffffff, &(0x7f00000010c0), 0x9) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000000c0)={{r1}, "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"}) ioprio_get$uid(0x3, 0x0) [ 2136.382569] ramfs: Bad value for 'mode' 12:18:18 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x500, 0x0, 0x0, 0x0) 12:18:31 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x600, 0x0, 0x0, 0x0) 12:18:31 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:18:31 executing program 3: ioprio_get$uid(0x3, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800, 0x4, &(0x7f0000001380)=[{&(0x7f0000000080)="c2dc0dad7d5cc3292dfa61d23add49aef59f005c2a391ee595ef2c50bc3cdcbf0188483455351921194b9f560488b57300687114bba9cc2656e28d90fbd15ddb71fbd61c24c6ae7f15d85fafb99ffd5f3a695290596a6e2410008bd4ba6a626a2fa902c0fc520dc3576fae7726319b121105ba182651d06d861d827dc4ad14934da19843ea87370cc70ca8696ebd18f9f60750912aae139b76b2dd7dd1f9917b68e58d252ed8406638ef2e5745d15b165f7c006823d32175c98c4f78bb0727a9c5c862b6aeadc857fc62335a9fe389c2fcc078", 0xd3, 0x3}, {&(0x7f0000000180)="9a2a550c84f7c423be3547907aeedf93dd7048e2c4539abdf191dfdf106784df9473a9392b3c5b7d815b8bb8e0bb1e50030c5e0b826d5f1a9953204f6a437667c894b97ec40a403c7aa032c204f532d93c5e732d0ac2ff6799ccaba066cff80f7f095aad7f169ca913f36cf932b72f45cc534850b31a6d1f7c12d1a9c38f44c365cfc694600fc938cd7bdc55b1508d48042a5df57e8c0e67a8ac5bb99c3096d24b2da7a98a400e0764c67cc518504073999ec7d3e55fe704b7da3c5a9a2cf122db3c89f533109aaf3b8736c56d0dbb36b09a0ccabdff9b", 0xd7, 0x2}, {&(0x7f0000000280)="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", 0x1000, 0xc3}, {&(0x7f0000001280)="e24d70030f9315e342a13d38b1d9c6a16a27c452988781389174b1e0d0c35f533b7e28c2881a935fb7c8a49ab0075cdf6256b8143d4ff3b6187608a0b4cf3428796addccfd28de185fa45f1a80f51b71a0f6534b22b62223238f7fa62d6a1edeeb8515045d2f699f5a7eff5ec2940ba8a0d336b13ec474d359287c130517d4b4c531b8307699fbe71fc29316e7ff56cf11872aa0c681a4ae7eafefeb01e6e5bd02ba5c4e93e74d458b7caeb2e107ba520184894e0ab0fe968ed3ef3a37a79d000d0b0b26b60c4a59c36bb66400f871a188777d7d7c3dd063d01b91fe2b86b9560c0fd57cd285a61bd67ecb0ee8", 0xed, 0x4}], 0x10c0000, &(0x7f00000014c0)=ANY=[@ANYBLOB="7362736563746f723d3078303030303030303030303030303039332c736d61636b6673726f6f743d2d2c73756202f4bcb3548d129340923f2709be816a5f757365723d0d24252a2a2d5b2f215e2c7375626a5f726f6c653d002c736d61636b4673666c6f6f723d232c7365636c6162656c2c646f6e745f61707072616973652c686173682c00"]) r1 = accept(0xffffffffffffffff, &(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000001580)=0x80) r2 = syz_mount_image$vfat(&(0x7f0000002980), &(0x7f00000029c0)='./file0\x00', 0x1, 0x6, &(0x7f0000003cc0)=[{&(0x7f0000002a00)="9d753300382433a94cbf5a1bad4a7c471457952b4d7f3e0dd26216469d1f0627e932c29b73c8cfc2c795b9064b41e9d3f1304aa6fc197538a8f2d1b991d281f9d9123f112f1aaf09afd4086855a324b309a82e4c656c1e4760482f3110b7f394f44a8513dfe0b434eb7cad3c12cc43ee3eaf590b825a7f22b4861999c7d03f1b98559a7a5454e95650f4721f113b32bfe678748e76f7ace3d4bd6f232ff1477da047393fc55f63bbf98c3775ee6cfb7983a0cc466ebfee7647aa7c3193902febde52a12750c8e7511bb29fa20ec34ae70aa05f07e9879d6204e973", 0xdb, 0x50c}, {&(0x7f0000002b00)="942ef25c6e9bf417efe96272e3cd8d07330c3e87ea83130006ab51c3f2c45b2f0e0ad85adc6b05db9668e5b65cef3db7d6811c8f08290ccf41d88a6b1bc5", 0x3e, 0x9}, {&(0x7f0000002b40)="e3cd8934", 0x4}, {&(0x7f0000002b80)="25a0feb960a57fd433de0729ba3dadffc03e19f91f6292b938f8624d9dfb85a565930086f10bbc8486d3949098d375cd45e05d8523c4", 0x36, 0x1}, {&(0x7f0000002bc0)="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", 0x1000, 0x3ff}, {&(0x7f0000003bc0)="202ced4d5a9d3bbe0bdb1da35c396f8a631304500a725d81214249f869e2db8492812f23c0ccb3eaae5f2c186a7cff95c309e029cb6e8dc923a90676febaee61c773ffa6edfb96095fa1a1da5ddb2caf48236147cdd696fb1b27a73b8a47206e66779bb37e23d55b1c2537fbd5876deb04846301b8679f7e96797b29de94949426041e2716cd67219c2a01f1172de888315d2a4f1a1e6b8d8e6d0a1bb77b57c072de3b9a50a4fb9aae099f8b3439387bd26705a4843e5a83899bee9c525eda7670e095cc2b172fbb0b8d4e6c85cb3962f5fecaa6ae7b0b05e0bd93b7e174174ab89bbe046f80e8646eed054742", 0xed, 0x3f}], 0x1016, &(0x7f0000003d80)={[{@nonumtail}, {@shortname_win95}, {@shortname_win95}], [{@pcr={'pcr', 0x3d, 0xc}}, {@obj_user}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, 'iso9660\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'iso9660\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$&&&[:\\@'}}, {@uid_gt}, {@euid_lt}]}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005580)={0x0}, &(0x7f00000055c0)=0xc) fstat(r0, &(0x7f0000005640)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpid() r7 = getpid() kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000006a40)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000006b40)=0xe8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000003f00)={0x7, 'geneve0\x00', {0x7fffffff}, 0x26}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006b80), 0x800, 0x0) sendmsg$netlink(r1, &(0x7f0000006c80)={&(0x7f00000015c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc, &(0x7f00000069c0)=[{&(0x7f0000001600)={0x110, 0x19, 0x20, 0x70bd29, 0x25dfdbfe, "", [@generic="daf890c3101ea52df4ff0aaa7b632d5b0ee821cce7c188d03294402356c994537948df5e40126fa38d201a1a526df0aed75741360ce89db4617858587f903321833822329319bdc67549075938eee0d16440371eec5317dd736332dc7336ab8723a15c819eb99a9623ec89", @generic="4de87c2603d02e86c0a0239b9b17d27723dcc393b44889a125d0a0d32c17e76bceab0bd4a3", @generic="5f0444a2d23ded0123e6652e8d5bcc008933ed849d8677903f9e04018b54d81b7b8ea206ac07f3d6a20aefc297333a56b7caaf44b78f3c3a9b9cdff84e22bf49d953aae3e9572e5cb7fd7e9ef0b12c913c3100f3344b2802905cd2a88144041f44803c2e129885ca9c179dbf180d28"]}, 0x110}, {&(0x7f0000001740)={0x1240, 0x40, 0x100, 0x70bd27, 0x25dfdbff, "", [@typed={0xc, 0x4, 0x0, 0x0, @u64=0x1}, @typed={0xc, 0x49, 0x0, 0x0, @str='iso9660\x00'}, @typed={0x4, 0x42}, @nested={0x7e, 0x51, 0x0, 0x1, [@typed={0x8, 0x69, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="864e2815d8aac96f12f572306a03a319f665736031de34986dfc4d95aac5c82c166115668a6f2463dd077da2f0e7068f28dae4c128637157117e5195", @generic="37caa324cbf982755cc0b250354f9b17bf69a8fd45282881f081be7c6a086afa1e060b4304bf9aa48344e3a2b6fd", @typed={0x8, 0x52, 0x0, 0x0, @str=',$@\x00'}]}, @nested={0x1c, 0x74, 0x0, 0x1, [@typed={0xc, 0xe, 0x0, 0x0, @u64=0x7}, @generic="6d39dd46a98091cb68ff87c1"]}, @generic="b3351fd68096182fff44bc07b1d9bd79ac1a3098fdf4e5ae00f39a65a06283867b9eaf21067787781ce6236238016894403a0ad20516abdb793e1cec7eefdfd8cd18c8f7d6d1b5e056697f57311f6a4845fd289b12f6ccd498cb8465ac6928484e578f2d10c49e5bb17b71379b7f49ce939610c655cd25dee64b643993a97f48359aace461b591d0b86acf60f8d0143f40e4ba435ac5cc0a0351d92625c285931898484a017e5b9c8493e56d792bcbe8c8a58b1dd54fe22c46bdb1bb54cca6e56a445771fb8922ccd04865fd4d8f4c9357ce0d650fdaa9fcbeee613e6f95879dce19ace58ba9c556b32bc3af1b", @generic="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", @typed={0x8, 0x65, 0x0, 0x0, @ipv4=@remote}, @generic="f1784a6d17487043ec94e6b261fe8069e9b18b39fcc990f63b3b5508064aee508bd89febe4237c3c39106a8b901cc5455aaa22ae3bb59fa4e949730cc15057688452dec5d671b145ffc3d295ca171f070962557842bbd3b92ddaf4508addff0603d563ca3c79458c6c56bdcfbbd49ac9cba4b78ba8c46f5db48398ab1c81dfc284"]}, 0x1240}, {&(0x7f0000003e80)={0x28, 0x32, 0x800, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x2, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x5b, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x25, 0x0, 0x0, @pid}]}, 0x28}, {&(0x7f0000003ec0)={0x24, 0x19, 0x0, 0x70bd28, 0x25dfdbff, "", [@typed={0xc, 0x90, 0x0, 0x0, @str='iso9660\x00'}, @typed={0x8, 0x29, 0x0, 0x0, @uid}]}, 0x24}, {&(0x7f0000005600)={0x18, 0x30, 0x300, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x1d, 0x0, 0x0, @pid=r4}]}, 0x18}, {&(0x7f00000056c0)={0x12e0, 0x33, 0x800, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}, @generic="784c36c6eb08193557fa3d8a79bd119d50f3f9f873f2ca4ba4eaeebf7a0f8b8eb678ece41118ca82c73f70aa837928589cce510d4d9f085905477b5328dd74b74ea3277c97ad9635ad510d1431c4495cd9cb9f94de3f6c357f2d1e73ae0c1243a6537350865bf3e236eed6d6fcc80f70cc9cfd564e5bf7df221d2d58581943c9a9513f41d4af8ad4ef7ba485e975269ff09ab40fc397524a82c321596b69730cdb1c", @generic="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", @nested={0x1d9, 0xf, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @uid=r5}, @generic="2f840972526974824cf212ad2e0fad1bdbe24d0351d72796fadbb9e3cb3b4c5f4a0b27af34f9060f6456972e75df6c7508091ab9c3c0130d4c0c96ec85c64b2b2419bd65778e4e59e55a7096e91f9f", @generic="496b2e8f43b2b1ba050a9c656163cb2ba81533f41fc4739f5a066ed9086835cc007c31110cc240777f85472ac4cf9aa0cf9e3de18b8e638c942e8862ed21db3dbf858b058bd53a83d9d21b7d2eaa5c30f8c56449f74c91fc8d9d09f6c1a9a7900c6f21fa69f0047b110b1f82e564965bbb6c43b5917969f0733b5452251a4b17ef605be52c288b73ef6eae4d03cc7940b2127577c969dfa69187b4f31addc225345c0ef32319e8474af5", @generic="bc2d3b62642f28f4ddde18bc4532f27ae5eb9d6d81f3f9b0d218f1cd38f5f792dd7671b9d658c2520b05d243bc4707d5c18462d31acb0405c6679d724d90479e6e7fc6", @generic="148e7eb631faa22e5711", @generic="3bf3b6a367f362a7486c6ebc181ef56754133d8c8eaed4a9d87d71446ed8f4497210f157a88ee6f99d2b80308cc07ab11cedf8f762bd2733a22f26dbb6b42f5775c46521de00d7d99ba5b96221d057f1c7e0cee70756c8e5ce2510f268e519124a6c933cd5b2663f99a0249bf153d7b51031ff0f307758d6b5ae8b22b245f7d02d6cd801d0dbe0"]}, @generic="01fde5a8ea3365a24423fb6c7f1cb1cb903278bcc5415618832c375ab03c4419da1823f165ff234eae846be80a44801f652e144545c59e6ea07ef5568e865c718ab9fb4bdc7284b507"]}, 0x12e0}], 0x6, &(0x7f0000006c00)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, r9, 0xffffffffffffffff, r0, r10, 0xffffffffffffffff]}}], 0x48, 0x480}, 0x41) mknodat$loop(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x10, 0x1) 12:18:31 executing program 7: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioprio_get$uid(0x3, r0) 12:18:31 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x8, 0x0, 0x0, 0x0) 12:18:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x3000000) 12:18:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xffffe000, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:18:31 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 2149.477471] ramfs: Bad value for 'mode' [ 2149.488616] loop1: detected capacity change from 0 to 256 [ 2149.494587] ramfs: Bad value for 'mode' 12:18:31 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:18:31 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 2149.528637] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:18:31 executing program 7: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) ioprio_get$uid(0x3, r0) [ 2149.669494] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:18:46 executing program 7: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000080)=""/216, 0xd8}, {&(0x7f0000000180)=""/9, 0x9}, {&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000003c0)=""/102, 0x66}, {&(0x7f0000000440)=""/239, 0xef}], 0x6, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000740), 0x0, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000880)=""/178, 0xb2}], 0x1}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000a00)=""/81, 0x51}, {&(0x7f0000000a80)=""/129, 0x81}, {&(0x7f0000000b40)=""/150, 0x96}, {&(0x7f0000000c00)=""/241, 0xf1}, {&(0x7f0000000d00)=""/191, 0xbf}], 0x5, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}}], 0x4, 0x2020, &(0x7f0000000f80)={0x0, 0x3938700}) ioprio_get$uid(0x3, r0) 12:18:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xffffff7f, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:18:46 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:18:46 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc, 0x0, 0x0, 0x0) 12:18:46 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x700, 0x0, 0x0, 0x0) 12:18:46 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioprio_get$uid(0x0, r1) 12:18:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x4000000) 12:18:46 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x150, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 2164.629682] ramfs: Bad value for 'mode' [ 2164.644733] loop1: detected capacity change from 0 to 256 [ 2164.657124] ramfs: Bad value for 'mode' [ 2164.681299] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:18:46 executing program 7: ioprio_get$uid(0x3, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40000, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72773d3078303030303030303030303030346532342c61636365657273696f6e3d3970323030302e4c2c6c6f6f73652c667363616368652c63616368653d667363616368652c726f6f74636f6e746578743d726f6f742c646566636f6e746578743d73746166665f752c66f7a8836f776e65723e", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) 12:18:46 executing program 4: ioprio_get$uid(0x3, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x2, {0x2, {0x20, 0x0, 0x4}, 0x120, r0, 0x0, 0xfffffffffffffff9, 0xfffffffffffff000, 0x10001, 0xffffffff, 0x8, 0x4, 0x1000, 0x100000001, 0xde, 0x0, 0x9, 0x9, 0x4}}, 0xa0) 12:18:46 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x10, 0x0, 0x0, 0x0) 12:18:46 executing program 3: stat(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) symlink(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') setresuid(0x0, r1, 0x0) setresuid(r0, r1, r2) ioprio_get$uid(0x3, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) close(r3) r4 = geteuid() statx(0xffffffffffffff9c, 0x0, 0x6000, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r5, 0x0, r5, 0x0, 0x0, r5, r5, r5, r6]) fchown(r3, r4, r5) 12:18:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xffffff8c, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) 12:18:46 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) [ 2164.853254] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:18:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x5000000) 12:18:47 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc00, 0x0, 0x0, 0x0) [ 2164.918986] ramfs: Bad value for 'mode' [ 2164.947396] ramfs: Bad value for 'mode' 12:19:03 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xcc0, 0x0, 0x0, 0x0) 12:19:03 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x12, 0x0, 0x0, 0x0) 12:19:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x6000000) 12:19:03 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x700, 0x0, 0x0, 0x0) 12:19:03 executing program 7: modify_ldt$write2(0x11, &(0x7f0000000080)={0x80, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) ioprio_get$uid(0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) ioprio_set$uid(0x3, r0, 0x2000) modify_ldt$write2(0x11, &(0x7f0000000200)={0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) 12:19:03 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="f124163bfbaab69b7fb3a9093f1a54ee7c7a794d2dbef6e8e0c43f3ab8cc9d711b5d404a7201c23fac060a2ef2e74c154594ee43d0b1d6501e3fdd38c1f44836fe74de98ecdd3c614287d579b2e0299e7eadb6730a9c3e69f2339fca4bad8146c83756d91f9bf2779f7a949f8ea016b657a7135bf4a3dab3b58a82d0f8a2c63f9f3805db5dc5944c78290a28b62bd99f860f0c875e32dea583912f6571827955d734da", 0xa3, 0x140}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0xc615, 0x0, &(0x7f0000000480)={[0x80000000]}, 0x8) 12:19:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0xfffffff6, 0x0, 0x820, &(0x7f0000001480)={[{@mode}]}) [ 2181.296288] loop1: detected capacity change from 0 to 256 [ 2181.325853] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:19:03 executing program 3: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0xbe5dad65d28d6968, r0) 12:19:03 executing program 3: ioprio_get$uid(0x3, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x23, 0x4, 0x70bd26, 0x25dfdbfc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x240080c0}, 0x20000004) [ 2181.364425] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 2181.366130] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 2181.367193] CPU: 0 PID: 14524 Comm: syz-executor.7 Not tainted 5.16.0-rc5-next-20211217 #1 [ 2181.368349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2181.369938] RIP: 0010:set_task_ioprio+0x2de/0x6a0 [ 2181.370609] Code: 4c 8b ab 50 11 00 00 4d 85 ed 0f 84 9b 01 00 00 e8 97 c6 4d ff 49 8d 7d 0c 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 63 [ 2181.373279] RSP: 0018:ffff88804219fe90 EFLAGS: 00010213 [ 2181.374038] RAX: dffffc0000000000 RBX: ffff88803db2d040 RCX: ffffc9000ba34000 [ 2181.375035] RDX: 0000000000000001 RSI: ffffffff81f56989 RDI: 000000000000000c [ 2181.376038] RBP: 0000000000002000 R08: 0000000000000001 R09: ffffffff86a06817 [ 2181.377037] R10: fffffbfff0d40d02 R11: 0000000000000001 R12: 0000000000000000 [ 2181.378237] R13: 0000000000000000 R14: ffff88803db2d8c8 R15: ffff88803db2e190 [ 2181.379951] FS: 00007f1f897f9700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2181.381099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2181.381934] CR2: 00007fbd4c1f9f40 CR3: 0000000040ac4000 CR4: 0000000000350ef0 [ 2181.382937] Call Trace: [ 2181.383302] [ 2181.383614] __do_sys_ioprio_set+0x588/0xad0 [ 2181.384250] do_syscall_64+0x3b/0x90 [ 2181.384789] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2181.385518] RIP: 0033:0x7f1f8c283b19 [ 2181.386052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2181.388639] RSP: 002b:00007f1f897f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 2181.389730] RAX: ffffffffffffffda RBX: 00007f1f8c396f60 RCX: 00007f1f8c283b19 [ 2181.390752] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2181.391756] RBP: 00007f1f8c2ddf6d R08: 0000000000000000 R09: 0000000000000000 [ 2181.392752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2181.393755] R13: 00007fff6b41526f R14: 00007f1f897f9300 R15: 0000000000022000 [ 2181.394822] [ 2181.395155] Modules linked in: [ 2181.396310] ---[ end trace 0000000000000000 ]--- [ 2181.396969] RIP: 0010:set_task_ioprio+0x2de/0x6a0 [ 2181.397689] Code: 4c 8b ab 50 11 00 00 4d 85 ed 0f 84 9b 01 00 00 e8 97 c6 4d ff 49 8d 7d 0c 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 63 [ 2181.400301] RSP: 0018:ffff88804219fe90 EFLAGS: 00010213 [ 2181.401070] RAX: dffffc0000000000 RBX: ffff88803db2d040 RCX: ffffc9000ba34000 [ 2181.402106] RDX: 0000000000000001 RSI: ffffffff81f56989 RDI: 000000000000000c [ 2181.403128] RBP: 0000000000002000 R08: 0000000000000001 R09: ffffffff86a06817 [ 2181.404163] R10: fffffbfff0d40d02 R11: 0000000000000001 R12: 0000000000000000 [ 2181.405192] R13: 0000000000000000 R14: ffff88803db2d8c8 R15: ffff88803db2e190 [ 2181.406237] FS: 00007f1f897f9700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2181.407430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2181.408295] CR2: 00007fbd4c1f9f40 CR3: 0000000040ac4000 CR4: 0000000000350ef0 [ 2181.409309] note: syz-executor.7[14524] exited with preempt_count 1 [ 2181.410227] BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49 [ 2181.411477] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 14524, name: syz-executor.7 [ 2181.412693] preempt_count: 0, expected: 0 [ 2181.413283] RCU nest depth: 1, expected: 0 [ 2181.413881] INFO: lockdep is turned off. [ 2181.414478] CPU: 0 PID: 14524 Comm: syz-executor.7 Tainted: G D 5.16.0-rc5-next-20211217 #1 [ 2181.415814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2181.417394] Call Trace: [ 2181.417760] [ 2181.418071] dump_stack_lvl+0x8b/0xb3 [ 2181.418614] __might_resched.cold+0x222/0x26b [ 2181.419260] exit_signals+0x21/0x8e0 [ 2181.419783] do_exit+0x618/0x2960 [ 2181.420273] ? set_task_ioprio+0x2de/0x6a0 [ 2181.420854] ? mm_update_next_owner+0x7d0/0x7d0 [ 2181.421499] rewind_stack_do_exit+0x17/0x17 [ 2181.422110] RIP: 0033:0x7f1f8c283b19 [ 2181.422626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2181.425184] RSP: 002b:00007f1f897f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 2181.426241] RAX: ffffffffffffffda RBX: 00007f1f8c396f60 RCX: 00007f1f8c283b19 [ 2181.427231] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2181.428223] RBP: 00007f1f8c2ddf6d R08: 0000000000000000 R09: 0000000000000000 [ 2181.429215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2181.430217] R13: 00007fff6b41526f R14: 00007f1f897f9300 R15: 0000000000022000 [ 2181.431198] [ 2181.439613] ramfs: Bad value for 'mode' 12:19:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0xc82, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x7000000) 12:19:03 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x10, 0x0, 0x0, 0x0) 12:19:03 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0x67db, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1b8c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25b8, 0x1200, 0x0, 0x0, 0x0) [ 2181.494647] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:19:03 executing program 3: ioprio_get$uid(0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setfsuid(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x3}, [{0x2, 0x1, r0}, {0x2, 0x1, r0}, {0x2, 0x2, r2}], {}, [{0x8, 0x1, r1}, {0x8, 0x3, r3}, {0x8, 0x5, r1}], {}, {0x20, 0x6}}, 0x54, 0x2) VM DIAGNOSIS: 12:19:03 Registers: info registers vcpu 0 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8236a471 RDI=ffffffff87389ac0 RBP=ffffffff87389a80 RSP=ffff88804219f880 R8 =0000000000000000 R9 =000000000000003a R10=ffffffff8236c0b3 R11=000000000000000a R12=000000000000003a R13=000000000000003a R14=ffffffff87389a80 R15=dffffc0000000000 RIP=ffffffff8236a4c8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1f897f9700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0050 ffff88803b9c3000 00000407 00008200 DPL=0 LDT TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbd4c1f9f40 CR3=0000000040ac4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f1f8c36a7c0 00007f1f8c36a7c8 YMM02=0000000000000000 0000000000000000 00007f1f8c36a7e0 00007f1f8c36a7c0 YMM03=0000000000000000 0000000000000000 00007f1f8c36a7c8 00007f1f8c36a7c0 YMM04=0000000000000000 0000000000000000 ff00000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=1ffff11002dbeedc RBX=0000000000000007 RCX=0000000000000001 RDX=0000000000092cc0 RSI=000000000000000e RDI=ffff888016df76e0 RBP=dffffc0000000000 RSP=ffff888016df7628 R8 =0000000000000000 R9 =ffffffff858bf057 R10=0000000000000000 R11=0000000000000001 R12=000000000000000e R13=0000000000092cc0 R14=ffff888016df76a8 R15=0000000000092cc0 RIP=ffffffff81327236 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff1b43478c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff1b48c9650 CR3=000000000ca4e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffff00 ffff0000000000ff YMM02=0000000000000000 0000000000000000 0000000000000021 00007ff1b5bcfe00 YMM03=0000000000000000 0000000000000000 7269762f73656369 7665642f7379732f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 00000003ffffffff 00007ff1b5bdb7e0 YMM06=0000000000000000 0000000000000000 00007ff1b5bd30b0 0000000800000006 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 6e753c0073257325 75253a5d73255b00 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000