fffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}], 0x3, 0x20000000, &(0x7f0000002c80)={0x0, 0x989680}) fcntl$getflags(r1, 0x401) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendfile(r2, r0, &(0x7f0000000140)=0x8001, 0x100000001) 08:44:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:44:28 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x0) 08:44:28 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x400000000000000) [ 956.783753] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 956.796611] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 956.797866] FAULT_INJECTION: forcing a failure. [ 956.797866] name failslab, interval 1, probability 0, space 0, times 0 [ 956.799502] CPU: 1 PID: 7013 Comm: syz-executor.0 Not tainted 5.16.0-rc6-next-20211222 #1 [ 956.800576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 956.802085] Call Trace: [ 956.802429] [ 956.802728] dump_stack_lvl+0x8b/0xb3 [ 956.803265] should_fail.cold+0x5/0xa [ 956.803792] ? create_object.isra.0+0x3a/0xa20 [ 956.804424] should_failslab+0x5/0x10 [ 956.804929] kmem_cache_alloc+0x5b/0x480 [ 956.805539] create_object.isra.0+0x3a/0xa20 [ 956.806137] ? kasan_unpoison+0x23/0x50 [ 956.806696] __kmalloc_track_caller+0x25e/0x420 [ 956.807336] ? __tun_chr_ioctl+0x3329/0x3f10 [ 956.807976] memdup_user+0x22/0xc0 [ 956.808473] __tun_chr_ioctl+0x3329/0x3f10 [ 956.809053] ? selinux_file_ioctl+0x10f/0x5d0 [ 956.809687] ? lock_downgrade+0x6d0/0x6d0 [ 956.810252] ? tun_chr_read_iter+0x260/0x260 [ 956.810922] ? lock_is_held_type+0xd7/0x130 [ 956.811580] ? __x64_sys_ioctl+0x97/0x210 [ 956.812157] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 956.812955] ? tun_chr_compat_ioctl+0x30/0x30 [ 956.813633] __x64_sys_ioctl+0x196/0x210 [ 956.814199] do_syscall_64+0x3b/0x90 [ 956.814726] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 956.815469] RIP: 0033:0x7fb7981c1b19 [ 956.815995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 956.818566] RSP: 002b:00007fb795737188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 956.819662] RAX: ffffffffffffffda RBX: 00007fb7982d4f60 RCX: 00007fb7981c1b19 [ 956.820594] RDX: 00000000200000c0 RSI: 00000000400454d1 RDI: 0000000000000003 [ 956.821528] RBP: 00007fb7957371d0 R08: 0000000000000000 R09: 0000000000000000 [ 956.822475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.823459] R13: 00007ffc92e981cf R14: 00007fb795737300 R15: 0000000000022000 [ 956.824449] [ 956.828842] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 956.849225] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/121/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:44:28 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe1b, 0x0, 0x0) 08:44:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) 08:44:28 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) (fail_nth: 4) 08:44:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xdfa, 0x0, 0x0) 08:44:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) [ 956.980410] loop4: detected capacity change from 0 to 140 [ 956.989316] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 957.015669] FAULT_INJECTION: forcing a failure. [ 957.015669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.017622] CPU: 0 PID: 7032 Comm: syz-executor.0 Not tainted 5.16.0-rc6-next-20211222 #1 [ 957.018944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 957.020713] Call Trace: [ 957.021064] [ 957.021388] dump_stack_lvl+0x8b/0xb3 [ 957.022074] should_fail.cold+0x5/0xa [ 957.022616] _copy_from_user+0x2e/0x170 [ 957.023205] memdup_user+0x69/0xc0 [ 957.023674] __tun_chr_ioctl+0x3329/0x3f10 [ 957.024207] ? selinux_file_ioctl+0x10f/0x5d0 [ 957.024770] ? lock_downgrade+0x6d0/0x6d0 [ 957.025296] ? tun_chr_read_iter+0x260/0x260 [ 957.026053] ? lock_is_held_type+0xd7/0x130 [ 957.026861] ? __x64_sys_ioctl+0x97/0x210 [ 957.027454] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 957.028223] ? tun_chr_compat_ioctl+0x30/0x30 [ 957.028822] __x64_sys_ioctl+0x196/0x210 08:44:28 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x0) 08:44:28 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x500000000000000) [ 957.029374] do_syscall_64+0x3b/0x90 [ 957.030224] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 957.030957] RIP: 0033:0x7fb7981c1b19 [ 957.031472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 957.034102] RSP: 002b:00007fb795737188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 957.035113] RAX: ffffffffffffffda RBX: 00007fb7982d4f60 RCX: 00007fb7981c1b19 [ 957.036060] RDX: 00000000200000c0 RSI: 00000000400454d1 RDI: 0000000000000003 [ 957.037022] RBP: 00007fb7957371d0 R08: 0000000000000000 R09: 0000000000000000 [ 957.038003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.038974] R13: 00007ffc92e981cf R14: 00007fb795737300 R15: 0000000000022000 [ 957.040016] [ 957.091102] loop6: detected capacity change from 0 to 140 [ 957.113239] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 957.118099] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 957.129587] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/122/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:44:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe24, 0x0, 0x0) 08:44:43 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x600000000000000) 08:44:43 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x0) 08:44:43 executing program 3: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x300000000000000) [ 971.675703] loop6: detected capacity change from 0 to 140 08:44:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:44:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) 08:44:43 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) (fail_nth: 5) 08:44:43 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x1000, 0x40) close(r0) [ 971.710635] FAULT_INJECTION: forcing a failure. [ 971.710635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 971.711938] CPU: 0 PID: 7061 Comm: syz-executor.0 Not tainted 5.16.0-rc6-next-20211222 #1 [ 971.712780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 971.713991] Call Trace: [ 971.714265] [ 971.714495] dump_stack_lvl+0x8b/0xb3 [ 971.714907] should_fail.cold+0x5/0xa [ 971.715320] _copy_to_user+0x2e/0x150 [ 971.715732] simple_read_from_buffer+0xcc/0x160 [ 971.716220] proc_fail_nth_read+0x194/0x220 [ 971.716679] ? proc_fault_inject_read+0x230/0x230 [ 971.717191] ? security_file_permission+0xb1/0xd0 [ 971.717716] ? proc_fault_inject_read+0x230/0x230 [ 971.718242] vfs_read+0x1b6/0x5f0 [ 971.718608] ksys_read+0x12d/0x250 [ 971.718989] ? __ia32_sys_pwrite64+0x230/0x230 [ 971.719474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 971.720025] do_syscall_64+0x3b/0x90 [ 971.720413] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 971.720946] RIP: 0033:0x7fb79817469c [ 971.721330] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 971.723263] RSP: 002b:00007fb795737170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 971.724055] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb79817469c [ 971.724791] RDX: 000000000000000f RSI: 00007fb7957371e0 RDI: 0000000000000004 [ 971.725539] RBP: 00007fb7957371d0 R08: 0000000000000000 R09: 0000000000000000 [ 971.726304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.727047] R13: 00007ffc92e981cf R14: 00007fb795737300 R15: 0000000000022000 [ 971.727808] [ 971.728473] loop4: detected capacity change from 0 to 140 [ 971.731557] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 971.731715] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 971.743049] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 971.750189] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/123/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:44:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) 08:44:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe27, 0x0, 0x0) 08:44:43 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x700000000000000) 08:44:43 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 08:44:43 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x0) 08:44:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:44:43 executing program 2: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) [ 971.871194] loop3: detected capacity change from 0 to 140 [ 971.895050] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 971.905331] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 971.907484] loop4: detected capacity change from 0 to 140 [ 971.908786] loop6: detected capacity change from 0 to 140 [ 971.920947] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 971.924145] EXT4-fs error (device loop3): ext4_readdir:258: inode #2: block 4: comm syz-executor.3: path /syzkaller-testdir210803361/syzkaller.oOOyrd/106/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 971.972536] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 971.995622] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 971.999039] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/124/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:44:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe2a, 0x0, 0x0) 08:44:59 executing program 3: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x600000000000000) 08:44:59 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x1000, 0x40) close(r0) 08:44:59 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 987.695815] loop6: detected capacity change from 0 to 140 [ 987.715522] loop4: detected capacity change from 0 to 140 [ 987.728510] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:44:59 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:44:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:44:59 executing program 2: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) 08:44:59 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsopen(&(0x7f00000000c0)='dax\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='+#\x00', &(0x7f0000000140)=')\xff\x00', 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 987.743248] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 987.746824] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 987.763453] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/125/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:44:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe2d, 0x0, 0x0) 08:44:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:44:59 executing program 2: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) [ 987.939404] loop4: detected capacity change from 0 to 140 08:44:59 executing program 3: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(0x0, 0x0, r1) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r2, r2, r2, 0x0, 0x0, r2, r2, r2, r3]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r4, r4, r4, 0x0, 0x0, r4, r4, r4, r5]) setgroups(0x7, &(0x7f0000000000)=[r1, 0xffffffffffffffff, r3, r5, r1, r1, r0]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) setreuid(0x0, 0xee01) setresgid(0xffffffffffffffff, 0x0, 0x0) setregid(r6, 0x0) 08:44:59 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x2, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:44:59 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 987.993796] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 988.024063] loop6: detected capacity change from 0 to 140 [ 988.043469] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 988.054400] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 988.064139] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/126/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:45:14 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x1000, 0x40) close(r0) 08:45:14 executing program 3: finit_module(0xffffffffffffffff, &(0x7f0000000080)='!*)\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = dup(r1) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{}, {}]}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000400)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r2) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002dbd7000fcdbdf2504000000080002000500000008000300070000000800020003000000080003000500030014000180060001000a000000080007000ae530cc59c51fc901641e6bd660134e50c072b6477609301184c9bd4c3914208a1ea7c0377da56692d78555fb704f88126c72b39a111e4dcbf5ab57a356f7a64b", @ANYRES32=r8, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) finit_module(r3, 0x0, 0x0) writev(r3, &(0x7f0000000940)=[{&(0x7f00000000c0)="b11df205d58165bda85f28b09495bd09c840a0fe61b775d6101c76a5b653ac9fc746773eea0376a64a5e7e07a394ea0f91a40fef2d7d495133adfb7a4cf374dbca2270c1d83c233abfe38e14213a5f9a70957ccc7af0c5b0614cdf8fb1f092095ade9cff0541cfb3369500"/117, 0x75}, {&(0x7f0000000140)="a0ef1b07a6ca6917330fbbc4016dd34f7adee2e21f1c63c76381ed887f876753b2459dbb596793f0af8f8bb3b4b9ae2a5a386b5f2c2b1d473afe0334f9382bcb840a3d1d3b027cf38002c03e740cf3da7610fecef0396358d71c7d8f683cf65f92bc251b4f94376df349ca601f6beade9e98542c442a0069ff58bbedb22c15aa06e36d4a8bb4299ca5d5e4b5e680c9d212c7640c0472aaf2f111517963ee4473c96dc4423adcf635ddd0a69f45f306600d2d38bf100a36edd49985a08ec4067823fc4d", 0xc3}, {&(0x7f0000000240)="b2e4c6e3fd0cbe71816ad81b235f534eedf24cc7936fc6842ac20dfb7415fd07651064aa92599f787b515c1c5fec7ebba7ef4311eefe92c4af1dcd3350ddcc5f601f0c7ae274006a7d093f9ccfbf2a2782940ddb45a00ea5970ef41ff0317dd503e78b63aa1ccd7e122b35", 0x6b}, {&(0x7f00000002c0)="fb2a8095ffd6ae6b754b39507f38bde4e573f222bda2a2970a84ebef421bef07b7b213bfbc078056e5a574c85f6ef2cf97ef21e9de5dcc539c2c9d4f19293758eb93c02dca209516c4c552fa44f04a02f8f4719ddcebcb163fbf", 0x5a}, {&(0x7f00000005c0)="6c31a43cb31fc296728a21e44edc00b2eb92b69413ada5e71be4a6468349f34d0ee9abe98981db0b24ab71ccdb68ab1f6c08963a3dd8ce9564afca15217a18", 0x3f}, {&(0x7f0000000600)="218ece79b14a916a8676f89087a0bc09eaae60c49e103fcd69f02b42d32135ac08abbb10", 0x24}, {&(0x7f0000000640)="a9f311154e", 0x5}, {&(0x7f0000000680)="c1163f2b5b6e35bb4fd801096af97c4c3bf371b66ef1c41b690ff24abbb1b73b161cb39f024db77d5f6fb56556e81f068d202e3ead3f0ac5228eaae2a04d8ad0e86bd7b4a4719b5eccc12ac8026fcac63ec310f128ff7155ce9fc984b3e30b0b0f5e7c7cd6f0163b1be6124718da4cd5b2b70b84b142deb9db1cb304a3cc6fd41444fb531e7aaf21ca797f00259e29b66225208fe416e9cf4b38f844a1e9987d8a6da7b8a79fc556b1ff2ed8295311b0ba83eff76c84c165ab4de33de2dcaf7329384021f77524d685cadcb7b9074473984d", 0xd2}, {&(0x7f0000000b00)="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", 0x154}, {&(0x7f0000000a00)="3c062f8c0f6c3ca589d5a99ac630d943442ffc6e7c2acce5246c03c9fe38e2820e2a5447dd3186aef35336283b6091f14f309d2c63bf27f6aafc25c78d461c22a99fdb6dce5538d85e91489cfc6619349a06e9650a418c8be99bd8c520a803093d680aea9d2672ee66106a375cb90ced2d7e4464f67a009012502b9fe3407c8fe1bb5e2109fe3ad09408ffb4a028ec1929926170667cfc12aa6a71c94fc395c8c13ccc0ff945ae94b78570ff1720ed4b1beb1e56d8d5e5c63f479e1f11fa5450d6c449ca303fa28de1b3dd5036b34999909cc74538c2a11794902fd654b1a1ce2b01fc9282edd9a3d2615e68f0d4631bdf0e15c19162d550e2", 0xf9}], 0xa) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000000)={0xd, 0x80000001}) 08:45:14 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) 08:45:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:45:14 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe30, 0x0, 0x0) 08:45:14 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 08:45:14 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x22c40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x1, 0x3, 0x1, 0x0, 0x4, [{0x3, 0x5, 0x0, '\x00', 0x5d90}, {0x6, 0xfffffffffffffff9, 0x8, '\x00', 0x1008}, {0x8, 0xc4, 0xfffffffffffffffe, '\x00', 0x10a}, {0x5, 0x2, 0x4, '\x00', 0x6c22668c78a736dd}]}) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000000c0)='lazytime\x00', 0x0, 0x0) 08:45:14 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1002.637525] loop4: detected capacity change from 0 to 140 [ 1002.640096] loop6: detected capacity change from 0 to 140 [ 1002.657644] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1002.668435] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1002.674515] audit: type=1400 audit(1640249114.504:17): avc: denied { module_load } for pid=7151 comm="syz-executor.3" path="/sys/power/pm_wakeup_irq" dev="sysfs" ino=108 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=system permissive=1 [ 1002.700119] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1002.709787] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 08:45:14 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) 08:45:14 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe51, 0x0, 0x0) 08:45:14 executing program 3: finit_module(0xffffffffffffffff, &(0x7f0000000080)='!*)\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = dup(r1) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{}, {}]}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000400)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r2) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002dbd7000fcdbdf2504000000080002000500000008000300070000000800020003000000080003000500030014000180060001000a000000080007000ae530cc59c51fc901641e6bd660134e50c072b6477609301184c9bd4c3914208a1ea7c0377da56692d78555fb704f88126c72b39a111e4dcbf5ab57a356f7a64b", @ANYRES32=r8, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) finit_module(r3, 0x0, 0x0) writev(r3, &(0x7f0000000940)=[{&(0x7f00000000c0)="b11df205d58165bda85f28b09495bd09c840a0fe61b775d6101c76a5b653ac9fc746773eea0376a64a5e7e07a394ea0f91a40fef2d7d495133adfb7a4cf374dbca2270c1d83c233abfe38e14213a5f9a70957ccc7af0c5b0614cdf8fb1f092095ade9cff0541cfb3369500"/117, 0x75}, {&(0x7f0000000140)="a0ef1b07a6ca6917330fbbc4016dd34f7adee2e21f1c63c76381ed887f876753b2459dbb596793f0af8f8bb3b4b9ae2a5a386b5f2c2b1d473afe0334f9382bcb840a3d1d3b027cf38002c03e740cf3da7610fecef0396358d71c7d8f683cf65f92bc251b4f94376df349ca601f6beade9e98542c442a0069ff58bbedb22c15aa06e36d4a8bb4299ca5d5e4b5e680c9d212c7640c0472aaf2f111517963ee4473c96dc4423adcf635ddd0a69f45f306600d2d38bf100a36edd49985a08ec4067823fc4d", 0xc3}, {&(0x7f0000000240)="b2e4c6e3fd0cbe71816ad81b235f534eedf24cc7936fc6842ac20dfb7415fd07651064aa92599f787b515c1c5fec7ebba7ef4311eefe92c4af1dcd3350ddcc5f601f0c7ae274006a7d093f9ccfbf2a2782940ddb45a00ea5970ef41ff0317dd503e78b63aa1ccd7e122b35", 0x6b}, {&(0x7f00000002c0)="fb2a8095ffd6ae6b754b39507f38bde4e573f222bda2a2970a84ebef421bef07b7b213bfbc078056e5a574c85f6ef2cf97ef21e9de5dcc539c2c9d4f19293758eb93c02dca209516c4c552fa44f04a02f8f4719ddcebcb163fbf", 0x5a}, {&(0x7f00000005c0)="6c31a43cb31fc296728a21e44edc00b2eb92b69413ada5e71be4a6468349f34d0ee9abe98981db0b24ab71ccdb68ab1f6c08963a3dd8ce9564afca15217a18", 0x3f}, {&(0x7f0000000600)="218ece79b14a916a8676f89087a0bc09eaae60c49e103fcd69f02b42d32135ac08abbb10", 0x24}, {&(0x7f0000000640)="a9f311154e", 0x5}, {&(0x7f0000000680)="c1163f2b5b6e35bb4fd801096af97c4c3bf371b66ef1c41b690ff24abbb1b73b161cb39f024db77d5f6fb56556e81f068d202e3ead3f0ac5228eaae2a04d8ad0e86bd7b4a4719b5eccc12ac8026fcac63ec310f128ff7155ce9fc984b3e30b0b0f5e7c7cd6f0163b1be6124718da4cd5b2b70b84b142deb9db1cb304a3cc6fd41444fb531e7aaf21ca797f00259e29b66225208fe416e9cf4b38f844a1e9987d8a6da7b8a79fc556b1ff2ed8295311b0ba83eff76c84c165ab4de33de2dcaf7329384021f77524d685cadcb7b9074473984d", 0xd2}, {&(0x7f0000000b00)="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", 0x154}, {&(0x7f0000000a00)="3c062f8c0f6c3ca589d5a99ac630d943442ffc6e7c2acce5246c03c9fe38e2820e2a5447dd3186aef35336283b6091f14f309d2c63bf27f6aafc25c78d461c22a99fdb6dce5538d85e91489cfc6619349a06e9650a418c8be99bd8c520a803093d680aea9d2672ee66106a375cb90ced2d7e4464f67a009012502b9fe3407c8fe1bb5e2109fe3ad09408ffb4a028ec1929926170667cfc12aa6a71c94fc395c8c13ccc0ff945ae94b78570ff1720ed4b1beb1e56d8d5e5c63f479e1f11fa5450d6c449ca303fa28de1b3dd5036b34999909cc74538c2a11794902fd654b1a1ce2b01fc9282edd9a3d2615e68f0d4631bdf0e15c19162d550e2", 0xf9}], 0xa) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000000)={0xd, 0x80000001}) 08:45:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:45:14 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 08:45:14 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b49, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:45:14 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) 08:45:14 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe5a, 0x0, 0x0) [ 1002.840115] loop4: detected capacity change from 0 to 140 [ 1002.844063] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1002.869373] loop6: detected capacity change from 0 to 140 [ 1002.893106] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1002.910819] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1002.923589] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 08:45:30 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x100000, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file1\x00'}) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000000c0)='rw\x00', 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) 08:45:30 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 08:45:30 executing program 3: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x22c40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x1, 0x3, 0x1, 0x0, 0x4, [{0x3, 0x5, 0x0, '\x00', 0x5d90}, {0x6, 0xfffffffffffffff9, 0x8, '\x00', 0x1008}, {0x8, 0xc4, 0xfffffffffffffffe, '\x00', 0x10a}, {0x5, 0x2, 0x4, '\x00', 0x6c22668c78a736dd}]}) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000000c0)='lazytime\x00', 0x0, 0x0) 08:45:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000", 0x1d, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:45:30 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe5d, 0x0, 0x0) 08:45:30 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) 08:45:30 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x1000, 0x40) close(r0) 08:45:30 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x541b, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1018.799606] loop6: detected capacity change from 0 to 140 [ 1018.804057] loop4: detected capacity change from 0 to 140 [ 1018.833263] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1018.840123] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 08:45:30 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe60, 0x0, 0x0) [ 1018.880864] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:45:30 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) 08:45:30 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5421, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1018.907908] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 08:45:30 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) fsmount(r1, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:45:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000", 0x1d, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:45:30 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe63, 0x0, 0x0) 08:45:30 executing program 3: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x100000, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file1\x00'}) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000000c0)='rw\x00', 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) 08:45:30 executing program 6: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x541b, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1019.094609] loop4: detected capacity change from 0 to 140 08:45:30 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) 08:45:30 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1019.121806] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 08:45:31 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe66, 0x0, 0x0) 08:45:31 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5450, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1032.970106] loop4: detected capacity change from 0 to 140 08:45:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000", 0x1d, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:45:44 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) close(r0) 08:45:44 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5451, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:45:44 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe87, 0x0, 0x0) 08:45:44 executing program 6: finit_module(0xffffffffffffffff, &(0x7f0000000080)='!*)\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = dup(r1) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{}, {}]}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000400)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r2) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002dbd7000fcdbdf2504000000080002000500000008000300070000000800020003000000080003000500030014000180060001000a000000080007000ae530cc59c51fc901641e6bd660134e50c072b6477609301184c9bd4c3914208a1ea7c0377da56692d78555fb704f88126c72b39a111e4dcbf5ab57a356f7a64b", @ANYRES32=r8, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) finit_module(r3, 0x0, 0x0) writev(r3, &(0x7f0000000940)=[{&(0x7f00000000c0)="b11df205d58165bda85f28b09495bd09c840a0fe61b775d6101c76a5b653ac9fc746773eea0376a64a5e7e07a394ea0f91a40fef2d7d495133adfb7a4cf374dbca2270c1d83c233abfe38e14213a5f9a70957ccc7af0c5b0614cdf8fb1f092095ade9cff0541cfb3369500"/117, 0x75}, {&(0x7f0000000140)="a0ef1b07a6ca6917330fbbc4016dd34f7adee2e21f1c63c76381ed887f876753b2459dbb596793f0af8f8bb3b4b9ae2a5a386b5f2c2b1d473afe0334f9382bcb840a3d1d3b027cf38002c03e740cf3da7610fecef0396358d71c7d8f683cf65f92bc251b4f94376df349ca601f6beade9e98542c442a0069ff58bbedb22c15aa06e36d4a8bb4299ca5d5e4b5e680c9d212c7640c0472aaf2f111517963ee4473c96dc4423adcf635ddd0a69f45f306600d2d38bf100a36edd49985a08ec4067823fc4d", 0xc3}, {&(0x7f0000000240)="b2e4c6e3fd0cbe71816ad81b235f534eedf24cc7936fc6842ac20dfb7415fd07651064aa92599f787b515c1c5fec7ebba7ef4311eefe92c4af1dcd3350ddcc5f601f0c7ae274006a7d093f9ccfbf2a2782940ddb45a00ea5970ef41ff0317dd503e78b63aa1ccd7e122b35", 0x6b}, {&(0x7f00000002c0)="fb2a8095ffd6ae6b754b39507f38bde4e573f222bda2a2970a84ebef421bef07b7b213bfbc078056e5a574c85f6ef2cf97ef21e9de5dcc539c2c9d4f19293758eb93c02dca209516c4c552fa44f04a02f8f4719ddcebcb163fbf", 0x5a}, {&(0x7f00000005c0)="6c31a43cb31fc296728a21e44edc00b2eb92b69413ada5e71be4a6468349f34d0ee9abe98981db0b24ab71ccdb68ab1f6c08963a3dd8ce9564afca15217a18", 0x3f}, {&(0x7f0000000600)="218ece79b14a916a8676f89087a0bc09eaae60c49e103fcd69f02b42d32135ac08abbb10", 0x24}, {&(0x7f0000000640)="a9f311154e", 0x5}, {&(0x7f0000000680)="c1163f2b5b6e35bb4fd801096af97c4c3bf371b66ef1c41b690ff24abbb1b73b161cb39f024db77d5f6fb56556e81f068d202e3ead3f0ac5228eaae2a04d8ad0e86bd7b4a4719b5eccc12ac8026fcac63ec310f128ff7155ce9fc984b3e30b0b0f5e7c7cd6f0163b1be6124718da4cd5b2b70b84b142deb9db1cb304a3cc6fd41444fb531e7aaf21ca797f00259e29b66225208fe416e9cf4b38f844a1e9987d8a6da7b8a79fc556b1ff2ed8295311b0ba83eff76c84c165ab4de33de2dcaf7329384021f77524d685cadcb7b9074473984d", 0xd2}, {&(0x7f0000000b00)="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", 0x154}, {&(0x7f0000000a00)="3c062f8c0f6c3ca589d5a99ac630d943442ffc6e7c2acce5246c03c9fe38e2820e2a5447dd3186aef35336283b6091f14f309d2c63bf27f6aafc25c78d461c22a99fdb6dce5538d85e91489cfc6619349a06e9650a418c8be99bd8c520a803093d680aea9d2672ee66106a375cb90ced2d7e4464f67a009012502b9fe3407c8fe1bb5e2109fe3ad09408ffb4a028ec1929926170667cfc12aa6a71c94fc395c8c13ccc0ff945ae94b78570ff1720ed4b1beb1e56d8d5e5c63f479e1f11fa5450d6c449ca303fa28de1b3dd5036b34999909cc74538c2a11794902fd654b1a1ce2b01fc9282edd9a3d2615e68f0d4631bdf0e15c19162d550e2", 0xf9}], 0xa) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000000)={0xd, 0x80000001}) 08:45:44 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) 08:45:44 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:45:44 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='posixacl\x00', 0x0, 0x0) [ 1032.990708] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 08:45:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000", 0x2c, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:45:44 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe90, 0x0, 0x0) 08:45:44 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) [ 1033.083606] loop4: detected capacity change from 0 to 140 [ 1033.104584] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 08:45:44 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:45:44 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) signalfd(r1, &(0x7f0000000080)={[0x81]}, 0x8) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:45:44 executing program 6: finit_module(0xffffffffffffffff, &(0x7f0000000080)='!*)\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = dup(r1) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{}, {}]}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000400)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r2) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002dbd7000fcdbdf2504000000080002000500000008000300070000000800020003000000080003000500030014000180060001000a000000080007000ae530cc59c51fc901641e6bd660134e50c072b6477609301184c9bd4c3914208a1ea7c0377da56692d78555fb704f88126c72b39a111e4dcbf5ab57a356f7a64b", @ANYRES32=r8, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) finit_module(r3, 0x0, 0x0) writev(r3, &(0x7f0000000940)=[{&(0x7f00000000c0)="b11df205d58165bda85f28b09495bd09c840a0fe61b775d6101c76a5b653ac9fc746773eea0376a64a5e7e07a394ea0f91a40fef2d7d495133adfb7a4cf374dbca2270c1d83c233abfe38e14213a5f9a70957ccc7af0c5b0614cdf8fb1f092095ade9cff0541cfb3369500"/117, 0x75}, {&(0x7f0000000140)="a0ef1b07a6ca6917330fbbc4016dd34f7adee2e21f1c63c76381ed887f876753b2459dbb596793f0af8f8bb3b4b9ae2a5a386b5f2c2b1d473afe0334f9382bcb840a3d1d3b027cf38002c03e740cf3da7610fecef0396358d71c7d8f683cf65f92bc251b4f94376df349ca601f6beade9e98542c442a0069ff58bbedb22c15aa06e36d4a8bb4299ca5d5e4b5e680c9d212c7640c0472aaf2f111517963ee4473c96dc4423adcf635ddd0a69f45f306600d2d38bf100a36edd49985a08ec4067823fc4d", 0xc3}, {&(0x7f0000000240)="b2e4c6e3fd0cbe71816ad81b235f534eedf24cc7936fc6842ac20dfb7415fd07651064aa92599f787b515c1c5fec7ebba7ef4311eefe92c4af1dcd3350ddcc5f601f0c7ae274006a7d093f9ccfbf2a2782940ddb45a00ea5970ef41ff0317dd503e78b63aa1ccd7e122b35", 0x6b}, {&(0x7f00000002c0)="fb2a8095ffd6ae6b754b39507f38bde4e573f222bda2a2970a84ebef421bef07b7b213bfbc078056e5a574c85f6ef2cf97ef21e9de5dcc539c2c9d4f19293758eb93c02dca209516c4c552fa44f04a02f8f4719ddcebcb163fbf", 0x5a}, {&(0x7f00000005c0)="6c31a43cb31fc296728a21e44edc00b2eb92b69413ada5e71be4a6468349f34d0ee9abe98981db0b24ab71ccdb68ab1f6c08963a3dd8ce9564afca15217a18", 0x3f}, {&(0x7f0000000600)="218ece79b14a916a8676f89087a0bc09eaae60c49e103fcd69f02b42d32135ac08abbb10", 0x24}, {&(0x7f0000000640)="a9f311154e", 0x5}, {&(0x7f0000000680)="c1163f2b5b6e35bb4fd801096af97c4c3bf371b66ef1c41b690ff24abbb1b73b161cb39f024db77d5f6fb56556e81f068d202e3ead3f0ac5228eaae2a04d8ad0e86bd7b4a4719b5eccc12ac8026fcac63ec310f128ff7155ce9fc984b3e30b0b0f5e7c7cd6f0163b1be6124718da4cd5b2b70b84b142deb9db1cb304a3cc6fd41444fb531e7aaf21ca797f00259e29b66225208fe416e9cf4b38f844a1e9987d8a6da7b8a79fc556b1ff2ed8295311b0ba83eff76c84c165ab4de33de2dcaf7329384021f77524d685cadcb7b9074473984d", 0xd2}, {&(0x7f0000000b00)="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", 0x154}, {&(0x7f0000000a00)="3c062f8c0f6c3ca589d5a99ac630d943442ffc6e7c2acce5246c03c9fe38e2820e2a5447dd3186aef35336283b6091f14f309d2c63bf27f6aafc25c78d461c22a99fdb6dce5538d85e91489cfc6619349a06e9650a418c8be99bd8c520a803093d680aea9d2672ee66106a375cb90ced2d7e4464f67a009012502b9fe3407c8fe1bb5e2109fe3ad09408ffb4a028ec1929926170667cfc12aa6a71c94fc395c8c13ccc0ff945ae94b78570ff1720ed4b1beb1e56d8d5e5c63f479e1f11fa5450d6c449ca303fa28de1b3dd5036b34999909cc74538c2a11794902fd654b1a1ce2b01fc9282edd9a3d2615e68f0d4631bdf0e15c19162d550e2", 0xf9}], 0xa) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000000)={0xd, 0x80000001}) [ 1049.131992] loop4: detected capacity change from 0 to 140 08:46:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000", 0x2c, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:46:00 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:46:00 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) close(r0) 08:46:00 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x841}, 0x20040004) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:46:00 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5452, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:46:00 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe93, 0x0, 0x0) 08:46:00 executing program 6: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5451, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:46:00 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) [ 1049.144430] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 08:46:00 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) 08:46:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000", 0x2c, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) [ 1049.240949] loop4: detected capacity change from 0 to 140 08:46:01 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:46:01 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1049.260784] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 08:46:01 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe96, 0x0, 0x0) 08:46:01 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) 08:46:01 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='mand\x00', 0x0, 0x0) 08:46:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c7", 0x33, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) [ 1049.329892] loop6: detected capacity change from 0 to 140 [ 1049.354742] loop4: detected capacity change from 0 to 140 [ 1049.368402] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1049.374485] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1049.418540] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:46:18 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:46:18 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) close(r0) 08:46:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c7", 0x33, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:46:18 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 08:46:18 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5460, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:46:18 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) 08:46:18 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 08:46:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe99, 0x0, 0x0) [ 1067.168105] loop6: detected capacity change from 0 to 140 [ 1067.176020] loop4: detected capacity change from 0 to 140 [ 1067.203784] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1067.210343] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:46:19 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1067.239339] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:46:19 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xe9c, 0x0, 0x0) [ 1067.278994] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/135/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:46:19 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xebd, 0x0, 0x0) 08:46:19 executing program 6: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) 08:46:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c7", 0x33, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:46:19 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) [ 1067.450921] loop4: detected capacity change from 0 to 140 08:46:19 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x0) (fail_nth: 1) [ 1067.466883] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 08:46:19 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x54e3, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:46:19 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1067.539124] FAULT_INJECTION: forcing a failure. [ 1067.539124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.541814] CPU: 1 PID: 7378 Comm: syz-executor.6 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1067.543477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1067.545737] Call Trace: [ 1067.546256] [ 1067.546711] dump_stack_lvl+0x8b/0xb3 [ 1067.547510] should_fail.cold+0x5/0xa [ 1067.548279] _copy_to_user+0x2e/0x150 [ 1067.549053] simple_read_from_buffer+0xcc/0x160 [ 1067.550115] proc_fail_nth_read+0x194/0x220 [ 1067.551133] ? proc_fault_inject_read+0x230/0x230 [ 1067.552353] ? security_file_permission+0xb1/0xd0 [ 1067.553613] ? proc_fault_inject_read+0x230/0x230 [ 1067.554830] vfs_read+0x1b6/0x5f0 [ 1067.555766] ksys_read+0x12d/0x250 [ 1067.556651] ? __ia32_sys_pwrite64+0x230/0x230 [ 1067.557662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1067.558725] do_syscall_64+0x3b/0x90 [ 1067.559500] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1067.560522] RIP: 0033:0x7f30adda069c [ 1067.561263] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1067.564903] RSP: 002b:00007f30ab363170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1067.566426] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f30adda069c [ 1067.567862] RDX: 000000000000000f RSI: 00007f30ab3631e0 RDI: 0000000000000003 [ 1067.569260] RBP: 00007f30ab3631d0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.570661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.572108] R13: 00007ffc59110f4f R14: 00007f30ab363300 R15: 0000000000022000 [ 1067.573541] [ 1082.342116] loop4: detected capacity change from 0 to 140 [ 1082.352313] loop6: detected capacity change from 0 to 140 08:46:34 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xec5, 0x0, 0x0) 08:46:34 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 08:46:34 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x8924, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:46:34 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x0) 08:46:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ff", 0x37, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:46:34 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) close_range(r1, r0, 0x2) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:46:34 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:46:34 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) [ 1082.373082] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1082.397993] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1082.418000] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:46:34 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xec6, 0x0, 0x0) 08:46:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ff", 0x37, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:46:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1082.461445] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1082.482023] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/138/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:46:34 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1082.533824] loop4: detected capacity change from 0 to 140 08:46:34 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 08:46:34 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x8927, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1082.600065] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 08:46:34 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x2) 08:46:34 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xec9, 0x0, 0x0) 08:46:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1082.712095] loop6: detected capacity change from 0 to 140 [ 1082.751730] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1082.755556] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1082.762616] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1082.775112] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/139/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1097.147480] loop6: detected capacity change from 0 to 140 08:46:48 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x3) 08:46:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ff", 0x37, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:46:48 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xecc, 0x0, 0x0) 08:46:48 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:46:48 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:46:48 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:46:48 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x894c, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:46:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1097.175998] loop4: detected capacity change from 0 to 140 [ 1097.197977] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1097.204232] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:46:49 executing program 3: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:46:49 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 1097.243881] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:46:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xecf, 0x0, 0x0) 08:46:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53", 0x39, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:46:49 executing program 5: syz_io_uring_setup(0x525c, &(0x7f0000000200)={0x0, 0xe46b}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6007, @fd_index}, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x0, 0x1, {0x0, r1, r2}}, 0x2) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000eb49bfb1b383e92720107c4b02bcb13a9fd8e0c93dfa1bd46a03fde5385510e169d798b12f7cb8efdfe2ad8974db7401f521ecf0c8998b62fe03f68aa81228310a11508130421808a2135627729f4ec0a9fdf89f6ad210e97059680837ffda9ab44b806eecc6f4d66e020a7f8fba220d985982b44e2f7c99f33134e43b16355815ff44a1250da128ffd85989400ff6008115c9c761198ab3d6625ccc3efbb3cdcb556cdfae2563ee13b8840effeaf4ade0cdc7f6b171fcb90728494db08964abac24cc9a74d4d70d09078f3f36a3b0a089a77666", @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf250f0000000800060000040000080004000600000008000500a9000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004004) r3 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsmount(r3, 0x0, 0xf) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) flistxattr(r4, &(0x7f0000000080)=""/232, 0xe8) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:46:49 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)) 08:46:49 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454c8, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:46:49 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x4) 08:46:49 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)) 08:46:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xed2, 0x0, 0x0) [ 1097.410620] loop4: detected capacity change from 0 to 140 [ 1097.440979] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 08:46:49 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 1097.466633] loop6: detected capacity change from 0 to 140 [ 1097.533015] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1097.545075] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1097.563645] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/141/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:47:03 executing program 3: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:47:03 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454c9, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:47:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xef3, 0x0, 0x0) 08:47:03 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x5) 08:47:03 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x2, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={0x66, 0x5, 0x5, "9e61f63ce7144680b23690c4361b9ac79f487edd2950a8cc01d00616ce7af203fbe0370281672ed90064ee6a793fc3c7a2cc777e7ba428d2fc05829ce5954abd123f5317b315ea699f3c486b7a58bc1af2804a75506e73ce8136980f8c444af3038adf14c4ea"}) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000080)={0x3, 0x200}) clock_gettime(0x0, &(0x7f0000003700)) recvmmsg$unix(r1, &(0x7f0000002140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000540)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/66, 0x42}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f00000003c0)=""/137, 0x89}, {&(0x7f0000000480)=""/23, 0x17}, {&(0x7f00000004c0)=""/80, 0x50}], 0x8, &(0x7f00000005c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/192, 0xc0}, {&(0x7f00000037c0)=""/4111, 0x100f}], 0x2, &(0x7f00000022c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f0000000a00)=""/107, 0x6b}], 0x2, &(0x7f0000000ac0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000b00)=@abs, 0xfffffffffffffecf, &(0x7f0000000c40)=[{&(0x7f0000000b80)=""/189, 0xbd}], 0x1, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000d40), 0x6e, &(0x7f0000003180)=[{&(0x7f0000000dc0)=""/185, 0xb9}, {&(0x7f0000000e80)=""/217, 0xd9}, {&(0x7f0000000f80)=""/114, 0x72}, {&(0x7f0000003040)=""/141, 0x8d}, {&(0x7f0000003100)=""/86, 0x56}], 0x5, &(0x7f0000003200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003340)=""/146, 0x92}, {&(0x7f0000003400)=""/15, 0xf}], 0x2, &(0x7f0000002040)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x6, 0x0, &(0x7f0000003740)={0x77359400}) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000003780)={0x7}) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:47:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53", 0x39, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:47:03 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)) 08:47:03 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) [ 1111.498343] loop4: detected capacity change from 0 to 140 [ 1111.511881] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1111.523166] loop6: detected capacity change from 0 to 140 08:47:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xefb, 0x0, 0x0) [ 1111.570279] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:47:03 executing program 3: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1111.590716] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1111.623718] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1111.638199] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/142/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:47:18 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 08:47:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53", 0x39, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:47:18 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x6) [ 1126.196058] loop4: detected capacity change from 0 to 140 [ 1126.197950] loop6: detected capacity change from 0 to 140 [ 1126.243028] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 08:47:18 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:47:18 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) close_range(r1, r2, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) sendmmsg(r4, &(0x7f0000000e00)=[{{&(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="39d6b3f90971729601e5138357bbedef0ecef627fe68fbb3773586dd5a06ef4fe9366efbb3331f390e9ae191902318e4a9d38858354da8149860630cd1d75fb11953defd6d354d0e3ead3465b9297d836b0fdbbdd2718000fad761338621a07943acac539ebe1da2af2d69e7a687f69b4af2f17c7e9cc167e758e5b090d36272a889b3492f5b06ec345af4a5d579c6c36aee8bc444b13e939b5b97b63fc5b7d95e949281f4f602a4e790d78bd84ded247af647a116bbfe224b19", 0xba}, {&(0x7f0000000200)="bb7cc76fe093326cb70241c46876ce34c20bb08363ae4d6876e1d6c702cae98e1b2bc8f26d20059eed45fa608801e5e35422819948ae9a85e4b0be493f15f1834bb18d9a8fe3941806709bce389fa1f3bdb03b7e01787f7088ed16bed3e21905f3a0823acce0367b151b109ee0d4c226c580480b0429ef4528838dacdc1b172aa0b05c2e9dd712374a11935bddf4dd84d6c282002ba0d00afb48788a30df8f7abaa6b45f602067b67088f9cc3cfbeaa506522a62cdc4d9d1eec075be0c38322f65c87e195b61b83c211f5bd7a3b92e9a2de2914701cfc33e118c009c1f70b63c2541214f455a566b2e392f2a96ca07fe968e7458538b", 0xf6}, {&(0x7f0000000300)="8183e3913ea9fe135781ddfdfc20d12c2d", 0x11}, {&(0x7f0000000340)="e72fd1534a01771bd1fb92f5d756766655b33822cfd842d904bd03e850eba22069edfb1771ac4dccf35819520924f3f93bccbfc6dcd078cd9d2639d720edeb84ad4c6a7294bf072b3288d8a16137b7ea8f2c82758d149bd29b255e479001b4b4f6812b006ea804de739294612f235f4d3365af8cc400575d0b3077b3c8f6a1cd5950fb3d483b44e27edb016cea703298e247148090fb58b324a9427c92495e9eb4364a67aab58355881ed0b123ff2f521a55f095553c60d0c8770cf027ce0f9f9ec956474a7252a1b39705e535b7bc3aaf8b05f9defce526fe", 0xd9}, {&(0x7f0000000440)="20caaed18529e0b9a9ad302b032cc7ec2f33068cc951299f10d22104a729b656b331b14d78e531f4aea173ce797bbd939315ffc68a770234c5f38b2a65005698e10bb16b0b2a2dffe63ac7ce9e496e417ceb4639d6a9b2b2f0d040e04ee74e1cf6f1b5cb851319adea56c6bf6eb4e137fa6c061bffa308e639049f9b5e9f3fdae226a02db9c4ee8e25107749", 0x8c}, {&(0x7f0000000500)="401e58047f9d849d56c8611625e41280da5b8fab613316b9d10d5d4905f8901428711136b6bedd9badcbe3cb287796e27207b9a8d23ad504c5bb0efdd13295322f93511d40b7ba2aebeae481638c0334ecc2c1e00415401b70de614089c00e9f907ed4aa2bb7c86906a3780f2ab4ebe117799094b1183461c87bde2786f708384105abfa8e60ffe4876e080e5193ba9d50e6fc7001766e577cc972", 0x9b}], 0x6, &(0x7f0000000640)=[{0x60, 0x1, 0x3, "fa73c7fdd587b69cdcef6bb8b9f424a4e5c50df45aeea412e2997e2b212248506f21368021240a78a770a7821141d54041274824ccd887f9d09fda82f3758327712ec853c3e040e00fde"}, {0x30, 0x10b, 0x5, "7196f0941631598cf5e1f2e7bd6668ea7c0723ebec2bc0796d6c989c0f02152e"}, {0xf0, 0x105, 0x7fffffff, "95a2852be72b316835155d95e303284f306cd20efdb04f3843a9bfa337febd4b91d957e098f691ddc231480514c2e3ba9994efc3f5f52164640f220f1369c5cddf7135bf4bba37c168871fa2047cb206b242e85b8d06b657cc87ab2977f82cb4f1c4d4924c303985ca8b634aafc5ab678e3cf15e966f636bc150154f8b576704adb82943685dea694044db11dbb3d7ef946cc569b06d8d9bd293aba66744fa1e83e1ab33f397e73033ac474fb04b0202f91c5161834eecf6a8db76334b626a745013484dcbf68edeac015128fbd8a678d513a297cc3e9dd47424dda0"}, {0x98, 0x84, 0x11, "7622e2c5971f0ef1cdf82e3788c5766468d771f950161e4b8ddf43f57cf2cc1a5b7bb31b0ffa46a0c7ec68459a9b0d6862a11c7895860b0f89340c6e6c9df02a1a694aec5cfcec4c71a251a1019b92d1fb1b35c7a298603982fbab14a70776fbc0f4ba8343292396da3dba3bb7dcce5f337abdd660e1175fd1950d10d223e8285f852f7d644dfdf1"}, {0xb8, 0x10b, 0xfff, "0269ef975273be55ea9aa44f2e82301964cb73d7e20ef9b30477fd7ae714ef07c8a41ddd920d7bef1e9b4fa41563285cbe9ca5c2996208312afbd02935dfa7d5b0b02f8a71012aa3f43deb3ddca44c78aababae63dc3b32e2a430e05aa1e3f3ba8a323a1eb9d10781e83db79c3dfdc9695f40933cbc93aceca2a85d021f44d03e8e06f7d130378505b923e1ed40f5a833a25576072d6030fce04eb9cba35fda7909222b8"}, {0x50, 0x104, 0x8, "e70ac3667d5ef73a557e045d31065b74f53fcd4ee3aab3d98ccea924877efcbb94a2333b346f3c9729b591a56b00fa107da1b03606b9396068a167e844"}, {0xe0, 0x111, 0x8, "a4a40bc1225b2bd21e29677c22988ecbc8e1599c56bf259a6221bd67e523882b4137b34b0bfe085e509243822998524917cd446d3b39650107b6f4837baacf207b6908f5d4f21b2bc08ca055eb5197866ef4556264819bb59929569a5b17bec66260c11258a9ac8df1f3d7d011be679f67071b8c14ac4e4a86301aee7f92b80db107c1e5ab1ead0d6f8544da90128d1576fd2d66b25ab97d6943fe4eeae2689a6465fc9e4889e6f94b42a5e6a599a773bb23ce055ce2989e0b5df97f360bf7cb71270d6ac2aff14123deb76f"}], 0x400}}, {{&(0x7f0000000a40)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)="b5e4b95287c14f808da5a75ec0c77bae2b8d9cf7d6cea5a1a5023d7450a7a49209a527e698bb7dd81211a8b14d76951c0a8664686e0a311d69e2f42e27ba40cf29c355c71fa583d656debbc107bffd19d4d66da5c07390045284213c9b6cdfbede17d69bda7b652d8c3c2cdefc52", 0x6e}, {&(0x7f0000000b40)="f1ed52dcc1974814b937c4cd9bb75e3d2bc08af3693284b84a5bb7a7d72fbe0b58a343e9a075981b0b92898f9463398ef9be0c5d25c588a1255c344f3410", 0x3e}, {&(0x7f0000000b80)="e08053acef1da8282937db9098253ff4ae7e74536ac4075a398a85658b46c3ed5fa08bd76b26ea4e1214628db7dd47069ca2d8f695dbe94590453c73d11eba74ab794536", 0x44}], 0x3, &(0x7f0000000c40)=[{0x80, 0xff, 0x9, "cf5953b41b326da7d23d5cfeb0f1f00910b2f997538f5baa93fa7afc7955bb1fbeafa55ee6cdcbddba9297e48c9ccd0ba54490f5d256176edab8a8eb8b5cd7d5471321e4bdeb12067cad2476d4725dff8a375b3dad8ce88427c101cf7abb840c735ef9d3f8a6b96d654011fdef"}, {0x60, 0x1, 0x2, "5e8709cf70cbc3ba1386e1a88a79a1b00ff6e968fdd81ba410e3121eab693803565ac00628c2018d823c9633b743dd8947cbef909c1a2e117468db7da02f9196f94f507bf49dd7212f3118da1be4"}, {0xd8, 0x109, 0x3f, "3c3bb6ca861ab2e33613577e1d93ff1d072a3e72427662bf62ac14e7f736852e5ae5a79c9ccff1aff24ae257629504be065aac010c9f92602f4071df75910d5038f3b81a17d0b530b937a74155d895a3b826b5bb2195b88c2b98865972d5f22bb67a1685f4378e8cabd3bbc2430cdf76dfe9fb0cad470a5481e1e72518bcb316f8b603f5d37f328e6b03922bb82cb0864c86dbcb53344644ee3cb0fa08577ce341049b79fae32ebe0ce5a30795879e39c3607f331be1ffabfe9feb7a512723829012c5f45b96"}], 0x1b8}}], 0x2, 0x804) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:47:18 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x2) 08:47:18 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:47:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xefc, 0x0, 0x0) [ 1126.253856] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1126.279624] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:47:18 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1126.303814] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1126.310673] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/143/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:47:18 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:47:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:47:18 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 08:47:18 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454cb, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:47:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xeff, 0x0, 0x0) 08:47:18 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='rw\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:47:18 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1126.445478] loop4: detected capacity change from 0 to 140 [ 1126.454548] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 08:47:18 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 08:47:18 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x7) 08:47:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf02, 0x0, 0x0) 08:47:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:47:18 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454cc, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:47:18 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:47:18 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x6, 0x20040) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) fcntl$setstatus(r2, 0x4, 0x4000) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 1127.103073] loop4: detected capacity change from 0 to 140 [ 1127.119237] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1127.122413] loop6: detected capacity change from 0 to 140 08:47:18 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1127.147834] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:47:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf05, 0x0, 0x0) 08:47:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) [ 1127.169520] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1127.189398] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 08:47:19 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1127.217656] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/144/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:47:33 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xa) 08:47:33 executing program 2: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x6, 0x20040) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) fcntl$setstatus(r2, 0x4, 0x4000) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 08:47:33 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454cd, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:47:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 1142.069625] loop6: detected capacity change from 0 to 140 08:47:33 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00003a9700080080008f5f49c0653100"]) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x4, 0x3, 0x3}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000140)='\x00', 0x0, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r4, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) pwrite64(r3, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80081, 0x12) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f00000001c0)={0xffffffff, 0x922e, 0x1, 0xff, 0x3, [{0x5fe, 0x4, 0xed, '\x00', 0x800}, {0x8, 0x1, 0xffffffff, '\x00', 0x80}, {0x7, 0x100000000, 0x40}]}) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:47:33 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:47:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf08, 0x0, 0x0) 08:47:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, 0x0) [ 1142.111270] loop4: detected capacity change from 0 to 140 08:47:33 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454ce, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1142.161842] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:47:34 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1142.177667] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:47:34 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf29, 0x0, 0x0) 08:47:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, 0x0) [ 1142.322987] loop4: detected capacity change from 0 to 140 08:47:49 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:47:49 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xc) 08:47:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 08:47:49 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000001780)='rw\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x4, 0x7, &(0x7f0000001680)=[{&(0x7f0000000180)="76385cd015fc7d6537e7724a4a45a654eac1b859a39a9c1d4b3dfd244489c42dd46efdbd4b941ff7cb9ed73761b9ddd3406964699c4b934b82fd9fdb67e8ab363b9d161d15476f0803251beeac054cbd6500593878b8d6412defe7ce75d6411f5b09d93ea3238a237e377a8119b797738cbce5d8389c01811bfdfebfd3266e5d00026e4470333e304d70bfbf243c0c986d61132f3811d06089aebc2d56d00471517475e038ef493b0b64d0e2f7cda0530b9197580a8614a919b6250e3b8aab82e880f698befa43b7384872a622d79c08f32aca28d7c7", 0xd6, 0x3ff}, {&(0x7f0000000280)="8be19a2a881156e9959aeb2d914dd406dea0bddb568c9e6847ea90bb972764a3048014849c8d7c5ec7c4790c28b4", 0x2e, 0x3}, {&(0x7f00000002c0)="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", 0x1000, 0xfffffffffffff193}, {&(0x7f00000012c0)="aa77758e01e98cebe7a534283ee0a726a0f47bdbea3f9e191f2712d804fc7ddd86d9f141e7725fd139a4ab5d5883cbbdb9af9ffb2c345e8cf6506c6ba85a2dd2a48896ae90d4360b2aaf92173f189ea3efad5e13ffb3da8950a92290044f49a21e285a6356c00fdfe673156c1ff2fe8807482f18eeb9b91460e1d4fe2a846e9920c66d33229c72d19d68dc96ef6d998b0729ef153c413e905b41cc1ba120d77b1ef4f7f9bb0a50dc087079f8a11f7fb5ef2fbbadb74b038eaaba5fef590225a94b445330f8ed4346a28f7f10f2848e57411c83ded3aa8955fd0393baef3d6372566e9bfe0e9336e8f61af57fa0e3c4011666d1cffba244c7", 0xf8, 0x20}, {&(0x7f00000013c0)="7a8b6e18a781c4b87238240beff4a2dfe6fd4223fbb69feb0da78e40273863f3d38a2581f418fadda0fcf9250aa64ff5d3560ddd9d0ab0e2678b1f2c43b7a2661cc1a7679d6b0ea9ef65d622de6a58eddf55e6d77865608f435fbb88b4217bd7e5052650b73881664ff42b42fb6546a3f23039d93d8195a9d3eb5d92fbe1128d4920f1b1c45ae689579fce01779f", 0x8e, 0xffff}, {&(0x7f0000001480)="73080584adfa518ec951eea1ec86215e848ead45ebf672d93e0940f5045615bc9a61d6f30ec434f208329ee65a21c1b90dfd8079c4fbb38f04e2bac615aed747cf0e653393917261ab1e85325adfad0548397d01779d9b537fed92d8cccccdd18d7094d7bccca2097871dd3b3c7687af64648e0368c8c1ba4645eb85f5e6bc96f6c7dc3dd7eb8e29adb7329869349d9acef0ca93def3df9050664f067539cc59754134acb21c3c226f9b2bfa5757e3d30d7226d747195d2292d1ee1da52fae092ca9691aef1dd715d0636e56cf64644d05c36b", 0xd3, 0x1f}, {&(0x7f0000001580)="65eed058a87828f827bfd8eb20943318ac380fbb3a543144e05eb89ac22d444c2610515037f5c348282e4943a4f7c048f742763c83061f459d4b9d413c2764ed55c7107108a61eb19535989101986d96b61335fb2fb0cef5e60d4c3b3a384a8ca01336229ae2fbaafe3295d4557116dd62888075b0aba455a12c1d798a9a33c273996f084715551e214f19ba4876e64ee31da8d541076836f73b829139341f95873f05316ac354e7068d710dfe9976e373382c5f2576d8cec26543d04631960543f28a9b9e61aab9d0426635ffeb655d9aab22c2746ac0d590761e5289406b279c9b1ec5ffba8ff3221d29eb9c1d3f07", 0xf0, 0x8}], 0x200020, &(0x7f0000001800)=ANY=[@ANYBLOB="032c7277002c7277002c2f6465762f68706574002c402a262a2c736d61636b6673666c6f6f723d7270635f706970656673002c657569643e", @ANYRESDEC=0xee00, @ANYBLOB="2c006a55960abe02b9663cf1cc8bc78f279f286699"]) r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x2042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r4, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x301000, 0x0) pwrite64(r5, &(0x7f0000000000)='y', 0x1, 0x9) fsmount(r3, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r6, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001740)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee01}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) openat(r6, &(0x7f00000017c0)='./file0\x00', 0x40000, 0x40) 08:47:49 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454cd, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:47:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf32, 0x0, 0x0) 08:47:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, 0x0) [ 1158.094593] loop6: detected capacity change from 0 to 140 [ 1158.095871] loop4: detected capacity change from 0 to 140 08:47:49 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d0, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1158.122093] loop5: detected capacity change from 0 to 16369 08:47:49 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d4, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1158.136709] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1158.151349] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1158.154322] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1158.160567] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/146/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:47:49 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:47:50 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf35, 0x0, 0x0) [ 1158.200198] loop5: detected capacity change from 0 to 16369 08:48:06 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x48) 08:48:06 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:48:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 08:48:06 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) signalfd(r0, &(0x7f0000000080)={[0xa11]}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400101, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x40, 0x9}, 0x18) fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:48:06 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d8, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:48:06 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:48:06 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf38, 0x0, 0x0) 08:48:06 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xa) [ 1174.325309] loop4: detected capacity change from 0 to 140 [ 1174.327291] loop6: detected capacity change from 0 to 140 [ 1174.353268] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1174.374625] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1174.385618] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1174.393848] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1174.402491] EXT4-fs error (device loop4): __ext4_new_inode:1071: comm syz-executor.4: reserved inode found cleared - inode=1 [ 1174.417980] EXT4-fs error (device loop4): ext4_readdir:258: inode #2: block 4: comm syz-executor.4: path /syzkaller-testdir689376714/syzkaller.0AQMif/139/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1174.423701] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1174.439868] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/147/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:48:06 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf3b, 0x0, 0x0) 08:48:06 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) 08:48:06 executing program 2: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00003a9700080080008f5f49c0653100"]) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x4, 0x3, 0x3}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000140)='\x00', 0x0, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r4, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) pwrite64(r3, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80081, 0x12) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f00000001c0)={0xffffffff, 0x922e, 0x1, 0xff, 0x3, [{0x5fe, 0x4, 0xed, '\x00', 0x800}, {0x8, 0x1, 0xffffffff, '\x00', 0x80}, {0x7, 0x100000000, 0x40}]}) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:48:06 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d9, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:48:06 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x4c) 08:48:06 executing program 4: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454cc, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:48:06 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:48:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000000) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:48:06 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf3e, 0x0, 0x0) 08:48:06 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454da, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1174.801964] loop6: detected capacity change from 0 to 140 [ 1174.856722] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1174.875983] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1174.938287] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/148/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:48:19 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf5f, 0x0, 0x0) 08:48:19 executing program 3: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) signalfd(r0, &(0x7f0000000080)={[0xa11]}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400101, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x40, 0x9}, 0x18) fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:48:19 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454dc, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:48:19 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) 08:48:19 executing program 4: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) close_range(r1, r2, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) sendmmsg(r4, &(0x7f0000000e00)=[{{&(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="39d6b3f90971729601e5138357bbedef0ecef627fe68fbb3773586dd5a06ef4fe9366efbb3331f390e9ae191902318e4a9d38858354da8149860630cd1d75fb11953defd6d354d0e3ead3465b9297d836b0fdbbdd2718000fad761338621a07943acac539ebe1da2af2d69e7a687f69b4af2f17c7e9cc167e758e5b090d36272a889b3492f5b06ec345af4a5d579c6c36aee8bc444b13e939b5b97b63fc5b7d95e949281f4f602a4e790d78bd84ded247af647a116bbfe224b19", 0xba}, {&(0x7f0000000200)="bb7cc76fe093326cb70241c46876ce34c20bb08363ae4d6876e1d6c702cae98e1b2bc8f26d20059eed45fa608801e5e35422819948ae9a85e4b0be493f15f1834bb18d9a8fe3941806709bce389fa1f3bdb03b7e01787f7088ed16bed3e21905f3a0823acce0367b151b109ee0d4c226c580480b0429ef4528838dacdc1b172aa0b05c2e9dd712374a11935bddf4dd84d6c282002ba0d00afb48788a30df8f7abaa6b45f602067b67088f9cc3cfbeaa506522a62cdc4d9d1eec075be0c38322f65c87e195b61b83c211f5bd7a3b92e9a2de2914701cfc33e118c009c1f70b63c2541214f455a566b2e392f2a96ca07fe968e7458538b", 0xf6}, {&(0x7f0000000300)="8183e3913ea9fe135781ddfdfc20d12c2d", 0x11}, {&(0x7f0000000340)="e72fd1534a01771bd1fb92f5d756766655b33822cfd842d904bd03e850eba22069edfb1771ac4dccf35819520924f3f93bccbfc6dcd078cd9d2639d720edeb84ad4c6a7294bf072b3288d8a16137b7ea8f2c82758d149bd29b255e479001b4b4f6812b006ea804de739294612f235f4d3365af8cc400575d0b3077b3c8f6a1cd5950fb3d483b44e27edb016cea703298e247148090fb58b324a9427c92495e9eb4364a67aab58355881ed0b123ff2f521a55f095553c60d0c8770cf027ce0f9f9ec956474a7252a1b39705e535b7bc3aaf8b05f9defce526fe", 0xd9}, {&(0x7f0000000440)="20caaed18529e0b9a9ad302b032cc7ec2f33068cc951299f10d22104a729b656b331b14d78e531f4aea173ce797bbd939315ffc68a770234c5f38b2a65005698e10bb16b0b2a2dffe63ac7ce9e496e417ceb4639d6a9b2b2f0d040e04ee74e1cf6f1b5cb851319adea56c6bf6eb4e137fa6c061bffa308e639049f9b5e9f3fdae226a02db9c4ee8e25107749", 0x8c}, {&(0x7f0000000500)="401e58047f9d849d56c8611625e41280da5b8fab613316b9d10d5d4905f8901428711136b6bedd9badcbe3cb287796e27207b9a8d23ad504c5bb0efdd13295322f93511d40b7ba2aebeae481638c0334ecc2c1e00415401b70de614089c00e9f907ed4aa2bb7c86906a3780f2ab4ebe117799094b1183461c87bde2786f708384105abfa8e60ffe4876e080e5193ba9d50e6fc7001766e577cc972", 0x9b}], 0x6, &(0x7f0000000640)=[{0x60, 0x1, 0x3, "fa73c7fdd587b69cdcef6bb8b9f424a4e5c50df45aeea412e2997e2b212248506f21368021240a78a770a7821141d54041274824ccd887f9d09fda82f3758327712ec853c3e040e00fde"}, {0x30, 0x10b, 0x5, "7196f0941631598cf5e1f2e7bd6668ea7c0723ebec2bc0796d6c989c0f02152e"}, {0xf0, 0x105, 0x7fffffff, "95a2852be72b316835155d95e303284f306cd20efdb04f3843a9bfa337febd4b91d957e098f691ddc231480514c2e3ba9994efc3f5f52164640f220f1369c5cddf7135bf4bba37c168871fa2047cb206b242e85b8d06b657cc87ab2977f82cb4f1c4d4924c303985ca8b634aafc5ab678e3cf15e966f636bc150154f8b576704adb82943685dea694044db11dbb3d7ef946cc569b06d8d9bd293aba66744fa1e83e1ab33f397e73033ac474fb04b0202f91c5161834eecf6a8db76334b626a745013484dcbf68edeac015128fbd8a678d513a297cc3e9dd47424dda0"}, {0x98, 0x84, 0x11, "7622e2c5971f0ef1cdf82e3788c5766468d771f950161e4b8ddf43f57cf2cc1a5b7bb31b0ffa46a0c7ec68459a9b0d6862a11c7895860b0f89340c6e6c9df02a1a694aec5cfcec4c71a251a1019b92d1fb1b35c7a298603982fbab14a70776fbc0f4ba8343292396da3dba3bb7dcce5f337abdd660e1175fd1950d10d223e8285f852f7d644dfdf1"}, {0xb8, 0x10b, 0xfff, "0269ef975273be55ea9aa44f2e82301964cb73d7e20ef9b30477fd7ae714ef07c8a41ddd920d7bef1e9b4fa41563285cbe9ca5c2996208312afbd02935dfa7d5b0b02f8a71012aa3f43deb3ddca44c78aababae63dc3b32e2a430e05aa1e3f3ba8a323a1eb9d10781e83db79c3dfdc9695f40933cbc93aceca2a85d021f44d03e8e06f7d130378505b923e1ed40f5a833a25576072d6030fce04eb9cba35fda7909222b8"}, {0x50, 0x104, 0x8, "e70ac3667d5ef73a557e045d31065b74f53fcd4ee3aab3d98ccea924877efcbb94a2333b346f3c9729b591a56b00fa107da1b03606b9396068a167e844"}, {0xe0, 0x111, 0x8, "a4a40bc1225b2bd21e29677c22988ecbc8e1599c56bf259a6221bd67e523882b4137b34b0bfe085e509243822998524917cd446d3b39650107b6f4837baacf207b6908f5d4f21b2bc08ca055eb5197866ef4556264819bb59929569a5b17bec66260c11258a9ac8df1f3d7d011be679f67071b8c14ac4e4a86301aee7f92b80db107c1e5ab1ead0d6f8544da90128d1576fd2d66b25ab97d6943fe4eeae2689a6465fc9e4889e6f94b42a5e6a599a773bb23ce055ce2989e0b5df97f360bf7cb71270d6ac2aff14123deb76f"}], 0x400}}, {{&(0x7f0000000a40)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)="b5e4b95287c14f808da5a75ec0c77bae2b8d9cf7d6cea5a1a5023d7450a7a49209a527e698bb7dd81211a8b14d76951c0a8664686e0a311d69e2f42e27ba40cf29c355c71fa583d656debbc107bffd19d4d66da5c07390045284213c9b6cdfbede17d69bda7b652d8c3c2cdefc52", 0x6e}, {&(0x7f0000000b40)="f1ed52dcc1974814b937c4cd9bb75e3d2bc08af3693284b84a5bb7a7d72fbe0b58a343e9a075981b0b92898f9463398ef9be0c5d25c588a1255c344f3410", 0x3e}, {&(0x7f0000000b80)="e08053acef1da8282937db9098253ff4ae7e74536ac4075a398a85658b46c3ed5fa08bd76b26ea4e1214628db7dd47069ca2d8f695dbe94590453c73d11eba74ab794536", 0x44}], 0x3, &(0x7f0000000c40)=[{0x80, 0xff, 0x9, "cf5953b41b326da7d23d5cfeb0f1f00910b2f997538f5baa93fa7afc7955bb1fbeafa55ee6cdcbddba9297e48c9ccd0ba54490f5d256176edab8a8eb8b5cd7d5471321e4bdeb12067cad2476d4725dff8a375b3dad8ce88427c101cf7abb840c735ef9d3f8a6b96d654011fdef"}, {0x60, 0x1, 0x2, "5e8709cf70cbc3ba1386e1a88a79a1b00ff6e968fdd81ba410e3121eab693803565ac00628c2018d823c9633b743dd8947cbef909c1a2e117468db7da02f9196f94f507bf49dd7212f3118da1be4"}, {0xd8, 0x109, 0x3f, "3c3bb6ca861ab2e33613577e1d93ff1d072a3e72427662bf62ac14e7f736852e5ae5a79c9ccff1aff24ae257629504be065aac010c9f92602f4071df75910d5038f3b81a17d0b530b937a74155d895a3b826b5bb2195b88c2b98865972d5f22bb67a1685f4378e8cabd3bbc2430cdf76dfe9fb0cad470a5481e1e72518bcb316f8b603f5d37f328e6b03922bb82cb0864c86dbcb53344644ee3cb0fa08577ce341049b79fae32ebe0ce5a30795879e39c3607f331be1ffabfe9feb7a512723829012c5f45b96"}], 0x1b8}}], 0x2, 0x804) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1187.872975] loop6: detected capacity change from 0 to 140 08:48:19 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x68) 08:48:19 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x5) 08:48:19 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) [ 1187.905505] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1187.923573] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1187.948498] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1187.951351] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/149/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:48:19 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x2) 08:48:19 executing program 4: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x8927, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:48:19 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf68, 0x0, 0x0) 08:48:19 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454e2, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:48:19 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x2) 08:48:36 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 08:48:36 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x6c) 08:48:36 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5460, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:48:36 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 08:48:36 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x40049409, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:48:36 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf6b, 0x0, 0x0) 08:48:36 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x2) 08:48:36 executing program 4: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:48:36 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf6e, 0x0, 0x0) [ 1205.085368] loop6: detected capacity change from 0 to 140 [ 1205.107579] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:48:36 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x40086602, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1205.131438] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1205.137776] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1205.146958] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/150/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:48:36 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x68) 08:48:37 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x74) [ 1205.194719] loop6: detected capacity change from 0 to 140 [ 1205.214560] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1205.220373] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:48:37 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) (fail_nth: 1) [ 1205.227521] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 08:48:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 1) 08:48:37 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf71, 0x0, 0x0) [ 1205.254513] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/151/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1205.270739] FAULT_INJECTION: forcing a failure. [ 1205.270739] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.271877] CPU: 1 PID: 7835 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1205.272671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1205.273778] Call Trace: [ 1205.274029] [ 1205.274246] dump_stack_lvl+0x8b/0xb3 [ 1205.274631] should_fail.cold+0x5/0xa [ 1205.275009] ? __do_sys_memfd_create+0xac/0x4f0 [ 1205.275477] should_failslab+0x5/0x10 [ 1205.275846] __kmalloc+0x72/0x440 [ 1205.276189] __do_sys_memfd_create+0xac/0x4f0 [ 1205.276633] do_syscall_64+0x3b/0x90 [ 1205.277007] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1205.277514] RIP: 0033:0x7fed060d2b19 [ 1205.277872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1205.279635] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1205.280361] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fed060d2b19 [ 1205.281071] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007fed0612c0fb [ 1205.281792] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff [ 1205.282495] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1205.283197] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000080 [ 1205.283927] 08:48:37 executing program 5: r0 = fsopen(&(0x7f0000000080)='openpromfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)=']|\xf3\x95\\', &(0x7f00000000c0)='/&]{%\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={r0, 0x10000, 0x693, 0x856}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x89) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)=']:#\x00', &(0x7f0000000180)='##*\x00', 0x0) [ 1205.314272] FAULT_INJECTION: forcing a failure. [ 1205.314272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.315513] CPU: 1 PID: 7838 Comm: syz-executor.3 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1205.316297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1205.317387] Call Trace: [ 1205.317633] [ 1205.317849] dump_stack_lvl+0x8b/0xb3 [ 1205.318230] should_fail.cold+0x5/0xa [ 1205.318609] _copy_to_user+0x2e/0x150 [ 1205.318984] simple_read_from_buffer+0xcc/0x160 [ 1205.319506] proc_fail_nth_read+0x194/0x220 [ 1205.319936] ? proc_fault_inject_read+0x230/0x230 [ 1205.320461] ? security_file_permission+0xb1/0xd0 [ 1205.320931] ? proc_fault_inject_read+0x230/0x230 [ 1205.321475] vfs_read+0x1b6/0x5f0 [ 1205.321868] ksys_read+0x12d/0x250 [ 1205.322272] ? __ia32_sys_pwrite64+0x230/0x230 [ 1205.322788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1205.323367] do_syscall_64+0x3b/0x90 [ 1205.323793] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1205.324349] RIP: 0033:0x7fa35de6869c [ 1205.324765] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1205.326791] RSP: 002b:00007fa35b42b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1205.327633] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fa35de6869c [ 1205.328418] RDX: 000000000000000f RSI: 00007fa35b42b1e0 RDI: 0000000000000004 [ 1205.329200] RBP: 00007fa35b42b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1205.329985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.330780] R13: 00007fff26ce91ef R14: 00007fa35b42b300 R15: 0000000000022000 [ 1205.331576] 08:48:51 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x68) 08:48:51 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 08:48:51 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x40087602, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:48:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 2) 08:48:51 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x7a) 08:48:51 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) 08:48:51 executing program 5: r0 = fsopen(&(0x7f0000000040)='coda\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) close_range(r1, r2, 0x0) memfd_secret(0x80000) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 08:48:51 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf74, 0x0, 0x0) 08:48:51 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf95, 0x0, 0x0) [ 1219.765941] FAULT_INJECTION: forcing a failure. [ 1219.765941] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.768738] CPU: 0 PID: 7859 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1219.770699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1219.773391] Call Trace: [ 1219.773971] [ 1219.774438] dump_stack_lvl+0x8b/0xb3 [ 1219.775261] should_fail.cold+0x5/0xa [ 1219.776074] ? create_object.isra.0+0x3a/0xa20 [ 1219.777059] should_failslab+0x5/0x10 [ 1219.777875] kmem_cache_alloc+0x5b/0x480 [ 1219.778745] create_object.isra.0+0x3a/0xa20 [ 1219.779680] ? kasan_unpoison+0x23/0x50 [ 1219.780525] __kmalloc+0x25b/0x440 [ 1219.781299] __do_sys_memfd_create+0xac/0x4f0 [ 1219.782274] do_syscall_64+0x3b/0x90 [ 1219.783072] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1219.784155] RIP: 0033:0x7fed060d2b19 [ 1219.784946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1219.788811] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1219.790413] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fed060d2b19 [ 1219.791910] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007fed0612c0fb [ 1219.793410] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff [ 1219.794918] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1219.796412] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000080 [ 1219.797980] [ 1219.807822] loop6: detected capacity change from 0 to 140 08:48:51 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf9e, 0x0, 0x0) [ 1219.826042] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1219.836446] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1219.845004] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1219.848634] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/152/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:48:51 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:48:51 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xc0) [ 1219.919021] loop6: detected capacity change from 0 to 140 08:48:51 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x68) [ 1219.978786] loop4: detected capacity change from 0 to 140 [ 1219.987506] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1219.989985] EXT4-fs (loop4): get root inode failed [ 1219.990643] EXT4-fs (loop4): mount failed [ 1219.998380] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:48:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 3) [ 1220.040408] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:48:51 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xfa1, 0x0, 0x0) 08:48:51 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)=',\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1220.108557] FAULT_INJECTION: forcing a failure. [ 1220.108557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1220.109959] CPU: 1 PID: 7897 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1220.110883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1220.112166] Call Trace: [ 1220.112450] [ 1220.112700] dump_stack_lvl+0x8b/0xb3 [ 1220.113142] should_fail.cold+0x5/0xa [ 1220.113599] _copy_from_user+0x2e/0x170 [ 1220.114048] __do_sys_memfd_create+0xff/0x4f0 [ 1220.114577] do_syscall_64+0x3b/0x90 [ 1220.115001] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1220.115587] RIP: 0033:0x7fed060d2b19 [ 1220.116026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.118278] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1220.119119] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fed060d2b19 [ 1220.120002] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007fed0612c0fb [ 1220.120792] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff [ 1220.121604] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1220.122409] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000080 [ 1220.123211] 08:48:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xf6e, 0x0, 0x0) 08:49:08 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 08:49:08 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d6, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1236.543649] loop6: detected capacity change from 0 to 140 08:49:08 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:49:08 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x2, 0x0) 08:49:08 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xfa4, 0x0, 0x0) 08:49:08 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) (fail_nth: 1) 08:49:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 4) 08:49:08 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x300) [ 1236.584684] FAULT_INJECTION: forcing a failure. [ 1236.584684] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.587471] CPU: 0 PID: 7923 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1236.589377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1236.591976] Call Trace: [ 1236.592589] [ 1236.593098] dump_stack_lvl+0x8b/0xb3 [ 1236.594063] should_fail.cold+0x5/0xa [ 1236.594967] ? shmem_alloc_inode+0x18/0x40 [ 1236.595978] should_failslab+0x5/0x10 [ 1236.596855] kmem_cache_alloc+0x5b/0x480 [ 1236.597837] ? shmem_destroy_inode+0x70/0x70 [ 1236.598880] shmem_alloc_inode+0x18/0x40 [ 1236.599826] ? shmem_destroy_inode+0x70/0x70 [ 1236.600846] alloc_inode+0x63/0x230 [ 1236.601747] new_inode+0x23/0x240 [ 1236.602576] shmem_get_inode+0x18b/0xcb0 [ 1236.603532] __shmem_file_setup+0xb8/0x310 [ 1236.604521] ? _copy_from_user+0x139/0x170 [ 1236.605514] __do_sys_memfd_create+0x1c6/0x4f0 [ 1236.606603] do_syscall_64+0x3b/0x90 [ 1236.607478] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1236.608675] RIP: 0033:0x7fed060d2b19 [ 1236.609671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1236.613980] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1236.615743] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fed060d2b19 [ 1236.617384] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007fed0612c0fb [ 1236.619049] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff [ 1236.620716] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1236.622370] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000080 [ 1236.624004] [ 1236.628283] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:49:08 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401c5820, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1236.653727] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1236.661297] FAULT_INJECTION: forcing a failure. [ 1236.661297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1236.663966] CPU: 0 PID: 7929 Comm: syz-executor.2 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1236.665805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1236.668334] Call Trace: [ 1236.668910] [ 1236.669425] dump_stack_lvl+0x8b/0xb3 [ 1236.670316] should_fail.cold+0x5/0xa [ 1236.671169] _copy_from_user+0x2e/0x170 [ 1236.672076] __tun_chr_ioctl+0x2a5c/0x3f10 [ 1236.673031] ? selinux_file_ioctl+0x10f/0x5d0 [ 1236.674068] ? lock_downgrade+0x6d0/0x6d0 [ 1236.675004] ? tun_chr_read_iter+0x260/0x260 [ 1236.676004] ? lock_is_held_type+0xd7/0x130 [ 1236.676984] ? __x64_sys_ioctl+0x97/0x210 [ 1236.677938] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1236.679174] ? tun_chr_compat_ioctl+0x30/0x30 [ 1236.680208] __x64_sys_ioctl+0x196/0x210 [ 1236.681138] do_syscall_64+0x3b/0x90 [ 1236.682004] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1236.683143] RIP: 0033:0x7f0f80b1bb19 [ 1236.683961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1236.688013] RSP: 002b:00007f0f7e070188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.689698] RAX: ffffffffffffffda RBX: 00007f0f80c2f020 RCX: 00007f0f80b1bb19 [ 1236.691246] RDX: 00000000200000c0 RSI: 00000000400454d1 RDI: 0000000000000003 [ 1236.692803] RBP: 00007f0f7e0701d0 R08: 0000000000000000 R09: 0000000000000000 [ 1236.694368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.695900] R13: 00007ffdb680560f R14: 00007f0f7e070300 R15: 0000000000022000 [ 1236.697502] 08:49:08 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xfa7, 0x0, 0x0) 08:49:08 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf6) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:49:08 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x500) 08:49:08 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4020940d, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1236.998493] loop6: detected capacity change from 0 to 140 [ 1237.028869] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1237.034904] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1237.052705] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1237.072570] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/155/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:49:25 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 08:49:25 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xfaa, 0x0, 0x0) 08:49:25 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x600) 08:49:25 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) (fail_nth: 2) 08:49:25 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b49, 0x0) 08:49:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 5) 08:49:25 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsmount(r1, 0x1, 0x4) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:49:25 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454cf, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1253.520606] FAULT_INJECTION: forcing a failure. [ 1253.520606] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.522416] CPU: 1 PID: 7970 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1253.523689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1253.525454] Call Trace: [ 1253.525848] [ 1253.526204] dump_stack_lvl+0x8b/0xb3 [ 1253.526814] should_fail.cold+0x5/0xa [ 1253.527412] ? create_object.isra.0+0x3a/0xa20 [ 1253.528145] should_failslab+0x5/0x10 [ 1253.528745] kmem_cache_alloc+0x5b/0x480 [ 1253.529398] create_object.isra.0+0x3a/0xa20 [ 1253.530125] ? kasan_unpoison+0x23/0x50 [ 1253.530765] kmem_cache_alloc+0x239/0x480 [ 1253.531423] ? shmem_destroy_inode+0x70/0x70 [ 1253.532112] shmem_alloc_inode+0x18/0x40 [ 1253.532739] ? shmem_destroy_inode+0x70/0x70 [ 1253.533420] alloc_inode+0x63/0x230 [ 1253.534004] new_inode+0x23/0x240 [ 1253.534550] shmem_get_inode+0x18b/0xcb0 [ 1253.535183] __shmem_file_setup+0xb8/0x310 [ 1253.535834] ? _copy_from_user+0x139/0x170 [ 1253.536495] __do_sys_memfd_create+0x1c6/0x4f0 [ 1253.537206] do_syscall_64+0x3b/0x90 [ 1253.537788] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1253.538580] RIP: 0033:0x7fed060d2b19 [ 1253.539141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1253.541959] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1253.543102] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fed060d2b19 [ 1253.544177] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007fed0612c0fb [ 1253.545255] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff [ 1253.546344] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1253.547421] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000080 [ 1253.548519] [ 1253.554759] loop6: detected capacity change from 0 to 140 [ 1253.563108] loop4: detected capacity change from 0 to 140 [ 1253.573499] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1253.588411] FAULT_INJECTION: forcing a failure. [ 1253.588411] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.590094] CPU: 1 PID: 7963 Comm: syz-executor.2 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1253.591313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1253.592999] Call Trace: [ 1253.593380] [ 1253.593706] dump_stack_lvl+0x8b/0xb3 [ 1253.594318] should_fail.cold+0x5/0xa [ 1253.594912] should_failslab+0x5/0x10 [ 1253.595508] __kmalloc_track_caller+0x79/0x420 [ 1253.596225] ? __tun_chr_ioctl+0x3329/0x3f10 [ 1253.596928] memdup_user+0x22/0xc0 [ 1253.597477] __tun_chr_ioctl+0x3329/0x3f10 [ 1253.598157] ? selinux_file_ioctl+0x10f/0x5d0 [ 1253.598850] ? lock_downgrade+0x6d0/0x6d0 [ 1253.599467] ? tun_chr_read_iter+0x260/0x260 [ 1253.600115] ? lock_is_held_type+0xd7/0x130 [ 1253.600762] ? __x64_sys_ioctl+0x97/0x210 [ 1253.601377] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1253.602194] ? tun_chr_compat_ioctl+0x30/0x30 [ 1253.602853] __x64_sys_ioctl+0x196/0x210 [ 1253.603460] do_syscall_64+0x3b/0x90 [ 1253.604032] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1253.604794] RIP: 0033:0x7f0f80b1bb19 [ 1253.605356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 08:49:25 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xfcb, 0x0, 0x0) [ 1253.608124] RSP: 002b:00007f0f7e091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1253.609455] RAX: ffffffffffffffda RBX: 00007f0f80c2ef60 RCX: 00007f0f80b1bb19 [ 1253.610470] RDX: 00000000200000c0 RSI: 00000000400454d1 RDI: 0000000000000003 [ 1253.611478] RBP: 00007f0f7e0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1253.612511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.613563] R13: 00007ffdb680560f R14: 00007f0f7e091300 R15: 0000000000022000 [ 1253.614607] [ 1253.616388] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1253.623193] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 08:49:25 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454d2, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1253.627857] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/156/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1253.632121] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1253.635621] EXT4-fs (loop4): get root inode failed [ 1253.636306] EXT4-fs (loop4): mount failed 08:49:25 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:49:25 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) (fail_nth: 3) 08:49:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 6) 08:49:25 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x700) [ 1253.744105] FAULT_INJECTION: forcing a failure. [ 1253.744105] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.745687] CPU: 1 PID: 7989 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1253.746812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1253.748313] Call Trace: [ 1253.748648] [ 1253.748943] dump_stack_lvl+0x8b/0xb3 [ 1253.749474] should_fail.cold+0x5/0xa [ 1253.750002] ? security_inode_alloc+0x34/0x160 [ 1253.750632] should_failslab+0x5/0x10 [ 1253.751142] kmem_cache_alloc+0x5b/0x480 [ 1253.751698] security_inode_alloc+0x34/0x160 [ 1253.752249] inode_init_always+0x52e/0xc50 [ 1253.752824] alloc_inode+0x84/0x230 [ 1253.753285] new_inode+0x23/0x240 [ 1253.753756] shmem_get_inode+0x18b/0xcb0 [ 1253.754280] __shmem_file_setup+0xb8/0x310 [ 1253.754852] ? _copy_from_user+0x139/0x170 [ 1253.755413] __do_sys_memfd_create+0x1c6/0x4f0 [ 1253.756047] do_syscall_64+0x3b/0x90 [ 1253.756538] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1253.757245] RIP: 0033:0x7fed060d2b19 [ 1253.757747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1253.760190] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1253.761193] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fed060d2b19 [ 1253.762135] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007fed0612c0fb [ 1253.763083] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff [ 1253.764018] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1253.764961] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000080 [ 1253.765959] [ 1253.773887] FAULT_INJECTION: forcing a failure. [ 1253.773887] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.776707] CPU: 1 PID: 7992 Comm: syz-executor.2 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1253.777912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1253.779501] Call Trace: [ 1253.779839] [ 1253.780126] dump_stack_lvl+0x8b/0xb3 [ 1253.780625] should_fail.cold+0x5/0xa [ 1253.781125] ? create_object.isra.0+0x3a/0xa20 [ 1253.781835] should_failslab+0x5/0x10 [ 1253.782360] kmem_cache_alloc+0x5b/0x480 [ 1253.782896] create_object.isra.0+0x3a/0xa20 [ 1253.783584] ? kasan_unpoison+0x23/0x50 [ 1253.784125] __kmalloc_track_caller+0x25e/0x420 [ 1253.784837] ? __tun_chr_ioctl+0x3329/0x3f10 [ 1253.785430] memdup_user+0x22/0xc0 [ 1253.785903] __tun_chr_ioctl+0x3329/0x3f10 [ 1253.786467] ? selinux_file_ioctl+0x10f/0x5d0 [ 1253.787063] ? lock_downgrade+0x6d0/0x6d0 [ 1253.787609] ? tun_chr_read_iter+0x260/0x260 [ 1253.788183] ? lock_is_held_type+0xd7/0x130 [ 1253.788762] ? __x64_sys_ioctl+0x97/0x210 [ 1253.789295] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1253.790013] ? tun_chr_compat_ioctl+0x30/0x30 [ 1253.790572] __x64_sys_ioctl+0x196/0x210 [ 1253.791088] do_syscall_64+0x3b/0x90 [ 1253.791563] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1253.792228] RIP: 0033:0x7f0f80b1bb19 [ 1253.792701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1253.795021] RSP: 002b:00007f0f7e091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 08:49:25 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xfd4, 0x0, 0x0) 08:49:25 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x541b, 0x0) [ 1253.795968] RAX: ffffffffffffffda RBX: 00007f0f80c2ef60 RCX: 00007f0f80b1bb19 [ 1253.797217] RDX: 00000000200000c0 RSI: 00000000400454d1 RDI: 0000000000000003 [ 1253.798115] RBP: 00007f0f7e0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1253.799141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.800132] R13: 00007ffdb680560f R14: 00007f0f7e091300 R15: 0000000000022000 [ 1253.801029] [ 1253.859490] loop6: detected capacity change from 0 to 140 [ 1253.896704] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1253.906324] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1253.913535] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1253.919689] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/157/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:49:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 7) 08:49:40 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 08:49:40 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5421, 0x0) 08:49:40 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) (fail_nth: 4) 08:49:40 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454d3, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:49:40 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xfd7, 0x0, 0x0) 08:49:40 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x84001, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x98, 0x8c403) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x5, 0x7, 0x2a, @mcast1, @empty, 0x80, 0x8, 0x8001, 0x3}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000280)=0x0) r6 = syz_open_pts(r1, 0x102) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r6, &(0x7f0000000300)={r1, r7, 0x1000}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={r3, @rand_addr=0x64010101, @remote}, 0xc) fsmount(r1, 0x1, 0x70) 08:49:40 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x7a8) [ 1268.650489] loop6: detected capacity change from 0 to 140 [ 1268.700590] FAULT_INJECTION: forcing a failure. [ 1268.700590] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.703288] CPU: 0 PID: 8030 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1268.704898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1268.707105] Call Trace: [ 1268.707602] [ 1268.708061] dump_stack_lvl+0x8b/0xb3 [ 1268.708846] should_fail.cold+0x5/0xa [ 1268.709594] ? create_object.isra.0+0x3a/0xa20 [ 1268.709673] FAULT_INJECTION: forcing a failure. [ 1268.709673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.710508] should_failslab+0x5/0x10 [ 1268.710532] kmem_cache_alloc+0x5b/0x480 [ 1268.710565] create_object.isra.0+0x3a/0xa20 [ 1268.715461] ? kasan_unpoison+0x23/0x50 [ 1268.716270] kmem_cache_alloc+0x239/0x480 [ 1268.717094] security_inode_alloc+0x34/0x160 [ 1268.717945] inode_init_always+0x52e/0xc50 [ 1268.718803] alloc_inode+0x84/0x230 [ 1268.719507] new_inode+0x23/0x240 [ 1268.720207] shmem_get_inode+0x18b/0xcb0 [ 1268.721014] __shmem_file_setup+0xb8/0x310 [ 1268.721836] ? _copy_from_user+0x139/0x170 [ 1268.722697] __do_sys_memfd_create+0x1c6/0x4f0 [ 1268.723585] do_syscall_64+0x3b/0x90 [ 1268.724338] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1268.725345] RIP: 0033:0x7fed060d2b19 [ 1268.726062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1268.729620] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1268.731120] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fed060d2b19 [ 1268.732510] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007fed0612c0fb [ 1268.733884] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff [ 1268.735276] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1268.736655] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000080 [ 1268.738051] [ 1268.738504] CPU: 1 PID: 8018 Comm: syz-executor.2 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1268.740271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1268.742637] Call Trace: [ 1268.743174] [ 1268.743640] dump_stack_lvl+0x8b/0xb3 [ 1268.744191] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1268.744464] should_fail.cold+0x5/0xa [ 1268.746846] _copy_from_user+0x2e/0x170 [ 1268.747697] memdup_user+0x69/0xc0 [ 1268.748453] __tun_chr_ioctl+0x3329/0x3f10 [ 1268.749356] ? selinux_file_ioctl+0x10f/0x5d0 [ 1268.750329] ? lock_downgrade+0x6d0/0x6d0 [ 1268.751213] loop4: detected capacity change from 0 to 140 [ 1268.751208] ? tun_chr_read_iter+0x260/0x260 [ 1268.753202] ? lock_is_held_type+0xd7/0x130 [ 1268.754142] ? __x64_sys_ioctl+0x97/0x210 [ 1268.755018] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1268.756176] ? tun_chr_compat_ioctl+0x30/0x30 [ 1268.757126] __x64_sys_ioctl+0x196/0x210 [ 1268.757984] do_syscall_64+0x3b/0x90 [ 1268.758794] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1268.759874] RIP: 0033:0x7f0f80b1bb19 [ 1268.760650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1268.764520] RSP: 002b:00007f0f7e091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1268.766119] RAX: ffffffffffffffda RBX: 00007f0f80c2ef60 RCX: 00007f0f80b1bb19 [ 1268.767611] RDX: 00000000200000c0 RSI: 00000000400454d1 RDI: 0000000000000003 [ 1268.769100] RBP: 00007f0f7e0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1268.770611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1268.772099] R13: 00007ffdb680560f R14: 00007f0f7e091300 R15: 0000000000022000 [ 1268.773614] [ 1268.797763] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1268.812923] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1268.817468] EXT4-fs (loop4): get root inode failed [ 1268.818562] EXT4-fs (loop4): mount failed 08:49:40 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xfda, 0x0, 0x0) 08:49:40 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5450, 0x0) 08:49:40 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454d7, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:49:40 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='rw\x00', &(0x7f00000000c0)='rw\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 08:49:40 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) (fail_nth: 5) 08:49:40 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xa00) 08:49:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 8) [ 1269.097568] FAULT_INJECTION: forcing a failure. [ 1269.097568] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.100044] CPU: 0 PID: 8057 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1269.101768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1269.104145] Call Trace: [ 1269.104682] [ 1269.105151] dump_stack_lvl+0x8b/0xb3 [ 1269.105970] should_fail.cold+0x5/0xa [ 1269.106804] ? __d_alloc+0x2a/0x990 [ 1269.107576] should_failslab+0x5/0x10 [ 1269.108373] kmem_cache_alloc+0x5b/0x480 [ 1269.109227] ? lockdep_hardirqs_on+0x79/0x100 [ 1269.110184] __d_alloc+0x2a/0x990 [ 1269.110917] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1269.112080] d_alloc_pseudo+0x19/0x70 [ 1269.112921] alloc_file_pseudo+0xce/0x250 [ 1269.113799] ? alloc_file+0x590/0x590 [ 1269.114631] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1269.115792] ? shmem_get_inode+0x5cd/0xcb0 [ 1269.116698] __shmem_file_setup+0x144/0x310 [ 1269.117612] ? _copy_from_user+0x139/0x170 [ 1269.118514] __do_sys_memfd_create+0x1c6/0x4f0 [ 1269.119492] do_syscall_64+0x3b/0x90 [ 1269.120281] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1269.121359] RIP: 0033:0x7fed060d2b19 [ 1269.122141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1269.125955] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1269.127554] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fed060d2b19 [ 1269.129031] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007fed0612c0fb [ 1269.130520] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff [ 1269.131999] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1269.133475] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000080 [ 1269.135000] [ 1269.140406] FAULT_INJECTION: forcing a failure. [ 1269.140406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1269.142884] CPU: 0 PID: 8054 Comm: syz-executor.2 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1269.144651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1269.147278] Call Trace: [ 1269.147822] [ 1269.148293] dump_stack_lvl+0x8b/0xb3 [ 1269.149112] should_fail.cold+0x5/0xa [ 1269.149930] _copy_to_user+0x2e/0x150 [ 1269.150750] simple_read_from_buffer+0xcc/0x160 [ 1269.151856] proc_fail_nth_read+0x194/0x220 [ 1269.152941] ? proc_fault_inject_read+0x230/0x230 [ 1269.154185] ? security_file_permission+0xb1/0xd0 [ 1269.155218] ? proc_fault_inject_read+0x230/0x230 [ 1269.156243] vfs_read+0x1b6/0x5f0 [ 1269.156993] ksys_read+0x12d/0x250 [ 1269.157749] ? __ia32_sys_pwrite64+0x230/0x230 [ 1269.158729] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1269.159825] do_syscall_64+0x3b/0x90 [ 1269.160621] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1269.161702] RIP: 0033:0x7f0f80ace69c 08:49:40 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xfdd, 0x0, 0x0) 08:49:40 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5451, 0x0) [ 1269.162486] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1269.166963] RSP: 002b:00007f0f7e091170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1269.168796] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f0f80ace69c [ 1269.170501] RDX: 000000000000000f RSI: 00007f0f7e0911e0 RDI: 0000000000000004 [ 1269.171989] RBP: 00007f0f7e0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1269.173678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.175364] R13: 00007ffdb680560f R14: 00007f0f7e091300 R15: 0000000000022000 [ 1269.176886] [ 1269.185864] loop6: detected capacity change from 0 to 140 [ 1269.222408] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1269.228971] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1269.255292] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/159/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:49:56 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:49:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 08:49:56 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xc00) 08:49:56 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xfe0, 0x0, 0x0) 08:49:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 9) 08:49:56 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x40) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) fsmount(r1, 0x1, 0x8) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:49:56 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5452, 0x0) 08:49:56 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454dd, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1284.394967] FAULT_INJECTION: forcing a failure. [ 1284.394967] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.397202] loop6: detected capacity change from 0 to 140 [ 1284.397490] CPU: 0 PID: 8078 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1284.399962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1284.402591] Call Trace: [ 1284.403135] [ 1284.403630] dump_stack_lvl+0x8b/0xb3 [ 1284.404081] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1284.404483] should_fail.cold+0x5/0xa [ 1284.406462] ? create_object.isra.0+0x3a/0xa20 [ 1284.407469] should_failslab+0x5/0x10 [ 1284.408297] kmem_cache_alloc+0x5b/0x480 [ 1284.409165] create_object.isra.0+0x3a/0xa20 [ 1284.410131] ? kasan_unpoison+0x23/0x50 [ 1284.411066] kmem_cache_alloc+0x239/0x480 [ 1284.411978] __d_alloc+0x2a/0x990 [ 1284.412739] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1284.413925] d_alloc_pseudo+0x19/0x70 [ 1284.414790] alloc_file_pseudo+0xce/0x250 [ 1284.415696] ? alloc_file+0x590/0x590 [ 1284.416528] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1284.417719] ? shmem_get_inode+0x5cd/0xcb0 [ 1284.418692] __shmem_file_setup+0x144/0x310 [ 1284.419648] ? _copy_from_user+0x139/0x170 [ 1284.420577] __do_sys_memfd_create+0x1c6/0x4f0 [ 1284.421583] do_syscall_64+0x3b/0x90 [ 1284.422446] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1284.423551] RIP: 0033:0x7fed060d2b19 [ 1284.424349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1284.428298] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1284.429933] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fed060d2b19 [ 1284.431645] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007fed0612c0fb [ 1284.433159] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff [ 1284.434705] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1284.436221] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000080 [ 1284.437768] [ 1284.507021] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:49:56 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454e0, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:49:56 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x2, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:49:56 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x2000) 08:49:56 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0xff00, 0x0, 0x0) [ 1284.672457] loop4: detected capacity change from 0 to 140 08:49:56 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5460, 0x0) [ 1284.737161] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1284.741843] EXT4-fs (loop4): get root inode failed [ 1284.742957] EXT4-fs (loop4): mount failed 08:49:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 10) [ 1284.816455] loop6: detected capacity change from 0 to 140 [ 1284.852962] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1284.868372] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1284.893046] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 08:49:56 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454e1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1284.919256] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/161/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:49:56 executing program 5: stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)) r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) fsmount(r2, 0x0, 0x72) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:49:56 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1284.949611] FAULT_INJECTION: forcing a failure. [ 1284.949611] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.952089] CPU: 0 PID: 8117 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1284.953814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1284.956180] Call Trace: [ 1284.956718] [ 1284.957187] dump_stack_lvl+0x8b/0xb3 [ 1284.958010] should_fail.cold+0x5/0xa [ 1284.958844] ? __alloc_file+0x21/0x240 [ 1284.959674] should_failslab+0x5/0x10 [ 1284.960468] kmem_cache_alloc+0x5b/0x480 [ 1284.961337] __alloc_file+0x21/0x240 [ 1284.962129] alloc_empty_file+0x6d/0x170 [ 1284.963002] alloc_file+0x59/0x590 [ 1284.963767] alloc_file_pseudo+0x16a/0x250 [ 1284.964666] ? alloc_file+0x590/0x590 [ 1284.965472] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1284.966660] ? shmem_get_inode+0x5cd/0xcb0 [ 1284.967570] __shmem_file_setup+0x144/0x310 [ 1284.968487] ? _copy_from_user+0x139/0x170 [ 1284.969386] __do_sys_memfd_create+0x1c6/0x4f0 [ 1284.970371] do_syscall_64+0x3b/0x90 [ 1284.971171] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1284.972250] RIP: 0033:0x7fed060d2b19 [ 1284.973023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1284.976863] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1284.978470] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fed060d2b19 [ 1284.979958] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007fed0612c0fb [ 1284.981442] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff [ 1284.982945] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1284.984432] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000080 [ 1284.985946] 08:50:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 08:50:10 executing program 5: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='&(^-\x02\x00', &(0x7f0000000140)='$\x00.+!\'$\x00', 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='&(^-\x02\x00', &(0x7f0000000280)='\xe4\'\xeb\xf3\xb8\xb4\xd8V\b\f\xa7\x80(\xd3\xa4D\x81\xb3\xcf>\x8f\x1a\xf8\xa9I\x0f\xe7\xc3pr\x7f\x99b\x11uM\x96\xa3\xfc\xbaj\b\x98\x8d/\xe93\xe3#\xf2Fw\xed*\x82\xe8\xcbc\xc5TE\xb3\xc2\xff\x91\xa3\xd7%+]j-\xc2]\x8bn\r\xf0\x06\xab\xb2\xd0\xed[\xcc\xf5\x9e\xf1\x8d\x8f9\xfe\xa7\x0e\xdf\xacm\x95\xd6\x0f\xdeN5\xa5\x14\xeed]V\xb9\x96\xd1\xee\xe2\v7\xbd\x11\xe3s\x8f\x02\x9e\xfe \xd2\xc4c\xcb\xb6\xd2m\x1d\xa7<\xdb\x1b\xb3\x89]\x1e\xee\xe6\xa8\x19b\xa6\x96\x10\xf9{\xbd\xd7\x10\x88^*[^\xee\xcb\x03/S\xcbo\xaa4\xcf\xba\x1dj\xf9\xb4F35\xba\x90#sb\xd5;\x90 \x8b\xffL\xb3\xc0\xf7\x81\x06\v\xf6\x9e\xe0X|\xf2\xc9\xc3\x16F\xcf\xd0\xfe\x8c\x06\xfd\x05)\xe4\xe6$=m\xbd\xa1\xb1Z\xb5\x0e\xa5D\x03}\\6,\x8f\xfd\xbc&\x00\x00\x00\x00\x03IU\xbc\xfe\xe0\xa6', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:50:10 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x54e3, 0x0) 08:50:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 11) [ 1298.844031] loop6: detected capacity change from 0 to 140 08:50:10 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x3f00) 08:50:10 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b49, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:50:10 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x80086601, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:50:10 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 1298.853962] FAULT_INJECTION: forcing a failure. [ 1298.853962] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.855624] CPU: 1 PID: 8151 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1298.856925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1298.858392] Call Trace: [ 1298.858876] [ 1298.859257] dump_stack_lvl+0x8b/0xb3 [ 1298.859827] should_fail.cold+0x5/0xa [ 1298.860484] ? create_object.isra.0+0x3a/0xa20 [ 1298.861111] should_failslab+0x5/0x10 [ 1298.861619] kmem_cache_alloc+0x5b/0x480 [ 1298.862176] create_object.isra.0+0x3a/0xa20 [ 1298.862794] ? kasan_unpoison+0x23/0x50 [ 1298.863339] kmem_cache_alloc+0x239/0x480 [ 1298.864023] __alloc_file+0x21/0x240 [ 1298.864595] alloc_empty_file+0x6d/0x170 [ 1298.865150] alloc_file+0x59/0x590 [ 1298.865658] alloc_file_pseudo+0x16a/0x250 [ 1298.866292] ? alloc_file+0x590/0x590 [ 1298.866923] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1298.867608] ? shmem_get_inode+0x5cd/0xcb0 [ 1298.868147] __shmem_file_setup+0x144/0x310 [ 1298.868681] ? _copy_from_user+0x139/0x170 [ 1298.869211] __do_sys_memfd_create+0x1c6/0x4f0 [ 1298.869787] do_syscall_64+0x3b/0x90 [ 1298.870404] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1298.871117] RIP: 0033:0x7fed060d2b19 [ 1298.871572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1298.873958] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1298.874912] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fed060d2b19 [ 1298.875915] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007fed0612c0fb [ 1298.876922] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff [ 1298.877794] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1298.878787] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000080 [ 1298.879770] [ 1298.889670] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:50:10 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x80087601, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1298.902250] loop4: detected capacity change from 0 to 140 [ 1298.923453] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1298.925685] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1298.927512] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/162/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1298.944153] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1298.946499] EXT4-fs (loop4): get root inode failed [ 1298.947118] EXT4-fs (loop4): mount failed 08:50:10 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x2, 0x0) 08:50:10 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x541b, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:50:10 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x8924, 0x0) 08:50:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 12) 08:50:10 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x4800) 08:50:10 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x801054db, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:50:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x4) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsmount(r2, 0x1, 0x88) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x140000) fsmount(r3, 0x1, 0x73) fsmount(r2, 0x1, 0x0) [ 1299.089859] FAULT_INJECTION: forcing a failure. [ 1299.089859] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.091179] CPU: 0 PID: 8183 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1299.092056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1299.093241] Call Trace: [ 1299.093505] [ 1299.093756] dump_stack_lvl+0x8b/0xb3 [ 1299.094190] should_fail.cold+0x5/0xa [ 1299.094604] ? security_file_alloc+0x34/0x170 [ 1299.095077] should_failslab+0x5/0x10 [ 1299.095481] kmem_cache_alloc+0x5b/0x480 [ 1299.095920] security_file_alloc+0x34/0x170 [ 1299.096390] __alloc_file+0xb6/0x240 [ 1299.096802] alloc_empty_file+0x6d/0x170 [ 1299.097251] alloc_file+0x59/0x590 [ 1299.097634] alloc_file_pseudo+0x16a/0x250 [ 1299.098092] ? alloc_file+0x590/0x590 [ 1299.098507] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1299.099106] ? shmem_get_inode+0x5cd/0xcb0 [ 1299.099561] __shmem_file_setup+0x144/0x310 [ 1299.100011] ? _copy_from_user+0x139/0x170 [ 1299.100457] __do_sys_memfd_create+0x1c6/0x4f0 [ 1299.100939] do_syscall_64+0x3b/0x90 [ 1299.101331] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1299.101861] RIP: 0033:0x7fed060d2b19 [ 1299.102252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1299.104148] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1299.104928] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fed060d2b19 [ 1299.105665] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007fed0612c0fb [ 1299.106432] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff [ 1299.107170] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1299.107918] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000080 [ 1299.108671] [ 1299.109457] loop6: detected capacity change from 0 to 140 [ 1299.137858] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1299.166824] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1299.177998] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1299.181986] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/163/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:50:26 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x3, 0x0) 08:50:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 08:50:26 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='rw\x00', &(0x7f0000000100)='{)#][\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:50:26 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x8927, 0x0) 08:50:26 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x801c581f, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:50:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 13) 08:50:26 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x4c00) 08:50:26 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1314.211739] FAULT_INJECTION: forcing a failure. [ 1314.211739] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.214086] CPU: 1 PID: 8207 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1314.215738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1314.217980] Call Trace: [ 1314.218490] [ 1314.218962] dump_stack_lvl+0x8b/0xb3 [ 1314.219746] should_fail.cold+0x5/0xa [ 1314.220516] ? create_object.isra.0+0x3a/0xa20 [ 1314.221438] should_failslab+0x5/0x10 [ 1314.222192] kmem_cache_alloc+0x5b/0x480 [ 1314.223008] create_object.isra.0+0x3a/0xa20 [ 1314.223892] ? kasan_unpoison+0x23/0x50 [ 1314.224694] kmem_cache_alloc+0x239/0x480 [ 1314.225532] security_file_alloc+0x34/0x170 [ 1314.226395] __alloc_file+0xb6/0x240 [ 1314.227158] alloc_empty_file+0x6d/0x170 [ 1314.227976] alloc_file+0x59/0x590 [ 1314.228692] alloc_file_pseudo+0x16a/0x250 [ 1314.229529] ? alloc_file+0x590/0x590 [ 1314.230284] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1314.231382] ? shmem_get_inode+0x5cd/0xcb0 [ 1314.232237] __shmem_file_setup+0x144/0x310 [ 1314.233091] ? _copy_from_user+0x139/0x170 [ 1314.233940] __do_sys_memfd_create+0x1c6/0x4f0 [ 1314.234860] do_syscall_64+0x3b/0x90 [ 1314.235614] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1314.236622] RIP: 0033:0x7fed060d2b19 [ 1314.237354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1314.240957] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1314.242462] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fed060d2b19 [ 1314.243863] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007fed0612c0fb [ 1314.245268] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff [ 1314.246664] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1314.248085] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000080 [ 1314.249500] [ 1314.254212] loop4: detected capacity change from 0 to 140 08:50:26 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0xc0045878, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1314.289579] loop6: detected capacity change from 0 to 140 [ 1314.310871] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1314.324306] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1314.324592] EXT4-fs (loop4): get root inode failed [ 1314.327594] EXT4-fs (loop4): mount failed 08:50:26 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x4, 0x0) [ 1314.350745] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1314.371681] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 08:50:26 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5450, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1314.394361] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/164/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:50:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 14) 08:50:26 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0xc0045878, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1314.441938] FAULT_INJECTION: forcing a failure. [ 1314.441938] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1314.443843] CPU: 0 PID: 8230 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1314.444943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1314.446436] Call Trace: [ 1314.446783] [ 1314.447093] dump_stack_lvl+0x8b/0xb3 [ 1314.447625] should_fail.cold+0x5/0xa [ 1314.448146] prepare_alloc_pages+0x17b/0x500 [ 1314.448744] __alloc_pages+0x131/0x4e0 [ 1314.449272] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1314.450086] ? lock_release+0x3b2/0x6f0 [ 1314.450621] ? avc_has_perm_noaudit+0x1c8/0x390 [ 1314.451280] ? find_held_lock+0x2c/0x110 [ 1314.451830] ? lock_release+0x3b2/0x6f0 [ 1314.452378] ? __filemap_get_folio+0x2d1/0xfd0 [ 1314.452993] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1314.453670] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1314.454424] alloc_pages_vma+0xde/0x500 [ 1314.454978] shmem_alloc_page+0x107/0x1d0 [ 1314.455547] ? shmem_mmap+0x1c0/0x1c0 [ 1314.456101] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1314.456847] ? percpu_counter_add_batch+0xb4/0x170 [ 1314.457509] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1314.458180] ? __vm_enough_memory+0x184/0x360 [ 1314.458809] shmem_getpage_gfp.constprop.0+0x651/0x2180 [ 1314.459542] ? shmem_unuse_inode+0xfb0/0xfb0 [ 1314.460130] ? ktime_get_coarse_real_ts64+0x159/0x190 [ 1314.460832] ? fault_in_readable+0x192/0x250 [ 1314.461440] ? is_valid_gup_flags+0x70/0x70 [ 1314.462029] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1314.462713] shmem_write_begin+0xfd/0x1d0 [ 1314.463289] generic_perform_write+0x208/0x510 [ 1314.463918] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 1314.464890] ? iput+0x70/0x70 [ 1314.465327] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1314.466004] ? generic_write_checks+0x2a9/0x380 [ 1314.466645] __generic_file_write_iter+0x306/0x4b0 [ 1314.467322] generic_file_write_iter+0xd7/0x220 [ 1314.467950] ? iov_iter_init+0x45/0x1b0 [ 1314.468499] new_sync_write+0x437/0x660 [ 1314.469046] ? new_sync_read+0x6f0/0x6f0 [ 1314.469606] ? x86_pmu_enable+0xa20/0xd90 [ 1314.470182] ? lock_release+0x6f0/0x6f0 [ 1314.470746] ? lock_is_held_type+0xd7/0x130 [ 1314.471357] vfs_write+0x7d1/0xae0 [ 1314.471850] __x64_sys_pwrite64+0x1fd/0x250 [ 1314.472444] ? vfs_write+0xae0/0xae0 [ 1314.472951] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1314.473658] do_syscall_64+0x3b/0x90 [ 1314.474190] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1314.474897] RIP: 0033:0x7fed06085ab7 [ 1314.475397] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1314.477835] RSP: 002b:00007fed03647f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1314.478862] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed06085ab7 [ 1314.479822] RDX: 000000000000003a RSI: 0000000020010000 RDI: 0000000000000004 [ 1314.480778] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1314.481730] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 1314.482675] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1314.483661] [ 1314.484981] loop4: detected capacity change from 0 to 140 [ 1314.491464] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 08:50:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 15) [ 1314.537031] FAULT_INJECTION: forcing a failure. [ 1314.537031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1314.538780] CPU: 0 PID: 8236 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1314.539885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1314.541387] Call Trace: [ 1314.541723] [ 1314.542027] dump_stack_lvl+0x8b/0xb3 [ 1314.542551] should_fail.cold+0x5/0xa [ 1314.543096] copy_page_from_iter_atomic+0x4e4/0x1b10 [ 1314.543798] ? iov_iter_get_pages_alloc+0x1090/0x1090 [ 1314.544499] ? fault_in_readable+0x192/0x250 [ 1314.545095] ? is_valid_gup_flags+0x70/0x70 [ 1314.545682] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1314.546367] ? shmem_write_begin+0xfd/0x1d0 [ 1314.546951] ? shmem_write_begin+0x106/0x1d0 [ 1314.547555] generic_perform_write+0x27e/0x510 [ 1314.548184] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 1314.549158] ? iput+0x70/0x70 [ 1314.549588] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1314.550266] ? generic_write_checks+0x2a9/0x380 [ 1314.550911] __generic_file_write_iter+0x306/0x4b0 [ 1314.551581] generic_file_write_iter+0xd7/0x220 [ 1314.552214] ? iov_iter_init+0x45/0x1b0 [ 1314.552761] new_sync_write+0x437/0x660 [ 1314.553298] ? new_sync_read+0x6f0/0x6f0 [ 1314.553862] ? x86_pmu_enable+0xa20/0xd90 [ 1314.554431] ? lock_release+0x6f0/0x6f0 [ 1314.555008] ? lock_is_held_type+0xd7/0x130 [ 1314.555599] vfs_write+0x7d1/0xae0 [ 1314.556099] __x64_sys_pwrite64+0x1fd/0x250 [ 1314.556691] ? vfs_write+0xae0/0xae0 [ 1314.557202] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1314.557908] do_syscall_64+0x3b/0x90 [ 1314.558424] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1314.559134] RIP: 0033:0x7fed06085ab7 [ 1314.559631] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1314.562071] RSP: 002b:00007fed03647f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1314.563103] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed06085ab7 [ 1314.564058] RDX: 000000000000003a RSI: 0000000020010000 RDI: 0000000000000004 [ 1314.565005] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1314.565962] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 1314.566926] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1314.567891] [ 1314.575028] loop4: detected capacity change from 0 to 140 08:50:26 executing program 5: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='rw\x00', &(0x7f0000000080)='rw\x00', 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x3, 0x448002) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000140)='rw\x00', 0x0, r1) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x20080, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:50:26 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x5, 0x0) [ 1314.612327] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1314.615394] EXT4-fs (loop4): get root inode failed [ 1314.616131] EXT4-fs (loop4): mount failed 08:50:26 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) fsmount(r1, 0x0, 0x3) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:50:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 16) 08:50:43 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5451, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:50:43 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0xc0189436, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:50:43 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='coda\x00', 0x0) sendfile(r0, r1, &(0x7f0000000140)=0x6, 0x2c0f) r2 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 08:50:43 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x6800) 08:50:43 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x894c, 0x0) 08:50:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x6, 0x0) 08:50:43 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 08:50:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x7, 0x0) [ 1331.490457] loop6: detected capacity change from 0 to 140 08:50:43 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0xc020660b, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1331.525157] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1331.540199] FAULT_INJECTION: forcing a failure. [ 1331.540199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1331.542649] CPU: 0 PID: 8279 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1331.544257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1331.546462] Call Trace: [ 1331.546961] [ 1331.547423] dump_stack_lvl+0x8b/0xb3 [ 1331.548180] should_fail.cold+0x5/0xa [ 1331.548936] copy_page_from_iter_atomic+0x4e4/0x1b10 [ 1331.549958] ? iov_iter_get_pages_alloc+0x1090/0x1090 [ 1331.550958] ? fault_in_readable+0x192/0x250 [ 1331.551832] ? is_valid_gup_flags+0x70/0x70 [ 1331.552666] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1331.553649] ? shmem_write_begin+0xfd/0x1d0 [ 1331.554491] ? shmem_write_begin+0x106/0x1d0 [ 1331.555370] generic_perform_write+0x27e/0x510 [ 1331.556266] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 1331.557814] ? iput+0x70/0x70 [ 1331.558659] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1331.559865] ? generic_write_checks+0x2a9/0x380 [ 1331.560997] __generic_file_write_iter+0x306/0x4b0 [ 1331.562187] generic_file_write_iter+0xd7/0x220 [ 1331.563320] ? iov_iter_init+0x45/0x1b0 [ 1331.564286] new_sync_write+0x437/0x660 [ 1331.565233] ? new_sync_read+0x6f0/0x6f0 [ 1331.566205] ? x86_pmu_enable+0xa20/0xd90 [ 1331.567288] ? lock_release+0x6f0/0x6f0 [ 1331.568106] ? lock_is_held_type+0xd7/0x130 [ 1331.568974] vfs_write+0x7d1/0xae0 [ 1331.569692] __x64_sys_pwrite64+0x1fd/0x250 [ 1331.570579] ? vfs_write+0xae0/0xae0 [ 1331.571339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1331.572381] do_syscall_64+0x3b/0x90 [ 1331.573123] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1331.574136] RIP: 0033:0x7fed06085ab7 [ 1331.574873] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1331.578499] RSP: 002b:00007fed03647f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1331.580004] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed06085ab7 [ 1331.581398] RDX: 0000000000000029 RSI: 0000000020010100 RDI: 0000000000000004 [ 1331.582788] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1331.584189] R10: 00000000000007e0 R11: 0000000000000293 R12: 0000000000000004 [ 1331.585581] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1331.586998] [ 1331.589619] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:50:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x10, 0x0) [ 1331.596202] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/165/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1331.608485] loop4: detected capacity change from 0 to 140 [ 1331.773447] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1331.776405] EXT4-fs (loop4): get root inode failed [ 1331.776940] EXT4-fs (loop4): mount failed 08:50:59 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x2, 0x1, [@remote]}) 08:50:59 executing program 1: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0xc0189436, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:50:59 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r3, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='(\xa6\x00', &(0x7f00000000c0)='(\x00', 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:50:59 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x6c00) 08:50:59 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:50:59 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454c8, 0x0) [ 1347.392966] loop6: detected capacity change from 0 to 140 08:50:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x48, 0x0) 08:50:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 17) [ 1347.402974] FAULT_INJECTION: forcing a failure. [ 1347.402974] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1347.404697] CPU: 1 PID: 8315 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1347.405843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1347.407508] Call Trace: [ 1347.407924] [ 1347.408283] dump_stack_lvl+0x8b/0xb3 [ 1347.408846] should_fail.cold+0x5/0xa [ 1347.409371] prepare_alloc_pages+0x17b/0x500 [ 1347.409961] __alloc_pages+0x131/0x4e0 [ 1347.410498] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1347.411370] ? lock_release+0x3b2/0x6f0 [ 1347.411923] ? avc_has_perm_noaudit+0x1c8/0x390 [ 1347.412575] ? find_held_lock+0x2c/0x110 [ 1347.413130] ? lock_release+0x3b2/0x6f0 [ 1347.413624] ? __filemap_get_folio+0x2d1/0xfd0 [ 1347.414266] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1347.414959] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1347.415748] alloc_pages_vma+0xde/0x500 [ 1347.416278] shmem_alloc_page+0x107/0x1d0 [ 1347.416842] ? shmem_mmap+0x1c0/0x1c0 [ 1347.417392] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1347.418147] ? percpu_counter_add_batch+0xb4/0x170 [ 1347.418832] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1347.419553] ? __vm_enough_memory+0x184/0x360 [ 1347.420174] shmem_getpage_gfp.constprop.0+0x651/0x2180 [ 1347.420919] ? shmem_unuse_inode+0xfb0/0xfb0 [ 1347.421522] ? ktime_get_coarse_real_ts64+0x159/0x190 [ 1347.422245] ? fault_in_readable+0x192/0x250 [ 1347.422870] ? is_valid_gup_flags+0x70/0x70 [ 1347.423582] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1347.424292] shmem_write_begin+0xfd/0x1d0 [ 1347.424874] generic_perform_write+0x208/0x510 [ 1347.425518] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 1347.426476] ? iput+0x70/0x70 [ 1347.426890] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1347.427565] ? generic_write_checks+0x2a9/0x380 [ 1347.428180] __generic_file_write_iter+0x306/0x4b0 [ 1347.428823] generic_file_write_iter+0xd7/0x220 [ 1347.429422] ? iov_iter_init+0x45/0x1b0 [ 1347.429947] new_sync_write+0x437/0x660 [ 1347.430475] ? new_sync_read+0x6f0/0x6f0 [ 1347.431018] ? x86_pmu_enable+0xa20/0xd90 [ 1347.431614] ? lock_release+0x6f0/0x6f0 [ 1347.432167] ? lock_is_held_type+0xd7/0x130 [ 1347.432772] vfs_write+0x7d1/0xae0 [ 1347.433260] __x64_sys_pwrite64+0x1fd/0x250 [ 1347.433842] ? vfs_write+0xae0/0xae0 [ 1347.434352] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1347.435064] do_syscall_64+0x3b/0x90 [ 1347.435633] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1347.436308] RIP: 0033:0x7fed06085ab7 [ 1347.436790] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1347.439200] RSP: 002b:00007fed03647f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1347.440247] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed06085ab7 [ 1347.441196] RDX: 0000000000000043 RSI: 0000000020010ce0 RDI: 0000000000000004 [ 1347.442160] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1347.443149] R10: 0000000000008c60 R11: 0000000000000293 R12: 0000000000000004 [ 1347.444149] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002 [ 1347.445147] [ 1347.453004] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1347.470224] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:50:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x4c, 0x0) [ 1347.502164] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1347.518075] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/166/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:50:59 executing program 1: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) fsmount(r1, 0x0, 0x3) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:50:59 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x300, 0x1, [@remote]}) 08:50:59 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454c9, 0x0) 08:50:59 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x5460, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:50:59 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x7400) [ 1347.694243] loop4: detected capacity change from 0 to 140 [ 1347.709613] EXT4-fs error (device loop4): __ext4_fill_super:5273: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1347.712784] EXT4-fs (loop4): get root inode failed [ 1347.713720] EXT4-fs (loop4): mount failed 08:50:59 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x2, [@remote]}) 08:50:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 18) 08:50:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x68, 0x0) [ 1347.781817] loop6: detected capacity change from 0 to 140 [ 1347.785749] FAULT_INJECTION: forcing a failure. [ 1347.785749] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.787995] CPU: 0 PID: 8352 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1347.789074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1347.790580] Call Trace: [ 1347.790925] [ 1347.791228] dump_stack_lvl+0x8b/0xb3 [ 1347.791831] should_fail.cold+0x5/0xa [ 1347.792342] ? xas_alloc+0x332/0x440 [ 1347.792847] should_failslab+0x5/0x10 [ 1347.793373] kmem_cache_alloc+0x5b/0x480 [ 1347.793916] xas_alloc+0x332/0x440 [ 1347.794390] xas_create+0x607/0x1030 [ 1347.794895] ? lock_acquire+0x1b2/0x4d0 [ 1347.795474] xas_store+0x90/0x1c40 [ 1347.795953] ? xas_find_conflict+0x4a6/0x9e0 [ 1347.796601] shmem_add_to_page_cache+0x1179/0x15f0 [ 1347.797271] ? shmem_writepage+0xed0/0xed0 [ 1347.797840] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1347.798489] shmem_getpage_gfp.constprop.0+0x796/0x2180 [ 1347.799194] ? shmem_unuse_inode+0xfb0/0xfb0 [ 1347.799785] ? ktime_get_coarse_real_ts64+0x159/0x190 [ 1347.800439] ? fault_in_readable+0x192/0x250 [ 1347.801011] ? is_valid_gup_flags+0x70/0x70 [ 1347.801567] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1347.802289] shmem_write_begin+0xfd/0x1d0 [ 1347.802838] generic_perform_write+0x208/0x510 [ 1347.803480] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 1347.804430] ? iput+0x70/0x70 [ 1347.804867] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1347.805555] ? generic_write_checks+0x2a9/0x380 [ 1347.806164] __generic_file_write_iter+0x306/0x4b0 [ 1347.806794] generic_file_write_iter+0xd7/0x220 [ 1347.807423] ? iov_iter_init+0x45/0x1b0 [ 1347.807931] new_sync_write+0x437/0x660 [ 1347.808444] ? new_sync_read+0x6f0/0x6f0 [ 1347.808962] ? x86_pmu_enable+0xa20/0xd90 [ 1347.809508] ? lock_release+0x6f0/0x6f0 [ 1347.810049] ? lock_is_held_type+0xd7/0x130 [ 1347.810626] vfs_write+0x7d1/0xae0 [ 1347.811102] __x64_sys_pwrite64+0x1fd/0x250 [ 1347.811732] ? vfs_write+0xae0/0xae0 [ 1347.812208] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1347.812876] do_syscall_64+0x3b/0x90 [ 1347.813363] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1347.814029] RIP: 0033:0x7fed06085ab7 [ 1347.814503] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1347.816942] RSP: 002b:00007fed03647f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1347.817953] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed06085ab7 [ 1347.818922] RDX: 0000000000000043 RSI: 0000000020010ce0 RDI: 0000000000000004 [ 1347.819924] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1347.820867] R10: 0000000000008c60 R11: 0000000000000293 R12: 0000000000000004 [ 1347.821825] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002 [ 1347.822834] [ 1347.870164] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1347.903683] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1347.957758] loop4: detected capacity change from 0 to 140 [ 1347.987253] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1347.991184] EXT4-fs (loop4): get root inode failed [ 1347.991892] EXT4-fs (loop4): mount failed 08:51:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 19) 08:51:18 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454ca, 0x0) 08:51:18 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x300, [@remote]}) 08:51:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x6c, 0x0) 08:51:18 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r2 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000580)={0x21100, 0x0, &(0x7f0000000440), &(0x7f0000000480), {0x28}, &(0x7f00000004c0)=""/29, 0x1d, &(0x7f0000000500)=""/24, &(0x7f0000000540)=[r2, r2], 0x2}, 0x58) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7, r2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000, 0xa6) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r4 = syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xaaf, 0x9, &(0x7f0000000640)=[{&(0x7f0000000140)="bd841e2564a1ea23f4504cc90fcb34a6e559841e75517e9634e99af3fbf688c015bdad60dd313978", 0x28, 0x95}, {&(0x7f0000000180)="a23d4220e3ee3836e267a90725cd46738322ec4ec74ae26a40c2cf0fe17d0245d139ea4994d461d36deca042d02f00949fea38b0a7dd370f17d93dcc8d40666c7db02b5d5f065e07677136179145bf730c8eabaa622907fda16a8f7264ba612620716721b31aea2bfa49e7953946d0a1af9f77d5b0c7bc97a78d3ff82d65058b546708c3cdbe0149a8f05decc84120ed2005c65b4f76afcb8aff07852a163585", 0xa0, 0x200}, {&(0x7f0000000240)="4d6acbb694f7a6269477851ef7c28b1fad0ae7615162c03b1c6dd0cd15c900ed3261d27a266c8105e6b07db7b774b32e8edded26552962eb2f48292ac13e425cd18928e74f12c0094512f0c1b33b83", 0x4f}, {&(0x7f00000002c0)="a0d5972b1665e81ccbcf57282a00f97a4cd432c5413d5ff4cdc84207ed3f15a9c105ca71e2d6f7e0d9670625c091e6683b027b30831f49195de0bf97d3ca22a7aac7bf9437e4fc6c67c6aa666bfbf00e7e3a8063cf2d1685812773092b7306bdd1aa7c21eb25d4c749e4e80e52149e2af3a2dfcd2f16237f", 0x78, 0xe8}, {&(0x7f0000000340)="80bcbcb7cf976f6ae36caefc5fdb4db42917d5a57e0794f3c7a0f15829f8c3dec323fa3ad1e5c85b82d76b1e0c03e74b6ccdb2cb73d8dacdcb0814e87e789a05a74fa5b1051c9d0326b54202f4a0eb959a9b2245710fe7d74f23d3d3e121e5ad0b420f8f76637d1a6dff1984ea6c2151dff239ebcc9a801417740d", 0x7b, 0x100000000}, {&(0x7f00000003c0)="60036d417ea3a2c25434919471b1328ecafb930c3b5518be2131848c8dca074dde40767073a573822e67d22de02a2e13ccf9ec30253115f0f538cbc1c020f18102", 0x41, 0x8000}, {&(0x7f0000000440)="386458279cc6705dfe7b7497ab80e07d91b1bb7ca047bd654d67e8d07b2ef8b97a40f397cbe835073f070bb4f7f0d016e4fb2d8d28610477f7edc5cc4a9ad663d08b65b96d639406a7864420393c3dc548ca65547434abdd0ffb64fdb8829ee86ccf6c6ece5c64d9e36ac51249cfd86e2908bcd4ef66e55e03d416b29e4d2e4f1949a51e255578c1b34491", 0x8b, 0x200}, {&(0x7f0000000500), 0x0, 0x2}, {&(0x7f0000000540)="ac109b14010f06b3d19e5e05252e08197485449a20f1c8df2a2b89e750f9d0618240c43d34baba5fb2929e39228e8cef888a0313b7f4ccb0df82ffa494fc813e9d2893e58eb38a723d48bf0453f4a5ff51929ad758cabd5d285359d50b3c4802ae5afd4007f9d407d211b3343d394ffa7fa9e301d42b0dfc833e02af8c28cdd29dc1ab7a5bca66e380bedea6b23316aaf0beba43a27b7f0a6579a1e016e0a70d317489d63852e6765e1048aa1dd5d7ad5d9f15bd7d0d974af9f05160006e6e30aa8b342c4c4383", 0xc7, 0x3ff}], 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB=',^-,&\'#,{,rw\x00,/#+#/).,subj_user=rpc_pipefs\x00,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c684673682c646566636f77746578743d726f6f0200657561643c", @ANYRESDEC, @ANYBLOB="2c736d61636b66736861743d7277002c7063723d30303030303030303030303030303030303032332c736d61636b66736465663dbf7b3a2c666f776e65723e", @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) openat(r4, &(0x7f0000000500)='./file0\x00', 0x670903, 0x8) 08:51:18 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x54e3, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:51:18 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x7a00) 08:51:18 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x6c00) [ 1366.438636] loop1: detected capacity change from 0 to 140 [ 1366.450367] loop6: detected capacity change from 0 to 140 [ 1366.466393] FAULT_INJECTION: forcing a failure. [ 1366.466393] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.467632] CPU: 0 PID: 8383 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1366.468509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1366.469719] Call Trace: [ 1366.469994] [ 1366.470237] dump_stack_lvl+0x8b/0xb3 [ 1366.470668] should_fail.cold+0x5/0xa [ 1366.471084] ? lock_downgrade+0x6d0/0x6d0 [ 1366.471550] ? create_object.isra.0+0x3a/0xa20 [ 1366.472077] should_failslab+0x5/0x10 [ 1366.472491] kmem_cache_alloc+0x5b/0x480 [ 1366.472939] create_object.isra.0+0x3a/0xa20 [ 1366.473424] ? kasan_unpoison+0x23/0x50 [ 1366.473864] kmem_cache_alloc+0x239/0x480 [ 1366.474333] xas_alloc+0x332/0x440 [ 1366.474723] xas_create+0x607/0x1030 [ 1366.475127] ? lock_acquire+0x1b2/0x4d0 [ 1366.475583] xas_store+0x90/0x1c40 [ 1366.475972] ? xas_find_conflict+0x4a6/0x9e0 [ 1366.476457] shmem_add_to_page_cache+0x1179/0x15f0 [ 1366.476997] ? shmem_writepage+0xed0/0xed0 [ 1366.477479] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1366.478025] shmem_getpage_gfp.constprop.0+0x796/0x2180 [ 1366.478614] ? shmem_unuse_inode+0xfb0/0xfb0 [ 1366.479094] ? ktime_get_coarse_real_ts64+0x159/0x190 [ 1366.479663] ? fault_in_readable+0x192/0x250 [ 1366.480148] ? is_valid_gup_flags+0x70/0x70 [ 1366.480621] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1366.481168] shmem_write_begin+0xfd/0x1d0 [ 1366.481622] generic_perform_write+0x208/0x510 [ 1366.482132] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 1366.482923] ? iput+0x70/0x70 [ 1366.483267] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1366.483835] ? generic_write_checks+0x2a9/0x380 [ 1366.484348] __generic_file_write_iter+0x306/0x4b0 [ 1366.484502] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1366.484883] generic_file_write_iter+0xd7/0x220 [ 1366.487074] ? iov_iter_init+0x45/0x1b0 [ 1366.487512] new_sync_write+0x437/0x660 [ 1366.487962] ? new_sync_read+0x6f0/0x6f0 [ 1366.488406] ? x86_pmu_enable+0xa20/0xd90 [ 1366.488857] ? lock_release+0x6f0/0x6f0 [ 1366.489301] ? lock_is_held_type+0xd7/0x130 [ 1366.489770] vfs_write+0x7d1/0xae0 [ 1366.490162] __x64_sys_pwrite64+0x1fd/0x250 [ 1366.490628] ? vfs_write+0xae0/0xae0 [ 1366.491039] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1366.491619] do_syscall_64+0x3b/0x90 [ 1366.492032] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1366.492574] RIP: 0033:0x7fed06085ab7 [ 1366.492972] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1366.494945] RSP: 002b:00007fed03647f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1366.495784] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed06085ab7 [ 1366.496532] RDX: 0000000000000043 RSI: 0000000020010ce0 RDI: 0000000000000004 [ 1366.497266] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1366.498021] R10: 0000000000008c60 R11: 0000000000000293 R12: 0000000000000004 [ 1366.498787] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002 [ 1366.499568] [ 1366.523723] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1366.527663] loop5: detected capacity change from 0 to 264192 [ 1366.529994] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1366.530545] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1366.537473] EXT4-fs error (device loop1): __ext4_new_inode:1071: comm syz-executor.1: reserved inode found cleared - inode=1 [ 1366.540471] EXT4-fs error (device loop1): ext4_readdir:258: inode #2: block 4: comm syz-executor.1: path /syzkaller-testdir476242503/syzkaller.l8aIpI/130/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1366.542228] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1366.549400] nfs4: Unknown parameter '^-' [ 1366.552313] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/168/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:51:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x74, 0x0) [ 1366.581347] loop4: detected capacity change from 0 to 140 08:51:18 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x8924, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:51:18 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:51:18 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x6c00) [ 1366.643953] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1366.652291] EXT4-fs (loop4): get root inode failed [ 1366.653261] EXT4-fs (loop4): mount failed 08:51:18 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454cb, 0x0) 08:51:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 20) 08:51:18 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x8927, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1366.729874] loop5: detected capacity change from 0 to 264192 [ 1366.731546] nfs4: Unknown parameter '^-' [ 1366.759203] FAULT_INJECTION: forcing a failure. [ 1366.759203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1366.761855] CPU: 0 PID: 8410 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1366.763563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1366.765955] Call Trace: [ 1366.766488] [ 1366.766954] dump_stack_lvl+0x8b/0xb3 [ 1366.767782] should_fail.cold+0x5/0xa [ 1366.768600] copy_page_from_iter_atomic+0x4e4/0x1b10 [ 1366.769706] ? iov_iter_get_pages_alloc+0x1090/0x1090 [ 1366.770808] ? fault_in_readable+0x192/0x250 [ 1366.771759] ? is_valid_gup_flags+0x70/0x70 [ 1366.772676] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1366.773729] ? shmem_write_begin+0xfd/0x1d0 [ 1366.774643] ? shmem_write_begin+0x106/0x1d0 [ 1366.775538] generic_perform_write+0x27e/0x510 [ 1366.776526] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 1366.778043] ? iput+0x70/0x70 [ 1366.778726] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1366.779785] ? generic_write_checks+0x2a9/0x380 [ 1366.780782] __generic_file_write_iter+0x306/0x4b0 [ 1366.781820] generic_file_write_iter+0xd7/0x220 [ 1366.782789] ? iov_iter_init+0x45/0x1b0 [ 1366.783648] new_sync_write+0x437/0x660 [ 1366.784493] ? new_sync_read+0x6f0/0x6f0 [ 1366.785361] ? x86_pmu_enable+0xa20/0xd90 [ 1366.786249] ? lock_release+0x6f0/0x6f0 [ 1366.787111] ? lock_is_held_type+0xd7/0x130 [ 1366.788046] vfs_write+0x7d1/0xae0 [ 1366.788813] __x64_sys_pwrite64+0x1fd/0x250 [ 1366.789735] ? vfs_write+0xae0/0xae0 [ 1366.790536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1366.791639] do_syscall_64+0x3b/0x90 [ 1366.792439] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1366.793534] RIP: 0033:0x7fed06085ab7 [ 1366.794319] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1366.798208] RSP: 002b:00007fed03647f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1366.799836] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed06085ab7 [ 1366.801367] RDX: 0000000000000043 RSI: 0000000020010ce0 RDI: 0000000000000004 [ 1366.802882] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1366.804420] R10: 0000000000008c60 R11: 0000000000000293 R12: 0000000000000004 [ 1366.805943] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002 [ 1366.807492] 08:51:18 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='/dev/sg#\x00', &(0x7f0000000140)='^%{\x00', 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000580)={0x21100, 0x0, &(0x7f0000000440), &(0x7f0000000480), {0x28}, &(0x7f00000004c0)=""/29, 0x1d, &(0x7f0000000500)=""/24, &(0x7f0000000540)=[r3, r3], 0x2}, 0x58) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x20007, 0x1, 0x1ff, 0x8000, r3}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x7, 0x6, 0x5, 0x3}, {0x4, 0xd2, 0x1, 0x6}, {0x800, 0x2, 0x4, 0x9}, {0x96, 0x80, 0x9, 0x2}, {0x101, 0x81, 0x7, 0x6}, {0x2, 0xd8, 0xc2, 0x3}, {0x1, 0x6, 0x1, 0x2}]}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) close_range(r1, r4, 0x2) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x292800, 0x0) pwrite64(r5, &(0x7f00000001c0)="f95848ce272e626e63ef8dc7e38dd33ef79c3f5b", 0x14, 0x9a) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:51:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x7a, 0x0) 08:51:18 executing program 1: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x8924, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:51:18 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xa807) [ 1366.902887] loop4: detected capacity change from 0 to 140 [ 1366.918755] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) 08:51:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x300, 0x0) [ 1366.925393] EXT4-fs (loop4): get root inode failed [ 1366.926143] EXT4-fs (loop4): mount failed 08:51:18 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@random, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @empty]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000080)=0x5) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000002c0)=""/221) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'xfrm0\x00'}) 08:51:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 21) 08:51:32 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xc000) 08:51:32 executing program 1: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454c9, 0x0) 08:51:32 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='rpc_pipefs\x00', &(0x7f0000000140)='\x00', 0x0) r2 = fsmount(r1, 0x0, 0x2) fsmount(r0, 0x0, 0x4) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000000c0)='rw\x00', 0x0, 0x0) 08:51:32 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x500, 0x0) 08:51:32 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x894c, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:51:32 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 08:51:32 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454cc, 0x0) [ 1380.848632] FAULT_INJECTION: forcing a failure. [ 1380.848632] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.850363] CPU: 0 PID: 8451 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1380.851610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1380.853309] Call Trace: [ 1380.853688] [ 1380.854011] dump_stack_lvl+0x8b/0xb3 [ 1380.854607] should_fail.cold+0x5/0xa [ 1380.855166] ? getname_flags.part.0+0x50/0x4f0 [ 1380.855862] should_failslab+0x5/0x10 [ 1380.856422] kmem_cache_alloc+0x5b/0x480 [ 1380.857033] getname_flags.part.0+0x50/0x4f0 [ 1380.857710] getname+0x8e/0xd0 [ 1380.858197] do_sys_openat2+0xf5/0x4d0 [ 1380.858772] ? build_open_flags+0x6f0/0x6f0 [ 1380.859407] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1380.860241] __x64_sys_openat+0x13f/0x1f0 [ 1380.860680] ? __x64_sys_open+0x1c0/0x1c0 [ 1380.861115] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1380.861648] do_syscall_64+0x3b/0x90 [ 1380.862040] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1380.862563] RIP: 0033:0x7fed06085a04 [ 1380.862941] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1380.864821] RSP: 002b:00007fed03647ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1380.865587] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed06085a04 [ 1380.866315] RDX: 0000000000000002 RSI: 00007fed03648000 RDI: 00000000ffffff9c [ 1380.867036] RBP: 00007fed03648000 R08: 0000000000000000 R09: ffffffffffffffff [ 1380.867763] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1380.868500] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1380.869237] [ 1380.903556] loop6: detected capacity change from 0 to 140 08:51:32 executing program 1: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='/dev/sg#\x00', &(0x7f0000000140)='^%{\x00', 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000580)={0x21100, 0x0, &(0x7f0000000440), &(0x7f0000000480), {0x28}, &(0x7f00000004c0)=""/29, 0x1d, &(0x7f0000000500)=""/24, &(0x7f0000000540)=[r3, r3], 0x2}, 0x58) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x20007, 0x1, 0x1ff, 0x8000, r3}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x7, 0x6, 0x5, 0x3}, {0x4, 0xd2, 0x1, 0x6}, {0x800, 0x2, 0x4, 0x9}, {0x96, 0x80, 0x9, 0x2}, {0x101, 0x81, 0x7, 0x6}, {0x2, 0xd8, 0xc2, 0x3}, {0x1, 0x6, 0x1, 0x2}]}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) close_range(r1, r4, 0x2) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x292800, 0x0) pwrite64(r5, &(0x7f00000001c0)="f95848ce272e626e63ef8dc7e38dd33ef79c3f5b", 0x14, 0x9a) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:51:32 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x58, &(0x7f0000000100)=0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000002c0)={{r0}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000140)={0x1, 0x3, 0x200000000000000, 0x5, {0x22, 0x550, 0xffffffff00000001, 0x100000001, 0x80000000}, [0x81, 0x80000000, 0x0]}}, @name="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"}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1380.953710] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1380.981914] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1380.992123] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/170/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:51:32 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x600, 0x0) 08:51:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 22) [ 1381.041356] FAULT_INJECTION: forcing a failure. [ 1381.041356] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.044109] CPU: 0 PID: 8479 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1381.045992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1381.048366] Call Trace: [ 1381.048919] [ 1381.049388] dump_stack_lvl+0x8b/0xb3 [ 1381.050191] should_fail.cold+0x5/0xa [ 1381.050975] ? create_object.isra.0+0x3a/0xa20 [ 1381.051968] should_failslab+0x5/0x10 [ 1381.052767] kmem_cache_alloc+0x5b/0x480 [ 1381.053641] create_object.isra.0+0x3a/0xa20 [ 1381.054577] ? kasan_unpoison+0x23/0x50 [ 1381.055437] kmem_cache_alloc+0x239/0x480 [ 1381.056337] getname_flags.part.0+0x50/0x4f0 [ 1381.057292] getname+0x8e/0xd0 [ 1381.057991] do_sys_openat2+0xf5/0x4d0 [ 1381.058821] ? build_open_flags+0x6f0/0x6f0 [ 1381.059719] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1381.060917] __x64_sys_openat+0x13f/0x1f0 [ 1381.061797] ? __x64_sys_open+0x1c0/0x1c0 [ 1381.062617] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1381.063717] do_syscall_64+0x3b/0x90 [ 1381.064531] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1381.065628] RIP: 0033:0x7fed06085a04 [ 1381.066413] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1381.070221] RSP: 002b:00007fed03647ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1381.071779] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed06085a04 [ 1381.073305] RDX: 0000000000000002 RSI: 00007fed03648000 RDI: 00000000ffffff9c [ 1381.074785] RBP: 00007fed03648000 R08: 0000000000000000 R09: ffffffffffffffff [ 1381.076302] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1381.077809] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1381.079269] 08:51:32 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ipvlan0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'wlan1\x00'}) 08:51:33 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454c8, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:51:33 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454cd, 0x0) 08:51:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x700, 0x0) 08:51:33 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xff0f) 08:51:33 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xe) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000100)={0x1}) fsetxattr$security_selinux(r2, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:update_modules_exec_t:s0\x00', 0x2b, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1381.363956] loop4: detected capacity change from 0 to 140 08:51:33 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x40000) [ 1381.394122] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1381.402651] EXT4-fs (loop4): get root inode failed [ 1381.404144] EXT4-fs (loop4): mount failed [ 1381.447441] loop6: detected capacity change from 0 to 140 [ 1381.486887] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1381.496493] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1381.504211] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1381.508153] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/172/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1394.896456] FAULT_INJECTION: forcing a failure. [ 1394.896456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1394.899807] CPU: 1 PID: 8516 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1394.902019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 08:51:46 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) pwrite64(r2, &(0x7f0000000100)="cc1155e6c873fed98fd99e5cb793cda4295f4dd56269", 0x16, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0x3, [@empty, @random="740a8e44e781", @local]}) 08:51:46 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x200000) 08:51:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 23) 08:51:46 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x4800, 0x0) 08:51:46 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x80000000}}, './file0\x00'}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='\x00', &(0x7f0000000140)='posixacl\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000080)='posixacl\x00', 0x0, 0x0) 08:51:46 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454ce, 0x0) 08:51:46 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454c9, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1394.905023] Call Trace: [ 1394.905994] [ 1394.906598] dump_stack_lvl+0x8b/0xb3 [ 1394.907581] should_fail.cold+0x5/0xa [ 1394.908623] strncpy_from_user+0x34/0x3e0 [ 1394.909735] getname_flags.part.0+0x95/0x4f0 [ 1394.910900] getname+0x8e/0xd0 [ 1394.911750] do_sys_openat2+0xf5/0x4d0 [ 1394.912820] ? build_open_flags+0x6f0/0x6f0 [ 1394.913956] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1394.915381] __x64_sys_openat+0x13f/0x1f0 [ 1394.916498] ? __x64_sys_open+0x1c0/0x1c0 [ 1394.917610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1394.918992] do_syscall_64+0x3b/0x90 [ 1394.919990] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1394.921388] RIP: 0033:0x7fed06085a04 [ 1394.922357] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1394.927283] RSP: 002b:00007fed03647ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1394.929426] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed06085a04 [ 1394.931297] RDX: 0000000000000002 RSI: 00007fed03648000 RDI: 00000000ffffff9c 08:51:46 executing program 1: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ipvlan0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'wlan1\x00'}) [ 1394.933174] RBP: 00007fed03648000 R08: 0000000000000000 R09: ffffffffffffffff [ 1394.935227] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1394.937145] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1394.939050] [ 1394.980252] loop6: detected capacity change from 0 to 140 [ 1395.021247] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1395.045978] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1395.060423] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1395.074451] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/173/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:51:46 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) fsmount(r1, 0x1, 0x1) 08:51:46 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x4c00, 0x0) 08:51:47 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:51:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 24) [ 1395.293839] FAULT_INJECTION: forcing a failure. [ 1395.293839] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.295367] CPU: 0 PID: 8546 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1395.296399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1395.297816] Call Trace: [ 1395.298140] [ 1395.298421] dump_stack_lvl+0x8b/0xb3 [ 1395.298914] should_fail.cold+0x5/0xa [ 1395.299408] ? __alloc_file+0x21/0x240 [ 1395.299929] should_failslab+0x5/0x10 [ 1395.300438] kmem_cache_alloc+0x5b/0x480 [ 1395.300968] __alloc_file+0x21/0x240 [ 1395.301470] alloc_empty_file+0x6d/0x170 [ 1395.301998] path_openat+0xe1/0x28a0 [ 1395.302485] ? path_lookupat+0x850/0x850 [ 1395.302987] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1395.303634] ? lock_is_held_type+0xd7/0x130 [ 1395.304210] do_filp_open+0x1aa/0x400 [ 1395.304685] ? may_open_dev+0xf0/0xf0 [ 1395.305173] ? lock_release+0x3b2/0x6f0 [ 1395.305662] ? alloc_fd+0x2f0/0x670 [ 1395.306126] ? lock_downgrade+0x6d0/0x6d0 [ 1395.306670] ? rwlock_bug.part.0+0x90/0x90 [ 1395.307220] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1395.307921] ? _find_next_bit+0x1e5/0x260 [ 1395.308488] ? _raw_spin_unlock+0x24/0x40 [ 1395.309067] ? alloc_fd+0x2f0/0x670 [ 1395.309676] do_sys_openat2+0x16d/0x4d0 [ 1395.310167] ? build_open_flags+0x6f0/0x6f0 [ 1395.310717] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1395.311391] __x64_sys_openat+0x13f/0x1f0 [ 1395.311898] ? __x64_sys_open+0x1c0/0x1c0 [ 1395.312476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1395.313118] do_syscall_64+0x3b/0x90 [ 1395.313607] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1395.314250] RIP: 0033:0x7fed06085a04 [ 1395.314731] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1395.317039] RSP: 002b:00007fed03647ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1395.317982] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed06085a04 [ 1395.318850] RDX: 0000000000000002 RSI: 00007fed03648000 RDI: 00000000ffffff9c [ 1395.319709] RBP: 00007fed03648000 R08: 0000000000000000 R09: ffffffffffffffff [ 1395.320669] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1395.321594] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1395.322513] 08:51:47 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xc00000) [ 1395.419843] loop6: detected capacity change from 0 to 140 [ 1395.433902] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1395.441611] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1395.448663] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1395.454645] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/174/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:52:01 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0xa85, 0x0, 0x0, 0x0, 0xe, "c000"}) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x6, 0x2, 0x7fffffff, 0x5, 0x11, "057863668e4bdc1cdfcfe1a85d0166a8e85396"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f00000002c0)={{0xffffffffffffffff, 0x1, 0xbd60, 0x7, 0x28}, 0x10000, 0x22b386c1, 'id0\x00', 'timer1\x00', 0x0, 0x3, 0x2d32, 0x2, 0x1e}) r4 = openat$incfs(r3, &(0x7f0000000080)='.pending_reads\x00', 0x400300, 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000140)=ANY=[@ANYBLOB="ff0300000000000000000000000000000600000007000000060000000000000002000000000000000900000000000000090000000000000000000000000000000000000000000000000200000000000000000000000000000600000000000000000000000000000000000000000000000000000000000050498e8d0000000000021000000000000000000000000000000100000000000000020000000000000005000000000000000000000000000000000000000000000000240000000000000000000000000000040000000000000003000000000000007a0000000000000000000000000000000000000000000000000400000000000000000000000000003f000000000000000000007e00000000000000800000000000000000000000000000000000000000092c0000000000000000000000000000eb590000000000000900000000000000050000000000000000000000000000000000000000000000000400"/368]) 08:52:01 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d0, 0x0) 08:52:01 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1410.090646] FAULT_INJECTION: forcing a failure. [ 1410.090646] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.092466] CPU: 1 PID: 8568 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1410.093597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1410.095163] Call Trace: [ 1410.095528] [ 1410.095846] dump_stack_lvl+0x8b/0xb3 [ 1410.096458] should_fail.cold+0x5/0xa [ 1410.097004] ? create_object.isra.0+0x3a/0xa20 [ 1410.097669] should_failslab+0x5/0x10 [ 1410.098209] kmem_cache_alloc+0x5b/0x480 [ 1410.098789] create_object.isra.0+0x3a/0xa20 [ 1410.099411] ? kasan_unpoison+0x23/0x50 08:52:01 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'virt_wifi0\x00'}) 08:52:01 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x6800, 0x0) 08:52:01 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x40000) 08:52:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 25) 08:52:01 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xe0ffff) [ 1410.099978] kmem_cache_alloc+0x239/0x480 [ 1410.100724] __alloc_file+0x21/0x240 [ 1410.101275] alloc_empty_file+0x6d/0x170 [ 1410.101851] path_openat+0xe1/0x28a0 [ 1410.102394] ? path_lookupat+0x850/0x850 [ 1410.102977] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1410.103718] ? lock_is_held_type+0xd7/0x130 [ 1410.104352] do_filp_open+0x1aa/0x400 [ 1410.104891] ? may_open_dev+0xf0/0xf0 [ 1410.105447] ? lock_release+0x3b2/0x6f0 [ 1410.106032] ? alloc_fd+0x2f0/0x670 [ 1410.106547] ? lock_downgrade+0x6d0/0x6d0 [ 1410.107134] ? rwlock_bug.part.0+0x90/0x90 [ 1410.107729] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1410.108519] ? _find_next_bit+0x1e5/0x260 [ 1410.109097] ? _raw_spin_unlock+0x24/0x40 [ 1410.109683] ? alloc_fd+0x2f0/0x670 [ 1410.110197] do_sys_openat2+0x16d/0x4d0 [ 1410.110759] ? build_open_flags+0x6f0/0x6f0 [ 1410.111361] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1410.112141] __x64_sys_openat+0x13f/0x1f0 [ 1410.112746] ? __x64_sys_open+0x1c0/0x1c0 [ 1410.113347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1410.114071] do_syscall_64+0x3b/0x90 [ 1410.114616] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1410.115347] RIP: 0033:0x7fed06085a04 [ 1410.115889] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1410.118520] RSP: 002b:00007fed03647ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1410.119587] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed06085a04 [ 1410.120615] RDX: 0000000000000002 RSI: 00007fed03648000 RDI: 00000000ffffff9c [ 1410.121615] RBP: 00007fed03648000 R08: 0000000000000000 R09: ffffffffffffffff [ 1410.122618] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1410.123616] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1410.124654] [ 1410.135717] loop6: detected capacity change from 0 to 140 [ 1410.141187] loop1: detected capacity change from 0 to 140 [ 1410.158877] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1410.166097] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:52:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x6c00, 0x0) [ 1410.188408] loop4: detected capacity change from 0 to 140 [ 1410.199792] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1410.202572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1410.221432] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1410.238568] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/175/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1410.245529] EXT4-fs error (device loop1): __ext4_new_inode:1071: comm syz-executor.1: reserved inode found cleared - inode=1 [ 1410.259131] EXT4-fs error (device loop1): ext4_readdir:258: inode #2: block 4: comm syz-executor.1: path /syzkaller-testdir476242503/syzkaller.l8aIpI/136/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1410.264210] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1410.273215] EXT4-fs (loop4): get root inode failed [ 1410.273955] EXT4-fs (loop4): mount failed 08:52:02 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 08:52:02 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d4, 0x0) 08:52:02 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454cb, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:52:16 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d8, 0x0) 08:52:16 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x7400, 0x0) 08:52:16 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454cc, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:52:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 26) 08:52:16 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x1000000) 08:52:16 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x40000) 08:52:16 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000840}, 0x2401c041) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x6}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x2}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x2}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x4000800) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x28004) r3 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r5) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4e}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x80}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 08:52:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f000000ccc0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f000000cd40)=r1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={r1, 0x2, 0xffffffffffffffff, 0x8}) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f00000002c0)={{r3}, "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"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000012c0)=ANY=[@ANYBLOB="51bd7f75a24fc02310b35001c7fa00c816bf9038ee8dcb1a158570f9d234c4f372d1ecba9f5ce804ef1d5e595214f2fb7f2bf87876e238587db45b8e6abe9e49c41869220489538339bfb94250fa2065655374ded19896b2159fd4c16643ca1e8b562068b627e0ead3b60b5b33f14cf40eb9227188d9bb31640c60b06afe5481285ee9f9893808b21517fcf8d92ebf8767c6b6811179507f69d8e4ca3502c0006382fbd94cec241604f0ea900d5b85c9488ca9f95a628b156c30bf323c1c6eec56"]) [ 1424.761641] loop6: detected capacity change from 0 to 140 [ 1424.791797] loop1: detected capacity change from 0 to 140 [ 1424.793174] FAULT_INJECTION: forcing a failure. [ 1424.793174] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.794653] CPU: 1 PID: 8627 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1424.795938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1424.797600] Call Trace: [ 1424.797937] [ 1424.798230] dump_stack_lvl+0x8b/0xb3 [ 1424.798738] should_fail.cold+0x5/0xa [ 1424.799440] ? security_file_alloc+0x34/0x170 [ 1424.800050] should_failslab+0x5/0x10 [ 1424.800599] kmem_cache_alloc+0x5b/0x480 [ 1424.801136] security_file_alloc+0x34/0x170 [ 1424.801703] __alloc_file+0xb6/0x240 [ 1424.802189] alloc_empty_file+0x6d/0x170 [ 1424.802722] path_openat+0xe1/0x28a0 [ 1424.803275] ? path_lookupat+0x850/0x850 [ 1424.803894] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1424.804843] ? lock_is_held_type+0xd7/0x130 [ 1424.805496] do_filp_open+0x1aa/0x400 [ 1424.806193] ? may_open_dev+0xf0/0xf0 [ 1424.806740] ? lock_release+0x3b2/0x6f0 [ 1424.807373] ? alloc_fd+0x2f0/0x670 [ 1424.807876] ? lock_downgrade+0x6d0/0x6d0 [ 1424.808505] ? rwlock_bug.part.0+0x90/0x90 [ 1424.809107] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1424.809872] ? _find_next_bit+0x1e5/0x260 [ 1424.810554] ? _raw_spin_unlock+0x24/0x40 [ 1424.811315] ? alloc_fd+0x2f0/0x670 [ 1424.811809] do_sys_openat2+0x16d/0x4d0 [ 1424.812347] ? build_open_flags+0x6f0/0x6f0 [ 1424.813116] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1424.813887] __x64_sys_openat+0x13f/0x1f0 [ 1424.814458] ? __x64_sys_open+0x1c0/0x1c0 [ 1424.815028] ? syscall_enter_from_user_mode+0x1d/0x50 08:52:16 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454cd, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1424.815731] do_syscall_64+0x3b/0x90 [ 1424.816449] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1424.817262] RIP: 0033:0x7fed06085a04 [ 1424.817882] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1424.820599] RSP: 002b:00007fed03647ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1424.821663] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed06085a04 [ 1424.822634] RDX: 0000000000000002 RSI: 00007fed03648000 RDI: 00000000ffffff9c [ 1424.823614] RBP: 00007fed03648000 R08: 0000000000000000 R09: ffffffffffffffff [ 1424.824991] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1424.826027] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1424.827022] [ 1424.849248] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1424.857967] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1424.864995] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1424.874438] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. 08:52:16 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x7a00, 0x0) [ 1424.905096] EXT4-fs error (device loop1): __ext4_new_inode:1071: comm syz-executor.1: reserved inode found cleared - inode=1 [ 1424.911124] EXT4-fs error (device loop1): ext4_readdir:258: inode #2: block 4: comm syz-executor.1: path /syzkaller-testdir476242503/syzkaller.l8aIpI/137/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:52:16 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454ce, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:52:16 executing program 5: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000005300)=[{{&(0x7f0000000080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x81}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)="dcba2d2ae6cdb990fe106104100f484b7d7348f98a5cfbf87a3656af40034efe2a1bf868c540734436f619a38146f722ca182daa8f4ab0aed612dd8ed6447b101eb1cd0b495543bfbe018b6ffea368ce96699e63e6ea9474c2be530c7ab9007e2080a12f5963b2f91ef3872b827449d45623a8c41b6e0f514112bc75cc21a5c5ca8287463bab9df2d5919e7ea5c0b45fcc41e217054cfa607e3bced0eb373993fe333727814cb90ed43c5808ff4ae2ee", 0xb0}, {&(0x7f00000003c0)="a71c3c26a1e394e0030fe74c04434ca24cb4053c96287c38dd719e02dab3fdc692903ea65040d5eaa48a3595816427282a1cff55a8547c46c1747bafbe53c288b99b744991c28a54b614f4f532fb17995b46b2c731e76f8190ffbc0481f871a761672c82ece42a1d9d711f213189f4a0468135", 0x73}, {&(0x7f0000000440)="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", 0xff}], 0x3, &(0x7f00000001c0)=[@mark={{0x14, 0x1, 0x24, 0x3f}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x30}}, {{&(0x7f0000000540)=@ax25={{0x3, @bcast, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000900)=[{&(0x7f00000005c0)="0c2b57c6a583afc8077ab1af853c3fa50a2f5cc62d28617cffef0be5b0b9ffe6e628df1de4bb6da1ac68481b5be08c42e5a204e8bc86785772966442563dc15c2fedc2569c6d50877e699b4f8eaf288c980a3d2415ba67939bf0e4a0a8ce520c5e92e988e2ba9e4644e94a1f70a9fa89e3ca48b4ec8bf9fcee1b3c5b63c99330d0ebf0deeebe3758991eb3b48085ead135e4af0a763b6d31f8dfba0512cb57ca07bbc35fa5998aa17a446c80172d01c82b53a4f3520c66d10bbf023bf92b488b7806062dd10e", 0xc6}, {&(0x7f00000006c0)="1c15b485ef6d635e30f84a5c18593610ceab76a3d161680608ae300f5667f164d1fc3a951f3b573587274fb24be655cbd58d211e7f11198d418a61e6569cd784c19b0eca6782a20dbef289ad15043fc7c37e33a7f6e4a10c37b149ab5746feed1e103d6ea55a45671c98281c1792375b14a6d9e77e77ca362b22b4481e14066d8e9f9b5c113d8384ef80afb072d280507d131d6109d28a2fce3955248da9475634232b57952a1ef083fc6da0", 0xac}, {&(0x7f0000000340)="40621a", 0x3}, {&(0x7f0000000780)="c95c1b8850d813a17c49690ea761ef1568354278b24b51e7665d78d88eb01001d49fcb9b3a69e69ad8baadcaf01eb9bb42001e1bdbc0aadf64baec1a9395d972b7685de7213c6523790d", 0x4a}, {&(0x7f0000000800)="a82665e0c56c04b2b2a8b3db64be9bd2181710e9a57676d1a2190f6b783db61435eb56d3cf31042f0cebe0e4742452eaf60437ca42431a05f75e7b565b751964fdf603dbdaf9192f04e893f2d19f34033ed8e112ad5ec0f28eaa06b434e963b352cd7d6bada8ec0632c6f832e165a64f09509bbee2170e7966c8b06eec14bedf63624770440b064eedfc698fe0ad495eef84a3d749afdbb626325f3bdafa012c985aa1afddb98c95677e8509a8366219d4e5567b1046cfa0e1290d75d36b897e76ef408daefe20710d5f8b", 0xcb}], 0x5, &(0x7f0000000980)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}, {{&(0x7f00000009c0)=@phonet={0x23, 0x0, 0x20}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000a40)="73aa926b98ed0cc8a09307a3bd7b4825a9a3363a033fd4fb9b32a69c0ec75e20672801ed2f71b995b0b15ce2a0", 0x2d}, {&(0x7f0000000a80)="75837150539e02e11f8925", 0xb}, {&(0x7f0000000ac0)="87406457f7bc26004321da8bf564d4a575825fb891d2012405fff696e70d5804c44c621b78555d293f8e53e0004700134f439fedb5e9882d464571de560b4fa6043dc40295da56232ee671b5561c15882de997b362e0e5288cf3f36a3e5e2cb1af063ac2a1e0fee27360fe8596673443984014a1495729560646e408a264643b379f039d7934d48e3f42bc146ad540bec484f7c6479f887a409be22cdef8bdf8bb44d1e7116265f4670bc3d921d4b92c7392667d7f6aad0fdc34f688a3b47ec28b22bf62da31892632c2bd3be45fe4ddcd9584a8cebec22d172ab8239075", 0xde}, {&(0x7f0000000bc0)="4b660bbe46ed4e08301723837fafb043a88a76d063dd44daeed82863a73488d73d834d1221605473a2adbac48e66e2b642ed2f481676e1424340f566b60eb30a306e7a4c27ac73db6e5ddeb723737b7dd211f4e7217bc30a05fa5893b2efb3eeb4013ac0ce009816ecbbe7b0f9255e117c7a7b16cac5adf6fe1776e56208f66da10ee99d58e41cf3ce360d7035bda7080b7c53279ed601be4e5a18b59a4fc83669e0", 0xa2}, {&(0x7f0000000c80)="300a68b4a4a5fb300f6bef6b886650cb0251faeceba81a9d9b38f1a6e99d1650f0243822b3f1a644c16e67a8598fc675c5ad65ac16ca280ed023bc543fafdb6eee51e726e3d13ec9e6defd651dc18f728c2ad5107c49d04bdd6ae775cce7c2a2a319a9287088c4719e510775b7ef8935362edbb72f389491de3ba9328858c6ce028db57210ddf7", 0x87}, {&(0x7f0000000d40)="f7bd0497752e8199e2e04cb67a15b2b4102aed809ae10382a9e3d74898243156d9b3d3a5b45066806f77a1037ac6ebd29ce5fb13e216933559bab6573a3423cfbf6438728b136c037a3576e167f8d8ac9e76d472373ccb08cfd18a0ddbb9087e78cc5aa0bc9e7dea1bea651e1bc83a81f46a26f5a885c81690112f5b5fb5ad9f0bd55796312db57650da92fbb04ad613a8b46e1e41a7ef31376ba241c53026c82288594b7dfb797c182c8df24fd2f67074a16bfa70c558390e6432ac315c526964d0f5880604c5f597cc2e8636a2051e7d000296f663", 0xd6}, {&(0x7f0000000e40)="9224e61f100aa1eede3c13874a1ce3b58b544f80826a5a96d85cc852ef2a9d399f91510d4ebe52cd10af08c274dedfc2abfbb3917675ebf9b720dec8ff55b45ca01b31165ef3804a95d2bb3e5d0f1aac620667bddcb6d4a23fbe92eba29e6fb1879a248229762e7a265bcb76bf", 0x6d}], 0x7, &(0x7f0000000f40)}}, {{&(0x7f0000000f80)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f0000002280)=[{&(0x7f0000001000)="68dfa527ef3a6fceda8eef8ca51c88ad1d0e4c0fc6f1c3e96d12aee746a7c76812585879c81d428f44b854065e0d162448d21b8b69c20d4e699c540d10176432c6cb620bc143f5d6a9e890232f84e80655e6304fe288a4ce26936a3072f6a462176d4b4f3afd280d7afe7cf0f4929947c61687687ce747812489d245189a10370f2ea93c722ab6460df58905675362f8b5fbb8583a3f84ba49fb47d87c5264776f5506687cfb9342f0d202ef68233e189c8f495069b95fdd727aa60dbf8a76b0c5c506a57d397d775473501678af5155292ac4d8eaeb7cf3c9daf6167c955ee276b8421deacbd95c2ebe49", 0xeb}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000002100)="78819db8c58f5479a8cbf36130424b3ea545efe72eed10efc307be91911e7149b10c84d067", 0x25}, {&(0x7f0000002140)="38bc6e9c1195f7e81f57f14fbb481f1ec7ba1e59eb142ea497d3bc1a4fa33e436b6236ccbdc20d3edbbcbd60eda1c380ba09a5bc6c303c73acbecf9de9cecc436592bda41ebe287dac16bd2049b7843220223682da832cc7e3b53cfbe97c8adf1bd837b858ff2ebef361b97c90539d099de333635b70de0b387a5107e90255f4b353ee3485361e2a8566fe2e2a4f1098017e5545571e4d8c279838b692b01910b533", 0xa2}, {&(0x7f0000002200)="4ad1d22daab5b497d8d0a2249a47357a544e9ea9be138f8b07b5a5ce4afce54273ce9880fba4de5a9fa3809d7fae41aeac61d9a18f0b4523ffee7d5508e0f1127113f3e7f6cafe3410e34c86401cca0c759af27489f02942864017cf5ac05b2cf1bf0d399ac255", 0x67}], 0x5, &(0x7f0000002300)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @mark={{0x14, 0x1, 0x24, 0x4f80}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0xf0}}, {{&(0x7f0000002400)=@qipcrtr={0x2a, 0x1, 0x1}, 0x80, &(0x7f0000003740)=[{&(0x7f0000002480)="fc7ff1b4804ab370c2a942437a024e2023b9dab499d7d5ee11b10297d7646db24c22fc", 0x23}, {&(0x7f00000024c0)="47d29ecbeff1639f4e4a4ddbce5dc5f5f0c1ed29f3d46dafb7a2c5187fc534f2e728508fcbc106ec2f18620fc8c5878f00fcf3a7b4c4ca60d193c500c9c2b9a935cb855b74e8613e8af93db5b780e91f1b10e19ea0a32b5c5bbe89be7d4fac119cdabe4b800beb10cd7e06e2637409", 0x6f}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)}, {&(0x7f0000003580)="e150ca90c11fe11dc23790430e4dd3b78831548965c822cb336503fac4843e72f3e17d5ddbf704388b16481ad863d0fec63c1b3dc3ba2146f3e7a451556c6f97032091f6c50714b980d65817c21076705e78fa4e115b", 0x56}, {&(0x7f0000003600)="9ac13fb50fa8729cc298affddabc4bef9368e5b6c59b95731d5724854b6ccbf523f3267bdac108059908c665244a15451a82b5205f832a75f628c16c0a27884ba7fc19b2504ffc875843381bc2eddb5ef8dda5956820ea3970085e78d701db830145f3ac51a32c978659394c1d7f2e7b3514d0196b8308a3f1f75c149c27f422e0b78957292a40373fea475141f86cf82106e15af97934a0c5cc01c52dff370bf98cd04291ea586ff1b63e0b8f47e6d72bce58efe47e7dcf2b1b5501cb47729d9bac05e00534e9a59c118c7def93", 0xce}, {&(0x7f0000003700)="67ddc2eddefff33158fb16d50d616dbede255ba3a02a72767ef11594658139c09feede7e8396a0e2ef56949ddeee0d7bf2c765", 0x33}], 0x7, &(0x7f00000037c0)=[@timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x3000000}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x94}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x2b3460a8}}], 0xd8}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x6, @local, 0xffff, 0x4}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003940)="15dfd16eb82b74c718d6483505671f7cbe63e07c56f934a7ca7673fe32137bad", 0x20}, {&(0x7f0000003980)="c2c4733363934661c4ae92a450365cf6e6510f3e7566fd208f55860cb862d38828a5bce476cbb6bbeb8b0c65d0185f07c00687e58a6852084144f30e102e92cacb1b28c56b94908cc15770aa5ec06bbf5ed76c3e4ff22136ac8ef08186ff33b55b5494084241f27b34a5a3d918da70f9cb16cdf0e63d210474468f7469e97ec25fcbd67fd465e76b73b07675bba025", 0x8f}, {&(0x7f0000003a40)="15", 0x1}, {&(0x7f0000003a80)="25cd2445eaef10e5b9df9f61fbd6c9f8f80e7bf49a0c5624edd82bb6f002f136da18bde93562c4bb1dbd2abaa00cb02348afda6b959723d1d68d8d6febd38a477fedbbf782b315911d6f3c6a6be27ffde12e", 0x52}, {&(0x7f0000003b00)="74b110a847b6257dc70a3b362d6cba50d4eb72e25707f830ba3dac647f3963565d90f3abda45e224f75ed88a6f2331b9ba2c9bde580f99a15e3bfdbe4059aa1774e8165bb02dbd0edcceaf3bbe1a64630d405319a5fa6c572b1122efab428d62733d8c63a69be486acce0f8688e9d6f3989f81a12349b600967f87320b7efdcfe9ee7e213a97b54d0e3ce207be7d", 0x8e}, {&(0x7f0000003bc0)="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", 0x1000}, {&(0x7f0000004bc0)="185a6b3e329427c9ab9354b61abee4539d389f17682ba1", 0x17}, {&(0x7f0000004c00)="c929f92940962990cbdb5c4ec29c074c86d68708dc205e1a63b98cda85fc1fcf8094ac483429cb82c57848a108772de27755a377b253e78effa2d1688daea7266a5320ad9aac73c195b107c0ffb113291f51fe260cd22479ad65966c5af702c9dd22cab33b5c2d3c2b13b0f859b172909c661ad9127013ba9cb28dc97e77437aa198fae7cf", 0x85}, {&(0x7f0000004cc0)="26760cb6c6e427dbc7dfadb088d2c8d9d720f423c60c47cd3e247ffa78eee31da912ae3c48acdd021556bf8c0fa58c8427318dac18eee9bfc4fe52547678ba271d7868596d10a57652a3c4dab98ea2802760e3471c6a48d7921c43370879c19c361783fa0f4cf2064cbdb9d6d5a19c72b2b133f5cc297d848770d0e7926a29c3ca041bfdf68ac9a5f5bc67bcb53577a27634f1d6c8e7e50efa8ca0c059503ac635beb36cec5ecc235cb8984318d4f8813b7d7a711b02142715cb4590d04e91e222b53e5344d6dabfe900c976493221520290b5729774b0abcfd765db6c027668", 0xe0}], 0x9, &(0x7f0000004e80)=[@timestamping={{0x14, 0x1, 0x25, 0xc577}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x48}}, {{&(0x7f0000004f00)=@llc={0x1a, 0x20, 0x9, 0x0, 0x60, 0x48, @multicast}, 0x80, &(0x7f0000005200)=[{&(0x7f0000004f80)="0530bf23e64e28467a69af9124d5d92617ddd4c754cdd24fa064c3f40d09529f4357651cb6c618fd3c931497f20eee4b44659bfada95a9b4708a19b301a1eaf855b5db08926bd52dd6a63bf8fdf7c966b487d0afb8296b23628f296a8cd0d49a70712d030a9ba8ae08225673c9d33352959032862de798b63807fdd0437543bb5e13c410584740aa1fc8dbf4db09be2bd7df7879d8c58a9886d89e9332ad345da7e2b1555a302e63c06d11a23ac79568dd2f8a29e46e8630fa8be0df343c5ba3e9e229090d73c2ec2d5edf770e9fc0378156e041fbca1dda22c5faa081d2f6bd9f44a134ec403b1f97eb09016b0d6f7b28b3", 0xf2}, {&(0x7f0000005080)="95ea3f873943f5ac5738b235f534e021b41828da44e57b37ab8f8b440357ccf60ac7d5ac10d60a88269eb749e2900f24820afe63505d1da68099ef055e30778dca80b4b0c95d920e3688", 0x4a}, {&(0x7f0000005100)="4d6b186d75cf2b7c41e098297cb1d8036663db5b44ad4dcaca010544c5078b3381489e9b47153611cb72166ad2eaf02ffd3ca99620d0e095ce6e61b293f751", 0x3f}, {&(0x7f0000005140)="fee70eb52fa1606be0e8eb955f23ee7e9efbc7680b0310f75f24e150481a1681f39962c0af09d2ade025b3811a60b987f6f6a2e115f463ddccb74b1dd9ad171c930d3151351689d769fee25160509fdf3f841539201e34a75ff4adbbc32216399136915298d531e7ff4ef552763787b908e4c2779d125c25047f3485466e44d7a9db780df4c58c87cb871722b2ff6c7e1243071bb990b77defe7565f62a9dfc3ce6d7300f6c7968931", 0xa9}], 0x4, &(0x7f0000005240)=[@txtime={{0x18, 0x1, 0x3d, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x9e1}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x2ea6cbe3}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffc01}}, @mark={{0x14, 0x1, 0x24, 0x1f}}], 0x90}}], 0x7, 0x44804) 08:52:16 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000100)={0xfffffffa, 0xfff, 0x0, 0x4, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:52:16 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x2000000) 08:52:16 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d9, 0x0) 08:52:16 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d0, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:52:16 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x40000) 08:52:16 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x100000, 0x0) 08:52:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 27) 08:52:16 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x32040, 0x0) fsmount(r2, 0x0, 0x74) [ 1425.173872] FAULT_INJECTION: forcing a failure. [ 1425.173872] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.175783] CPU: 1 PID: 8669 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1425.177043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1425.178570] Call Trace: [ 1425.178916] [ 1425.179216] dump_stack_lvl+0x8b/0xb3 [ 1425.179752] should_fail.cold+0x5/0xa [ 1425.180279] ? create_object.isra.0+0x3a/0xa20 [ 1425.180939] should_failslab+0x5/0x10 [ 1425.181453] kmem_cache_alloc+0x5b/0x480 [ 1425.182006] create_object.isra.0+0x3a/0xa20 [ 1425.182609] ? kasan_unpoison+0x23/0x50 [ 1425.183202] kmem_cache_alloc+0x239/0x480 [ 1425.183777] security_file_alloc+0x34/0x170 [ 1425.184374] __alloc_file+0xb6/0x240 [ 1425.184913] alloc_empty_file+0x6d/0x170 [ 1425.185476] path_openat+0xe1/0x28a0 [ 1425.186007] ? path_lookupat+0x850/0x850 [ 1425.186565] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1425.187289] ? lock_is_held_type+0xd7/0x130 [ 1425.187884] do_filp_open+0x1aa/0x400 [ 1425.188410] ? may_open_dev+0xf0/0xf0 [ 1425.188974] ? lock_release+0x3b2/0x6f0 [ 1425.189516] ? alloc_fd+0x2f0/0x670 [ 1425.190009] ? lock_downgrade+0x6d0/0x6d0 [ 1425.190577] ? rwlock_bug.part.0+0x90/0x90 [ 1425.191153] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1425.191884] ? _find_next_bit+0x1e5/0x260 [ 1425.192456] ? _raw_spin_unlock+0x24/0x40 [ 1425.193063] ? alloc_fd+0x2f0/0x670 [ 1425.193576] do_sys_openat2+0x16d/0x4d0 [ 1425.194125] ? build_open_flags+0x6f0/0x6f0 [ 1425.194719] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1425.195477] __x64_sys_openat+0x13f/0x1f0 [ 1425.196043] ? __x64_sys_open+0x1c0/0x1c0 [ 1425.196666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1425.197370] do_syscall_64+0x3b/0x90 [ 1425.197886] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1425.198590] RIP: 0033:0x7fed06085a04 [ 1425.199088] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1425.201581] RSP: 002b:00007fed03647ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1425.202608] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed06085a04 [ 1425.203608] RDX: 0000000000000002 RSI: 00007fed03648000 RDI: 00000000ffffff9c [ 1425.204607] RBP: 00007fed03648000 R08: 0000000000000000 R09: ffffffffffffffff [ 1425.205578] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1425.206547] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1425.207542] [ 1425.227745] loop1: detected capacity change from 0 to 140 [ 1425.254042] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1425.261540] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1425.278489] EXT4-fs error (device loop1): __ext4_new_inode:1071: comm syz-executor.1: reserved inode found cleared - inode=1 [ 1425.283699] EXT4-fs error (device loop1): ext4_readdir:258: inode #2: block 4: comm syz-executor.1: path /syzkaller-testdir476242503/syzkaller.l8aIpI/138/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1425.291154] loop4: detected capacity change from 0 to 140 [ 1425.315868] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1425.323858] EXT4-fs (loop4): get root inode failed [ 1425.324781] EXT4-fs (loop4): mount failed 08:52:31 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 08:52:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 28) 08:52:31 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454da, 0x0) 08:52:31 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d4, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:52:31 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x3000000) 08:52:31 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x1000000, 0x0) 08:52:31 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1439.482361] loop1: detected capacity change from 0 to 140 [ 1439.486300] loop6: detected capacity change from 0 to 140 [ 1439.491259] FAULT_INJECTION: forcing a failure. [ 1439.491259] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.492884] CPU: 0 PID: 8700 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1439.494000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1439.495551] Call Trace: [ 1439.495903] [ 1439.496214] dump_stack_lvl+0x8b/0xb3 [ 1439.496761] should_fail.cold+0x5/0xa [ 1439.497274] ? alloc_workqueue+0x914/0xeb0 [ 1439.497853] should_failslab+0x5/0x10 [ 1439.498364] __kmalloc+0x72/0x440 [ 1439.498853] alloc_workqueue+0x914/0xeb0 [ 1439.499422] ? do_raw_spin_unlock+0x4f/0x210 [ 1439.500032] ? _raw_spin_unlock+0x24/0x40 [ 1439.500613] ? bd_prepare_to_claim+0x164/0x300 [ 1439.501273] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1439.501971] ? __fget_files+0x28d/0x470 [ 1439.502509] ? loop_configure+0x62b/0x1950 [ 1439.503111] loop_configure+0x6ec/0x1950 [ 1439.503682] ? putname+0xfe/0x140 [ 1439.504179] lo_ioctl+0x7c5/0x18b0 [ 1439.504666] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1439.505360] ? loop_set_status_old+0x1b0/0x1b0 [ 1439.505983] ? avc_ss_reset+0x180/0x180 [ 1439.506548] ? __lock_acquire+0xbac/0x5b70 [ 1439.507185] ? selinux_inode_getsecctx+0x90/0x90 [ 1439.507847] ? loop_set_status_old+0x1b0/0x1b0 [ 1439.508490] blkdev_ioctl+0x362/0x7f0 [ 1439.509046] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1439.509706] ? __x64_sys_ioctl+0x97/0x210 [ 1439.510305] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1439.511021] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1439.511664] __x64_sys_ioctl+0x196/0x210 [ 1439.512232] do_syscall_64+0x3b/0x90 [ 1439.512755] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1439.513494] RIP: 0033:0x7fed060d28d7 [ 1439.514062] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1439.516564] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1439.517626] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1439.518623] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1439.519615] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1439.520607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1439.521616] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1439.522615] 08:52:31 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x2000000, 0x0) [ 1439.558393] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1439.563754] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1439.583198] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1439.586599] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1439.591162] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1439.613134] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/178/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:52:31 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d8, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:52:31 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) r2 = fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000280)='dirsync\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000000c0)={0x80000000, 0x28, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 08:52:31 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454dc, 0x0) 08:52:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 29) 08:52:31 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1439.709470] EXT4-fs error (device loop6): ext4_validate_block_bitmap:398: comm ext4lazyinit: bg 0: block 3: invalid block bitmap [ 1439.761265] FAULT_INJECTION: forcing a failure. [ 1439.761265] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.762858] CPU: 0 PID: 8723 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1439.763972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1439.765491] Call Trace: [ 1439.765834] [ 1439.766136] dump_stack_lvl+0x8b/0xb3 [ 1439.766663] should_fail.cold+0x5/0xa [ 1439.767181] ? create_object.isra.0+0x3a/0xa20 [ 1439.767805] should_failslab+0x5/0x10 [ 1439.768311] kmem_cache_alloc+0x5b/0x480 [ 1439.769033] create_object.isra.0+0x3a/0xa20 [ 1439.769759] ? kasan_unpoison+0x23/0x50 [ 1439.770308] __kmalloc+0x25b/0x440 [ 1439.770797] alloc_workqueue+0x914/0xeb0 [ 1439.771349] ? do_raw_spin_unlock+0x4f/0x210 [ 1439.771944] ? _raw_spin_unlock+0x24/0x40 [ 1439.772517] ? bd_prepare_to_claim+0x164/0x300 [ 1439.773182] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1439.773874] ? __fget_files+0x28d/0x470 [ 1439.774416] ? loop_configure+0x62b/0x1950 [ 1439.775420] loop_configure+0x6ec/0x1950 [ 1439.775992] lo_ioctl+0x7c5/0x18b0 [ 1439.776923] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1439.777606] ? loop_set_status_old+0x1b0/0x1b0 [ 1439.778796] ? __lock_acquire+0x164e/0x5b70 [ 1439.779394] ? avc_ss_reset+0x180/0x180 [ 1439.780259] ? __lock_acquire+0xbac/0x5b70 [ 1439.780941] ? selinux_inode_getsecctx+0x90/0x90 [ 1439.781614] ? loop_set_status_old+0x1b0/0x1b0 [ 1439.782239] blkdev_ioctl+0x362/0x7f0 [ 1439.782771] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1439.783428] ? __x64_sys_ioctl+0x97/0x210 [ 1439.783997] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1439.784777] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1439.785418] __x64_sys_ioctl+0x196/0x210 [ 1439.785992] do_syscall_64+0x3b/0x90 [ 1439.786510] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1439.787220] RIP: 0033:0x7fed060d28d7 [ 1439.787730] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1439.790316] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1439.791356] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1439.792326] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1439.793324] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1439.794292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1439.795255] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1439.796237] [ 1439.817487] loop1: detected capacity change from 0 to 140 [ 1439.846667] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1439.849681] loop4: detected capacity change from 0 to 140 [ 1439.855176] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1439.864088] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1439.866627] EXT4-fs error (device loop1): __ext4_new_inode:1071: comm syz-executor.1: reserved inode found cleared - inode=1 [ 1439.871976] EXT4-fs (loop4): get root inode failed [ 1439.872730] EXT4-fs (loop4): mount failed 08:52:45 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454e2, 0x0) 08:52:45 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d9, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:52:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 30) 08:52:45 executing program 1: mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 08:52:45 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x3000000, 0x0) 08:52:45 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x4000000) 08:52:45 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) fsmount(r0, 0x0, 0xf) 08:52:45 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRES32=r2, @ANYRESHEX=r3, @ANYRES16=r1, @ANYBLOB="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", @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYRESHEX]) [ 1453.725554] loop6: detected capacity change from 0 to 140 [ 1453.733674] FAULT_INJECTION: forcing a failure. [ 1453.733674] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.736108] CPU: 1 PID: 8742 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1453.737854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1453.740216] Call Trace: [ 1453.740752] [ 1453.741232] dump_stack_lvl+0x8b/0xb3 [ 1453.742076] should_fail.cold+0x5/0xa [ 1453.742898] ? alloc_workqueue_attrs+0x38/0x80 [ 1453.743878] should_failslab+0x5/0x10 [ 1453.744688] kmem_cache_alloc_trace+0x55/0x3c0 [ 1453.745680] alloc_workqueue_attrs+0x38/0x80 [ 1453.746619] alloc_workqueue+0x939/0xeb0 [ 1453.747488] ? do_raw_spin_unlock+0x4f/0x210 [ 1453.748425] ? _raw_spin_unlock+0x24/0x40 [ 1453.749336] ? bd_prepare_to_claim+0x164/0x300 [ 1453.750319] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1453.751396] ? __fget_files+0x28d/0x470 [ 1453.752247] ? loop_configure+0x62b/0x1950 [ 1453.753159] loop_configure+0x6ec/0x1950 [ 1453.754027] ? putname+0xfe/0x140 [ 1453.754785] lo_ioctl+0x7c5/0x18b0 [ 1453.755535] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1453.756573] ? loop_set_status_old+0x1b0/0x1b0 [ 1453.757551] ? avc_ss_reset+0x180/0x180 [ 1453.758350] ? __lock_acquire+0xbac/0x5b70 [ 1453.759237] ? selinux_inode_getsecctx+0x90/0x90 [ 1453.760158] ? loop_set_status_old+0x1b0/0x1b0 [ 1453.761091] blkdev_ioctl+0x362/0x7f0 [ 1453.761912] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1453.762893] ? __x64_sys_ioctl+0x97/0x210 [ 1453.763801] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1453.764970] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1453.765969] __x64_sys_ioctl+0x196/0x210 [ 1453.766816] do_syscall_64+0x3b/0x90 [ 1453.767611] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1453.768670] RIP: 0033:0x7fed060d28d7 [ 1453.769442] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1453.773234] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1453.774802] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1453.776275] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1453.777749] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1453.779219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1453.780693] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1453.782220] 08:52:45 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x4000000, 0x0) 08:52:45 executing program 1: mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) [ 1453.846193] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1453.888493] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:52:45 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454da, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:52:45 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) fdatasync(r0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000100aaea95aa8abb"]) 08:52:45 executing program 5: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x74) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='},{)+#%@\x88\x00', &(0x7f0000000080)="026ee4c885fcd2f2382ac9e1452b6a60587cdc78d58994f24efbaaeabe5490a925632b44031754b3257c69a435cdba7265e5daad3253c16962f1be40646afb4d629a1d8e0c6035936c8a3738e0dbbd8fa4894cc13549f2adbd5ab7272e821f563e26b58683b42e334d94e5b601bc09a0921da4467465ad45cba73bc843ecb2a4ab27062c80e945afc160523089b4117e1b79686f3db0d92c7ce3b40587a5467413e0b661dc868d5f", 0xa8) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0) 08:52:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 31) [ 1454.044924] FAULT_INJECTION: forcing a failure. [ 1454.044924] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.047548] CPU: 0 PID: 8777 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1454.049424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1454.051945] Call Trace: [ 1454.052520] [ 1454.053027] dump_stack_lvl+0x8b/0xb3 [ 1454.053904] should_fail.cold+0x5/0xa [ 1454.054771] ? create_object.isra.0+0x3a/0xa20 [ 1454.055817] should_failslab+0x5/0x10 [ 1454.056661] kmem_cache_alloc+0x5b/0x480 [ 1454.057592] create_object.isra.0+0x3a/0xa20 [ 1454.058577] ? kasan_unpoison+0x23/0x50 [ 1454.059491] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1454.060535] alloc_workqueue_attrs+0x38/0x80 [ 1454.061542] alloc_workqueue+0x939/0xeb0 [ 1454.062454] ? do_raw_spin_unlock+0x4f/0x210 [ 1454.063440] ? _raw_spin_unlock+0x24/0x40 [ 1454.064388] ? bd_prepare_to_claim+0x164/0x300 [ 1454.065429] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1454.066557] ? __fget_files+0x28d/0x470 [ 1454.067454] ? loop_configure+0x62b/0x1950 [ 1454.068407] loop_configure+0x6ec/0x1950 [ 1454.069340] ? putname+0xfe/0x140 [ 1454.070136] lo_ioctl+0x7c5/0x18b0 [ 1454.070923] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1454.072010] ? loop_set_status_old+0x1b0/0x1b0 [ 1454.073037] ? avc_ss_reset+0x180/0x180 [ 1454.073946] ? __lock_acquire+0xbac/0x5b70 [ 1454.074963] ? selinux_inode_getsecctx+0x90/0x90 [ 1454.076030] ? loop_set_status_old+0x1b0/0x1b0 [ 1454.077053] blkdev_ioctl+0x362/0x7f0 [ 1454.077896] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1454.078937] ? __x64_sys_ioctl+0x97/0x210 [ 1454.079867] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1454.081103] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1454.082145] __x64_sys_ioctl+0x196/0x210 [ 1454.083043] do_syscall_64+0x3b/0x90 [ 1454.083873] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1454.085011] RIP: 0033:0x7fed060d28d7 [ 1454.085820] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1454.090092] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1454.091763] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1454.093341] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1454.094897] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1454.096451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1454.098017] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1454.099605] [ 1454.117771] loop4: detected capacity change from 0 to 140 [ 1454.154851] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1454.159911] EXT4-fs (loop4): get root inode failed [ 1454.161093] EXT4-fs (loop4): mount failed 08:53:01 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000080)) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:53:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 32) 08:53:01 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x40049409, 0x0) 08:53:01 executing program 1: mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 08:53:01 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x5000000) 08:53:01 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x5000000, 0x0) [ 1469.974645] FAULT_INJECTION: forcing a failure. [ 1469.974645] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.977186] CPU: 0 PID: 8797 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1469.978811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1469.981033] Call Trace: [ 1469.981541] [ 1469.981979] dump_stack_lvl+0x8b/0xb3 [ 1469.982749] should_fail.cold+0x5/0xa [ 1469.983533] should_failslab+0x5/0x10 [ 1469.984288] __kmalloc_track_caller+0x79/0x420 [ 1469.985201] ? kasprintf+0xbb/0xf0 [ 1469.985920] kvasprintf+0xb5/0x150 [ 1469.986630] ? bust_spinlocks+0xe0/0xe0 [ 1469.987425] ? preempt_count_add+0x74/0x140 [ 1469.988292] ? __is_module_percpu_address+0x237/0x300 [ 1469.989353] kasprintf+0xbb/0xf0 [ 1469.990030] ? kvasprintf_const+0x190/0x190 [ 1469.990899] ? save_trace+0xd00/0xd00 [ 1469.991662] ? lockdep_init_map_type+0x2c3/0x7a0 [ 1469.992612] alloc_workqueue+0x408/0xeb0 [ 1469.993431] ? do_raw_spin_unlock+0x4f/0x210 [ 1469.994304] ? _raw_spin_unlock+0x24/0x40 [ 1469.995140] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1469.996138] ? __fget_files+0x28d/0x470 [ 1469.996926] ? loop_configure+0x62b/0x1950 [ 1469.997769] loop_configure+0x6ec/0x1950 [ 1469.998572] ? putname+0xfe/0x140 [ 1469.999276] lo_ioctl+0x7c5/0x18b0 [ 1469.999976] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1470.000942] ? loop_set_status_old+0x1b0/0x1b0 [ 1470.001859] ? avc_ss_reset+0x180/0x180 [ 1470.002662] ? __lock_acquire+0xbac/0x5b70 [ 1470.003579] ? selinux_inode_getsecctx+0x90/0x90 [ 1470.004536] ? loop_set_status_old+0x1b0/0x1b0 [ 1470.005460] blkdev_ioctl+0x362/0x7f0 [ 1470.006217] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1470.007155] ? __x64_sys_ioctl+0x97/0x210 [ 1470.007986] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1470.009086] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1470.010044] __x64_sys_ioctl+0x196/0x210 08:53:01 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454dc, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1470.010866] do_syscall_64+0x3b/0x90 [ 1470.011801] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1470.012828] RIP: 0033:0x7fed060d28d7 08:53:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x6c0c0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000100aaaaaaaa8632cef8e9282dc8f4143d99399498363ebc9d4829320f42797f8bee06e80e51a6232b3461a7cbeb2fa01a343777fda161cbd8"]) [ 1470.013569] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.017273] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1470.018790] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1470.020213] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1470.021621] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1470.023019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1470.024418] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1470.025854] 08:53:01 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x6000000, 0x0) [ 1470.042440] loop6: detected capacity change from 0 to 140 08:53:01 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1470.095397] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:53:01 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454e2, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1470.149673] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1470.153243] loop4: detected capacity change from 0 to 140 08:53:02 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/printk', 0x20400, 0x64) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) fsmount(r1, 0x1, 0x4) r3 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000080)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1470.196956] loop1: detected capacity change from 0 to 140 [ 1470.199713] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1470.210563] EXT4-fs (loop4): get root inode failed [ 1470.212213] EXT4-fs (loop4): mount failed 08:53:02 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xcc14}}, './file0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'team_slave_1\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0xf2, 0x3}) 08:53:02 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x40086602, 0x0) 08:53:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x7000000, 0x0) 08:53:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 33) 08:53:02 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x6000000) 08:53:02 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x40049409, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:53:02 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1470.363841] FAULT_INJECTION: forcing a failure. [ 1470.363841] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.366167] CPU: 1 PID: 8828 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1470.367805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1470.370082] Call Trace: [ 1470.370596] [ 1470.371053] dump_stack_lvl+0x8b/0xb3 [ 1470.371848] should_fail.cold+0x5/0xa [ 1470.372631] ? create_object.isra.0+0x3a/0xa20 [ 1470.373615] should_failslab+0x5/0x10 [ 1470.374393] kmem_cache_alloc+0x5b/0x480 [ 1470.375233] create_object.isra.0+0x3a/0xa20 [ 1470.376110] ? kasan_unpoison+0x23/0x50 [ 1470.376917] __kmalloc_track_caller+0x25e/0x420 [ 1470.377847] ? kasprintf+0xbb/0xf0 [ 1470.378572] kvasprintf+0xb5/0x150 [ 1470.379283] ? bust_spinlocks+0xe0/0xe0 [ 1470.380083] ? preempt_count_add+0x74/0x140 [ 1470.380950] ? __is_module_percpu_address+0x237/0x300 [ 1470.382021] kasprintf+0xbb/0xf0 [ 1470.382711] ? kvasprintf_const+0x190/0x190 [ 1470.383591] ? save_trace+0xd00/0xd00 [ 1470.384351] ? lockdep_init_map_type+0x2c3/0x7a0 [ 1470.385322] alloc_workqueue+0x408/0xeb0 [ 1470.386144] ? do_raw_spin_unlock+0x4f/0x210 [ 1470.387027] ? _raw_spin_unlock+0x24/0x40 [ 1470.387869] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1470.388877] ? __fget_files+0x28d/0x470 [ 1470.389687] ? loop_configure+0x62b/0x1950 [ 1470.390532] loop_configure+0x6ec/0x1950 [ 1470.391359] ? putname+0xfe/0x140 [ 1470.392071] lo_ioctl+0x7c5/0x18b0 [ 1470.392779] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1470.393778] ? loop_set_status_old+0x1b0/0x1b0 [ 1470.394692] ? avc_ss_reset+0x180/0x180 [ 1470.395511] ? __lock_acquire+0xbac/0x5b70 [ 1470.396436] ? selinux_inode_getsecctx+0x90/0x90 [ 1470.397411] ? loop_set_status_old+0x1b0/0x1b0 [ 1470.398329] blkdev_ioctl+0x362/0x7f0 [ 1470.399087] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1470.400036] ? __x64_sys_ioctl+0x97/0x210 [ 1470.400872] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1470.401972] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1470.402924] __x64_sys_ioctl+0x196/0x210 [ 1470.403740] do_syscall_64+0x3b/0x90 [ 1470.404493] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1470.405545] RIP: 0033:0x7fed060d28d7 [ 1470.406283] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.409895] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1470.411392] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1470.412801] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1470.414214] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1470.415613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1470.417014] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1470.418479] 08:53:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x10000000, 0x0) [ 1470.480247] loop4: detected capacity change from 0 to 140 [ 1470.518591] loop1: detected capacity change from 0 to 140 [ 1470.545980] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1470.583652] EXT4-fs (loop4): get root inode failed [ 1470.584927] EXT4-fs (loop4): mount failed 08:53:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 34) 08:53:19 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x7000000) 08:53:19 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x40087602, 0x0) 08:53:19 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:53:19 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x40086602, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:53:19 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) poll(&(0x7f0000000080)=[{r0, 0xa700}, {0xffffffffffffffff, 0x2}, {r1, 0x211c}, {r2, 0x4}], 0x4, 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r4, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) 08:53:19 executing program 5: r0 = fsopen(&(0x7f0000000040)='qnx6\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = accept$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) readv(r4, &(0x7f0000000840)=[{&(0x7f0000000280)=""/121, 0x79}, {&(0x7f0000000380)=""/228, 0xe4}, {&(0x7f0000000480)=""/132, 0x84}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000740)=""/224, 0xe0}], 0x6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x35}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x4850) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, r7, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x553bc2ae}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000a4) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:53:19 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x48000000, 0x0) [ 1487.377078] FAULT_INJECTION: forcing a failure. [ 1487.377078] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.378626] CPU: 0 PID: 8856 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1487.379473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1487.380653] Call Trace: [ 1487.380928] [ 1487.381163] dump_stack_lvl+0x8b/0xb3 [ 1487.381582] should_fail.cold+0x5/0xa [ 1487.381986] ? apply_wqattrs_prepare+0xab/0x880 [ 1487.382478] should_failslab+0x5/0x10 [ 1487.382879] __kmalloc+0x72/0x440 [ 1487.383248] ? lock_is_held_type+0xd7/0x130 [ 1487.383702] apply_wqattrs_prepare+0xab/0x880 [ 1487.384190] apply_workqueue_attrs_locked+0xc1/0x140 [ 1487.384737] alloc_workqueue+0xb1a/0xeb0 [ 1487.385160] ? do_raw_spin_unlock+0x4f/0x210 [ 1487.385640] ? _raw_spin_unlock+0x24/0x40 [ 1487.386079] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1487.386618] ? __fget_files+0x28d/0x470 [ 1487.387036] ? loop_configure+0x62b/0x1950 [ 1487.387472] loop_configure+0x6ec/0x1950 [ 1487.387901] ? putname+0xfe/0x140 [ 1487.388271] lo_ioctl+0x7c5/0x18b0 [ 1487.388636] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1487.389150] ? loop_set_status_old+0x1b0/0x1b0 [ 1487.389628] ? avc_ss_reset+0x180/0x180 [ 1487.390058] ? __lock_acquire+0xbac/0x5b70 [ 1487.390531] ? selinux_inode_getsecctx+0x90/0x90 [ 1487.391032] ? loop_set_status_old+0x1b0/0x1b0 [ 1487.391504] blkdev_ioctl+0x362/0x7f0 [ 1487.391893] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1487.392381] ? __x64_sys_ioctl+0x97/0x210 [ 1487.392805] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1487.393372] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1487.393868] __x64_sys_ioctl+0x196/0x210 [ 1487.394295] do_syscall_64+0x3b/0x90 [ 1487.394682] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1487.395217] RIP: 0033:0x7fed060d28d7 [ 1487.395596] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1487.397489] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1487.398262] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1487.398987] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1487.399739] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1487.400466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1487.401192] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1487.401956] 08:53:19 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x40087602, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1487.437533] loop1: detected capacity change from 0 to 140 [ 1487.439602] loop6: detected capacity change from 0 to 140 08:53:19 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:53:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 35) [ 1487.502274] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1487.546362] FAULT_INJECTION: forcing a failure. [ 1487.546362] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1487.547671] CPU: 0 PID: 8888 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1487.548521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1487.549711] Call Trace: [ 1487.549979] [ 1487.550214] dump_stack_lvl+0x8b/0xb3 [ 1487.550626] should_fail.cold+0x5/0xa [ 1487.551029] prepare_alloc_pages+0x17b/0x500 [ 1487.551497] __alloc_pages+0x131/0x4e0 [ 1487.551908] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1487.552534] ? lock_is_held_type+0xd7/0x130 [ 1487.552988] ? lock_release+0x3b2/0x6f0 [ 1487.553425] ? __slab_alloc.constprop.0+0x45/0x80 [ 1487.553924] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1487.554501] alloc_pages+0x1a0/0x2f0 [ 1487.554892] ? mark_held_locks+0x9e/0xe0 [ 1487.555323] new_slab+0x256/0x360 [ 1487.555684] ___slab_alloc+0x849/0xc60 [ 1487.556089] ? apply_wqattrs_prepare+0xab/0x880 [ 1487.556583] ? lock_is_held_type+0xd7/0x130 [ 1487.557036] ? apply_wqattrs_prepare+0xab/0x880 [ 1487.557529] __slab_alloc.constprop.0+0x45/0x80 [ 1487.558016] ? apply_wqattrs_prepare+0xab/0x880 [ 1487.558504] __kmalloc+0x359/0x440 [ 1487.558886] apply_wqattrs_prepare+0xab/0x880 [ 1487.559362] apply_workqueue_attrs_locked+0xc1/0x140 [ 1487.559897] alloc_workqueue+0xb1a/0xeb0 [ 1487.560328] ? do_raw_spin_unlock+0x4f/0x210 [ 1487.560789] ? _raw_spin_unlock+0x24/0x40 [ 1487.561231] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1487.561806] ? __fget_files+0x28d/0x470 [ 1487.562234] ? loop_configure+0x62b/0x1950 [ 1487.562694] loop_configure+0x6ec/0x1950 [ 1487.563125] ? putname+0xfe/0x140 [ 1487.563502] lo_ioctl+0x7c5/0x18b0 [ 1487.563876] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1487.564402] ? loop_set_status_old+0x1b0/0x1b0 [ 1487.564879] ? avc_ss_reset+0x180/0x180 [ 1487.565309] ? __lock_acquire+0xbac/0x5b70 [ 1487.565806] ? selinux_inode_getsecctx+0x90/0x90 [ 1487.566331] ? loop_set_status_old+0x1b0/0x1b0 [ 1487.566830] blkdev_ioctl+0x362/0x7f0 [ 1487.567241] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1487.567762] ? __x64_sys_ioctl+0x97/0x210 [ 1487.568198] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1487.568788] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1487.569285] __x64_sys_ioctl+0x196/0x210 [ 1487.569735] do_syscall_64+0x3b/0x90 [ 1487.570132] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1487.570658] RIP: 0033:0x7fed060d28d7 [ 1487.571061] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1487.572937] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1487.573734] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1487.574471] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1487.575224] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1487.575952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1487.576705] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1487.577447] 08:53:19 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x4c000000, 0x0) [ 1487.597726] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:53:19 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1487.672944] loop4: detected capacity change from 0 to 140 [ 1487.706568] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1487.714159] EXT4-fs (loop4): get root inode failed [ 1487.715458] EXT4-fs (loop4): mount failed 08:53:33 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d6, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:53:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 36) 08:53:33 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$CDROMSETSPINDOWN(r2, 0x531e, &(0x7f0000000100)=0xa) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) fstat(r1, &(0x7f0000000140)) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:53:33 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x3, 0x10000) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x7, &(0x7f0000000100)=0x4) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:53:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x68000000, 0x0) 08:53:33 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xa000000) 08:53:33 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, 0x0) 08:53:33 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1502.014141] loop6: detected capacity change from 0 to 140 [ 1502.024473] FAULT_INJECTION: forcing a failure. [ 1502.024473] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.026929] CPU: 0 PID: 8908 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1502.028666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1502.031041] Call Trace: [ 1502.031582] [ 1502.032054] dump_stack_lvl+0x8b/0xb3 [ 1502.032875] should_fail.cold+0x5/0xa [ 1502.033707] ? alloc_workqueue_attrs+0x38/0x80 [ 1502.034680] should_failslab+0x5/0x10 [ 1502.035476] kmem_cache_alloc_trace+0x55/0x3c0 [ 1502.036455] alloc_workqueue_attrs+0x38/0x80 [ 1502.037381] apply_wqattrs_prepare+0xb3/0x880 [ 1502.038367] apply_workqueue_attrs_locked+0xc1/0x140 [ 1502.039442] alloc_workqueue+0xb1a/0xeb0 [ 1502.040307] ? do_raw_spin_unlock+0x4f/0x210 [ 1502.041359] ? _raw_spin_unlock+0x24/0x40 [ 1502.042400] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1502.043463] ? __fget_files+0x28d/0x470 [ 1502.044310] ? loop_configure+0x62b/0x1950 [ 1502.045203] loop_configure+0x6ec/0x1950 [ 1502.046088] ? putname+0xfe/0x140 [ 1502.046837] lo_ioctl+0x7c5/0x18b0 [ 1502.047585] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1502.048614] ? loop_set_status_old+0x1b0/0x1b0 [ 1502.049577] ? avc_ss_reset+0x180/0x180 [ 1502.050445] ? __lock_acquire+0xbac/0x5b70 [ 1502.051411] ? selinux_inode_getsecctx+0x90/0x90 [ 1502.052426] ? loop_set_status_old+0x1b0/0x1b0 [ 1502.053383] blkdev_ioctl+0x362/0x7f0 [ 1502.054206] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1502.055194] ? __x64_sys_ioctl+0x97/0x210 [ 1502.056067] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1502.057221] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1502.058224] __x64_sys_ioctl+0x196/0x210 [ 1502.059085] do_syscall_64+0x3b/0x90 [ 1502.059881] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1502.060959] RIP: 0033:0x7fed060d28d7 [ 1502.061741] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1502.065582] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1502.067189] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1502.068679] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1502.070173] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1502.071677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1502.073162] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1502.074703] 08:53:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x6c000000, 0x0) 08:53:33 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1502.111854] loop1: detected capacity change from 0 to 140 08:53:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 37) [ 1502.157023] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1502.168381] FAULT_INJECTION: forcing a failure. [ 1502.168381] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.169728] CPU: 1 PID: 8936 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1502.170575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1502.171762] Call Trace: [ 1502.172036] [ 1502.172270] dump_stack_lvl+0x8b/0xb3 [ 1502.172676] should_fail.cold+0x5/0xa [ 1502.173084] ? create_object.isra.0+0x3a/0xa20 [ 1502.173575] should_failslab+0x5/0x10 [ 1502.173983] kmem_cache_alloc+0x5b/0x480 [ 1502.174434] create_object.isra.0+0x3a/0xa20 [ 1502.174920] ? kasan_unpoison+0x23/0x50 [ 1502.175359] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1502.175857] alloc_workqueue_attrs+0x38/0x80 [ 1502.176334] apply_wqattrs_prepare+0xb3/0x880 [ 1502.176853] apply_workqueue_attrs_locked+0xc1/0x140 [ 1502.177380] alloc_workqueue+0xb1a/0xeb0 [ 1502.177848] ? do_raw_spin_unlock+0x4f/0x210 [ 1502.178309] ? _raw_spin_unlock+0x24/0x40 [ 1502.178774] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1502.179298] ? __fget_files+0x28d/0x470 [ 1502.179747] ? loop_configure+0x62b/0x1950 [ 1502.180208] loop_configure+0x6ec/0x1950 [ 1502.180660] ? putname+0xfe/0x140 [ 1502.181052] lo_ioctl+0x7c5/0x18b0 [ 1502.181435] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1502.181974] ? loop_set_status_old+0x1b0/0x1b0 [ 1502.182455] ? avc_ss_reset+0x180/0x180 [ 1502.182893] ? __lock_acquire+0xbac/0x5b70 [ 1502.183408] ? selinux_inode_getsecctx+0x90/0x90 [ 1502.183918] ? loop_set_status_old+0x1b0/0x1b0 [ 1502.184391] blkdev_ioctl+0x362/0x7f0 [ 1502.184792] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1502.185284] ? __x64_sys_ioctl+0x97/0x210 [ 1502.185726] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1502.186293] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1502.186777] __x64_sys_ioctl+0x196/0x210 [ 1502.187203] do_syscall_64+0x3b/0x90 [ 1502.187593] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1502.188122] RIP: 0033:0x7fed060d28d7 [ 1502.188503] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1502.190393] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1502.191169] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1502.191892] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1502.192611] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1502.193338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1502.194073] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1502.194840] [ 1502.224442] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:53:34 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d6, 0x0) 08:53:34 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:53:34 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:crypt_device_t:s0\x00', 0x24) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:53:34 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4020940d, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:53:34 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x74000000, 0x0) [ 1502.278967] loop4: detected capacity change from 0 to 140 [ 1502.280864] loop1: detected capacity change from 0 to 140 08:53:34 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xc000000) 08:53:34 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x7a000000, 0x0) [ 1502.343488] loop6: detected capacity change from 0 to 140 08:53:34 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454cf, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1502.397507] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1502.406500] EXT4-fs (loop4): get root inode failed [ 1502.406652] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1502.407104] EXT4-fs (loop4): mount failed [ 1502.413774] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1502.436439] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1502.447110] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/184/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:53:48 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01000100aaaaaaaaaabbdf19bcdeae5dd6de60a5a1e7e2fd8325d817559926019046774f5df2446645342e9ac6ccd73d94ae72cfba1823280900"/78]) 08:53:48 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 08:53:48 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x20000000) 08:53:48 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:53:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 38) 08:53:48 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401c5820, 0x0) 08:53:48 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='rpc_pipefs\x00', &(0x7f0000000140)='\x00q\x8f\x1ep\x8cvWW\x17\x10\xfeJ\xd6?t\x06P\\rj\xf9\xe0\xbc\xab\xac\xd7U\f\xce\xa9D\xf3\x9b\xd4+\x7f\x17]\xc3XL\xfc\x054\xc3\xee\xe7\xa4v)&E3\xa0V\x8ex2o\xb0\xae\xe3\xf6\x1e\xa1\xd4\xc0\xab\x94#?.\xb4\xe1DT\b\xa7\xef\x128`\tp\xdd\xbd\xc2\a;\xd3\x1d\xdd\xdf\xdb\xdb\xba\"\xa4\x9c\xf09\xeaB\xc9?GY\xea4J\x8f\xca\x80\xc5\xf7\xc8\xcc\xceF\f\xc5\xd3%\xf1\xe4\x8b\xbb\x1c&3\x8d\xec\x00\xf7\xf9k\xde\xca\xdb\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1516.389103] FAULT_INJECTION: forcing a failure. [ 1516.389103] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.390356] CPU: 0 PID: 8972 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1516.391229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1516.392415] Call Trace: [ 1516.392680] [ 1516.392920] dump_stack_lvl+0x8b/0xb3 [ 1516.393341] should_fail.cold+0x5/0xa [ 1516.393748] ? alloc_workqueue_attrs+0x38/0x80 [ 1516.394236] should_failslab+0x5/0x10 [ 1516.394646] kmem_cache_alloc_trace+0x55/0x3c0 [ 1516.395142] alloc_workqueue_attrs+0x38/0x80 [ 1516.395610] apply_wqattrs_prepare+0xbb/0x880 [ 1516.396114] apply_workqueue_attrs_locked+0xc1/0x140 [ 1516.396661] alloc_workqueue+0xb1a/0xeb0 [ 1516.397114] ? do_raw_spin_unlock+0x4f/0x210 [ 1516.397585] ? _raw_spin_unlock+0x24/0x40 [ 1516.398050] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1516.398585] ? __fget_files+0x28d/0x470 [ 1516.399020] ? loop_configure+0x62b/0x1950 [ 1516.399476] loop_configure+0x6ec/0x1950 [ 1516.399901] ? putname+0xfe/0x140 [ 1516.400269] lo_ioctl+0x7c5/0x18b0 [ 1516.400635] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1516.401142] ? loop_set_status_old+0x1b0/0x1b0 [ 1516.401622] ? avc_ss_reset+0x180/0x180 [ 1516.402091] ? __lock_acquire+0xbac/0x5b70 [ 1516.402576] ? selinux_inode_getsecctx+0x90/0x90 [ 1516.403082] ? loop_set_status_old+0x1b0/0x1b0 [ 1516.403561] blkdev_ioctl+0x362/0x7f0 [ 1516.403954] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1516.404445] ? __x64_sys_ioctl+0x97/0x210 [ 1516.404887] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1516.405455] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1516.405962] __x64_sys_ioctl+0x196/0x210 [ 1516.406396] do_syscall_64+0x3b/0x90 [ 1516.406792] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1516.407320] RIP: 0033:0x7fed060d28d7 [ 1516.407702] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1516.409623] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1516.410437] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1516.411191] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1516.411937] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1516.412702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1516.413458] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1516.414238] [ 1516.423168] No source specified [ 1516.425224] loop6: detected capacity change from 0 to 140 [ 1516.449173] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1516.471497] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1516.475891] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1516.477775] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/185/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1516.500167] FAULT_INJECTION: forcing a failure. [ 1516.500167] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.502103] CPU: 1 PID: 8992 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1516.503493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1516.505325] Call Trace: [ 1516.505747] [ 1516.506146] dump_stack_lvl+0x8b/0xb3 [ 1516.506794] should_fail.cold+0x5/0xa [ 1516.507435] ? create_object.isra.0+0x3a/0xa20 [ 1516.508221] should_failslab+0x5/0x10 [ 1516.508836] kmem_cache_alloc+0x5b/0x480 [ 1516.509524] create_object.isra.0+0x3a/0xa20 [ 1516.510278] ? kasan_unpoison+0x23/0x50 [ 1516.510955] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1516.511757] alloc_workqueue_attrs+0x38/0x80 [ 1516.512509] apply_wqattrs_prepare+0xbb/0x880 [ 1516.513300] apply_workqueue_attrs_locked+0xc1/0x140 [ 1516.514200] alloc_workqueue+0xb1a/0xeb0 [ 1516.514892] ? do_raw_spin_unlock+0x4f/0x210 [ 1516.515789] ? _raw_spin_unlock+0x24/0x40 [ 1516.516566] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1516.517420] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1516.518378] ? loop_configure+0x62b/0x1950 [ 1516.519114] loop_configure+0x6ec/0x1950 [ 1516.519803] ? putname+0xfe/0x140 [ 1516.520411] lo_ioctl+0x7c5/0x18b0 [ 1516.521011] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1516.521831] ? loop_set_status_old+0x1b0/0x1b0 [ 1516.522626] ? avc_ss_reset+0x180/0x180 [ 1516.523323] ? __lock_acquire+0xbac/0x5b70 [ 1516.524098] ? selinux_inode_getsecctx+0x90/0x90 [ 1516.524924] ? loop_set_status_old+0x1b0/0x1b0 [ 1516.525703] blkdev_ioctl+0x362/0x7f0 [ 1516.526364] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1516.527163] ? __x64_sys_ioctl+0x97/0x210 [ 1516.527860] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1516.528793] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1516.529592] __x64_sys_ioctl+0x196/0x210 [ 1516.530304] do_syscall_64+0x3b/0x90 [ 1516.530932] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1516.531786] RIP: 0033:0x7fed060d28d7 08:53:48 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454d2, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:53:48 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:53:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 39) [ 1516.532405] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1516.535723] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1516.536955] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1516.538183] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1516.539387] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1516.540582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1516.541775] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1516.543015] 08:53:48 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x432903, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:53:48 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x2) [ 1516.591827] No source specified [ 1516.617576] loop4: detected capacity change from 0 to 140 [ 1516.635885] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1516.639482] EXT4-fs (loop4): get root inode failed [ 1516.640236] EXT4-fs (loop4): mount failed 08:53:48 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454d3, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:53:48 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x3f000000) 08:53:48 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x3) 08:53:48 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1516.772745] No source specified 08:54:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 40) 08:54:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x4) 08:54:02 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:54:02 executing program 5: r0 = fsopen(&(0x7f0000000040)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) fsmount(r0, 0x0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000000140)=@lstk={0x7, 0x3, "bcefb7e1b4", 0x80000001, 0x0, 0x1, 0x2}) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='\'\x00', &(0x7f00000000c0)='-[&[\x00', 0x0) 08:54:02 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4020940d, 0x0) 08:54:02 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:54:02 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454d7, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:54:02 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x48000000) [ 1530.911727] loop1: detected capacity change from 0 to 7 [ 1530.912332] FAULT_INJECTION: forcing a failure. [ 1530.912332] name failslab, interval 1, probability 0, space 0, times 0 [ 1530.914169] CPU: 0 PID: 9038 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1530.914436] loop6: detected capacity change from 0 to 140 [ 1530.915043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1530.915054] Call Trace: [ 1530.915059] [ 1530.915064] dump_stack_lvl+0x8b/0xb3 [ 1530.915092] should_fail.cold+0x5/0xa [ 1530.915111] ? alloc_unbound_pwq+0x4ad/0xd70 [ 1530.915131] should_failslab+0x5/0x10 [ 1530.915144] kmem_cache_alloc_node+0x55/0x490 [ 1530.920070] ? lock_is_held_type+0xd7/0x130 [ 1530.920543] alloc_unbound_pwq+0x4ad/0xd70 [ 1530.920996] apply_wqattrs_prepare+0x2a4/0x880 [ 1530.921486] apply_workqueue_attrs_locked+0xc1/0x140 [ 1530.922018] alloc_workqueue+0xb1a/0xeb0 [ 1530.922461] ? do_raw_spin_unlock+0x4f/0x210 [ 1530.922930] ? _raw_spin_unlock+0x24/0x40 [ 1530.923370] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1530.923910] ? __fget_files+0x28d/0x470 [ 1530.924360] ? loop_configure+0x62b/0x1950 [ 1530.924808] loop_configure+0x6ec/0x1950 [ 1530.925255] ? putname+0xfe/0x140 [ 1530.925623] lo_ioctl+0x7c5/0x18b0 [ 1530.925994] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1530.926527] ? loop_set_status_old+0x1b0/0x1b0 [ 1530.927004] ? avc_ss_reset+0x180/0x180 [ 1530.927429] ? __lock_acquire+0xbac/0x5b70 [ 1530.927925] ? selinux_inode_getsecctx+0x90/0x90 [ 1530.928425] ? loop_set_status_old+0x1b0/0x1b0 [ 1530.928901] blkdev_ioctl+0x362/0x7f0 [ 1530.929298] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1530.929790] ? __x64_sys_ioctl+0x97/0x210 [ 1530.930231] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1530.930801] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1530.931295] __x64_sys_ioctl+0x196/0x210 [ 1530.931725] do_syscall_64+0x3b/0x90 [ 1530.932118] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1530.932669] RIP: 0033:0x7fed060d28d7 [ 1530.933057] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1530.934975] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1530.935763] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1530.936508] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1530.937269] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1530.938022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1530.938778] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1530.939527] [ 1530.946667] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (3 blocks) [ 1530.970885] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1531.032920] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:54:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x5) 08:54:02 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:54:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x6) 08:54:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 41) [ 1531.143484] FAULT_INJECTION: forcing a failure. [ 1531.143484] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.145915] CPU: 1 PID: 9056 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1531.147562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1531.149823] Call Trace: [ 1531.150345] [ 1531.150788] dump_stack_lvl+0x8b/0xb3 [ 1531.151567] should_fail.cold+0x5/0xa [ 1531.152341] ? create_object.isra.0+0x3a/0xa20 [ 1531.153256] should_failslab+0x5/0x10 [ 1531.154032] kmem_cache_alloc+0x5b/0x480 [ 1531.154872] create_object.isra.0+0x3a/0xa20 [ 1531.155891] ? kasan_unpoison+0x23/0x50 [ 1531.156772] kmem_cache_alloc_node+0x248/0x490 [ 1531.157713] alloc_unbound_pwq+0x4ad/0xd70 [ 1531.158735] apply_wqattrs_prepare+0x2a4/0x880 [ 1531.159738] apply_workqueue_attrs_locked+0xc1/0x140 [ 1531.160741] alloc_workqueue+0xb1a/0xeb0 [ 1531.161541] ? do_raw_spin_unlock+0x4f/0x210 [ 1531.162434] ? _raw_spin_unlock+0x24/0x40 [ 1531.163267] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1531.164262] ? __fget_files+0x28d/0x470 [ 1531.165051] ? loop_configure+0x62b/0x1950 [ 1531.165884] loop_configure+0x6ec/0x1950 [ 1531.166706] ? putname+0xfe/0x140 [ 1531.167412] lo_ioctl+0x7c5/0x18b0 [ 1531.168120] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1531.169069] ? loop_set_status_old+0x1b0/0x1b0 [ 1531.169955] ? avc_ss_reset+0x180/0x180 [ 1531.170757] ? __lock_acquire+0xbac/0x5b70 [ 1531.171648] ? selinux_inode_getsecctx+0x90/0x90 [ 1531.172726] ? loop_set_status_old+0x1b0/0x1b0 [ 1531.173908] blkdev_ioctl+0x362/0x7f0 [ 1531.174916] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1531.176363] ? __x64_sys_ioctl+0x97/0x210 [ 1531.177483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1531.178853] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1531.179799] __x64_sys_ioctl+0x196/0x210 [ 1531.180623] do_syscall_64+0x3b/0x90 [ 1531.181367] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1531.182411] RIP: 0033:0x7fed060d28d7 [ 1531.183151] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1531.186793] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1531.188291] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1531.189702] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1531.191116] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1531.192525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1531.193917] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1531.195382] 08:54:03 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x4c000000) 08:54:03 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454dd, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:54:03 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454cf, 0x0) 08:54:03 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x10002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:54:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x7) [ 1531.288831] loop4: detected capacity change from 0 to 140 [ 1531.289171] loop1: detected capacity change from 0 to 7 [ 1531.305180] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (3 blocks) [ 1531.334581] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) 08:54:03 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454e0, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1531.357490] EXT4-fs (loop4): get root inode failed [ 1531.358722] EXT4-fs (loop4): mount failed [ 1543.508498] FAULT_INJECTION: forcing a failure. [ 1543.508498] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.509707] CPU: 1 PID: 9089 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1543.510563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1543.511748] Call Trace: [ 1543.512011] [ 1543.512244] dump_stack_lvl+0x8b/0xb3 [ 1543.512651] should_fail.cold+0x5/0xa [ 1543.513055] ? kobject_uevent_env+0x22b/0xf90 [ 1543.513534] ? dev_uevent_filter+0xd0/0xd0 [ 1543.513988] should_failslab+0x5/0x10 [ 1543.514391] kmem_cache_alloc_trace+0x55/0x3c0 [ 1543.514862] ? lock_is_held_type+0xd7/0x130 [ 1543.515320] ? dev_uevent_filter+0xd0/0xd0 [ 1543.515768] kobject_uevent_env+0x22b/0xf90 [ 1543.516230] ? alloc_workqueue+0x840/0xeb0 [ 1543.516682] ? _raw_spin_unlock+0x24/0x40 [ 1543.517125] disk_event_uevent+0x17b/0x1e0 [ 1543.517567] ? disk_events_async_show+0x10/0x10 [ 1543.518054] ? __fget_files+0x28d/0x470 [ 1543.518479] disk_force_media_change+0x1e/0xc0 [ 1543.518950] loop_configure+0x75b/0x1950 [ 1543.519379] ? putname+0xfe/0x140 [ 1543.519752] lo_ioctl+0x7c5/0x18b0 [ 1543.520124] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1543.520629] ? loop_set_status_old+0x1b0/0x1b0 [ 1543.521104] ? avc_ss_reset+0x180/0x180 [ 1543.521529] ? __lock_acquire+0xbac/0x5b70 [ 1543.522002] ? selinux_inode_getsecctx+0x90/0x90 [ 1543.522514] ? loop_set_status_old+0x1b0/0x1b0 [ 1543.522987] blkdev_ioctl+0x362/0x7f0 [ 1543.523386] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1543.523870] ? __x64_sys_ioctl+0x97/0x210 [ 1543.524306] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1543.524875] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1543.525378] __x64_sys_ioctl+0x196/0x210 [ 1543.525798] do_syscall_64+0x3b/0x90 [ 1543.526192] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1543.526724] RIP: 0033:0x7fed060d28d7 [ 1543.527106] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1543.528987] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1543.529766] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1543.530530] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1543.531268] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1543.532001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1543.532745] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1543.533507] 08:54:15 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454d2, 0x0) 08:54:15 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x5bc21e00050ed916) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000080)="39deb6d68dda9d6980fd844db44c42c7", 0x10, 0x8040000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 08:54:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 42) 08:54:15 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000100aaaaaa85aabb"]) 08:54:15 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x68000000) 08:54:15 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x10) 08:54:15 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454e1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:54:15 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1543.577486] loop1: detected capacity change from 0 to 7 08:54:15 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x80086601, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1543.581426] loop6: detected capacity change from 0 to 140 [ 1543.590025] loop4: detected capacity change from 0 to 140 08:54:15 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x48) 08:54:15 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) tee(r1, r0, 0xc580000000000000, 0x1) fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) [ 1543.615110] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (3 blocks) [ 1543.629678] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1543.632688] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1543.638762] EXT4-fs (loop4): get root inode failed [ 1543.639336] EXT4-fs (loop4): mount failed [ 1543.651944] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:54:15 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x80087601, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1543.672589] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1543.680407] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/189/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:54:15 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454d3, 0x0) 08:54:15 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:54:30 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, 0x30, r2, 0x10000000) r4 = signalfd4(r1, &(0x7f0000000080)={[0x3ff]}, 0x8, 0x80800) r5 = syz_io_uring_setup(0xeaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x147}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000380)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, &(0x7f0000000100)="a3342368ffefa66f3096146bb5979d8764587ef001f8e0d85e8b0e596f903e0b792b14211065cd393db4f66c13ca3f8ecd4df1c616af25902a3e744b25f7f3a9a59ca94a0a71df9ba9c907bbecc908a79407fee4062358efac6d4ea9c86a1d7db21f3e365ea80e55b7c389aa7f171744351ccd8a", 0x74, 0x10000, 0x0, {0x0, r8}}, 0x0) dup3(r1, r2, 0x80000) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:54:30 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:54:30 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x121040, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r4) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xa0400}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x1b4, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc6}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x27}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x1a}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 08:54:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 43) 08:54:30 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x4c) 08:54:30 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x6c000000) 08:54:30 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x801054db, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:54:30 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454d7, 0x0) [ 1558.974119] loop6: detected capacity change from 0 to 140 [ 1559.002135] FAULT_INJECTION: forcing a failure. [ 1559.002135] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.004641] CPU: 1 PID: 9151 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1559.006355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1559.008727] Call Trace: [ 1559.009263] [ 1559.009728] dump_stack_lvl+0x8b/0xb3 [ 1559.010556] should_fail.cold+0x5/0xa [ 1559.011369] ? create_object.isra.0+0x3a/0xa20 [ 1559.012340] should_failslab+0x5/0x10 [ 1559.013137] kmem_cache_alloc+0x5b/0x480 [ 1559.014005] create_object.isra.0+0x3a/0xa20 [ 1559.014957] ? kasan_unpoison+0x23/0x50 [ 1559.015813] kmem_cache_alloc_trace+0x22e/0x3c0 08:54:30 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x68) [ 1559.016803] ? dev_uevent_filter+0xd0/0xd0 [ 1559.017920] kobject_uevent_env+0x22b/0xf90 [ 1559.018846] ? alloc_workqueue+0x840/0xeb0 [ 1559.019747] ? _raw_spin_unlock+0x24/0x40 [ 1559.020632] disk_event_uevent+0x17b/0x1e0 [ 1559.021536] ? disk_events_async_show+0x10/0x10 [ 1559.022535] ? __fget_files+0x28d/0x470 [ 1559.023393] disk_force_media_change+0x1e/0xc0 [ 1559.024379] loop_configure+0x75b/0x1950 [ 1559.025250] ? putname+0xfe/0x140 [ 1559.026000] lo_ioctl+0x7c5/0x18b0 [ 1559.026783] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1559.027819] ? loop_set_status_old+0x1b0/0x1b0 [ 1559.028785] ? avc_ss_reset+0x180/0x180 [ 1559.029645] ? __lock_acquire+0xbac/0x5b70 [ 1559.030620] ? selinux_inode_getsecctx+0x90/0x90 [ 1559.031636] ? loop_set_status_old+0x1b0/0x1b0 [ 1559.032592] blkdev_ioctl+0x362/0x7f0 [ 1559.033389] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1559.034381] ? __x64_sys_ioctl+0x97/0x210 [ 1559.035277] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1559.036434] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1559.037431] __x64_sys_ioctl+0x196/0x210 [ 1559.038287] do_syscall_64+0x3b/0x90 [ 1559.039088] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1559.040162] RIP: 0033:0x7fed060d28d7 [ 1559.040938] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1559.044761] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1559.046342] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1559.047837] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1559.049319] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1559.050822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1559.052317] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1559.053822] [ 1559.060093] loop1: detected capacity change from 0 to 140 [ 1559.069582] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1559.071698] loop4: detected capacity change from 0 to 140 [ 1559.108186] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1559.112334] EXT4-fs (loop4): get root inode failed [ 1559.113430] EXT4-fs (loop4): mount failed [ 1559.116154] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1559.120175] EXT4-fs error (device loop1): __ext4_fill_super:5273: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1559.124636] EXT4-fs (loop1): get root inode failed [ 1559.125808] EXT4-fs (loop1): mount failed 08:54:30 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x801c581f, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:54:30 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454dd, 0x0) 08:54:31 executing program 0: ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) 08:54:31 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x6c) 08:54:31 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x230000, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x70) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:54:31 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x74000000) 08:54:46 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x7a000000) 08:54:46 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:54:46 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x74) 08:54:46 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bond_slave_1\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)) 08:54:46 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:54:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 44) 08:54:46 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454e0, 0x0) 08:54:46 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1575.075829] FAULT_INJECTION: forcing a failure. [ 1575.075829] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.077589] CPU: 1 PID: 9200 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1575.078780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1575.080407] Call Trace: [ 1575.080780] [ 1575.081122] dump_stack_lvl+0x8b/0xb3 [ 1575.081694] should_fail.cold+0x5/0xa [ 1575.082269] ? kobject_get_path+0xc0/0x1c0 [ 1575.082916] should_failslab+0x5/0x10 [ 1575.083482] __kmalloc+0x72/0x440 [ 1575.083989] kobject_get_path+0xc0/0x1c0 [ 1575.084606] kobject_uevent_env+0x251/0xf90 [ 1575.085262] ? _raw_spin_unlock+0x24/0x40 [ 1575.085883] disk_event_uevent+0x17b/0x1e0 [ 1575.086514] ? disk_events_async_show+0x10/0x10 [ 1575.087223] ? __fget_files+0x28d/0x470 [ 1575.087813] disk_force_media_change+0x1e/0xc0 [ 1575.088484] loop_configure+0x75b/0x1950 [ 1575.089088] ? putname+0xfe/0x140 [ 1575.089628] lo_ioctl+0x7c5/0x18b0 [ 1575.090150] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1575.090880] ? loop_set_status_old+0x1b0/0x1b0 [ 1575.091546] ? avc_ss_reset+0x180/0x180 [ 1575.092156] ? __lock_acquire+0xbac/0x5b70 [ 1575.092828] ? selinux_inode_getsecctx+0x90/0x90 [ 1575.093536] ? loop_set_status_old+0x1b0/0x1b0 [ 1575.094216] blkdev_ioctl+0x362/0x7f0 [ 1575.094778] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1575.095464] ? __x64_sys_ioctl+0x97/0x210 [ 1575.096068] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1575.096874] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1575.097573] __x64_sys_ioctl+0x196/0x210 [ 1575.098179] do_syscall_64+0x3b/0x90 [ 1575.098737] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1575.099486] RIP: 0033:0x7fed060d28d7 [ 1575.100017] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1575.102699] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1575.103807] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1575.104833] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1575.105861] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1575.106904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1575.107927] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1575.108633] loop1: detected capacity change from 0 to 140 [ 1575.108976] [ 1575.113472] loop6: detected capacity change from 0 to 140 [ 1575.119126] loop4: detected capacity change from 0 to 140 [ 1575.136128] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1575.152442] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1575.156580] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1575.161257] EXT4-fs (loop4): get root inode failed [ 1575.161933] EXT4-fs (loop4): mount failed [ 1575.162013] EXT4-fs error (device loop1): __ext4_fill_super:5273: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1575.165659] EXT4-fs (loop1): get root inode failed [ 1575.166695] EXT4-fs (loop1): mount failed [ 1575.179794] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 08:54:47 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x7a) 08:54:47 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00./file0\x00']) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x8, 0x800) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1575.193568] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/192/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:54:47 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:54:47 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1575.293191] loop1: detected capacity change from 0 to 140 08:54:47 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xa8070000) 08:54:47 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xd) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1575.332663] loop6: detected capacity change from 0 to 140 08:54:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100028bd7000ffdbdf050200000008000300e0da28e1438e48a92bf7f947f1651158f999a8", @ANYRES32=0x0, @ANYBLOB="0c0099000600000002000000050019010b000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x24000880) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1575.359048] EXT4-fs error (device loop1): __ext4_fill_super:5273: inode #2: comm syz-executor.1: iget: root inode unallocated 08:54:47 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x300) 08:54:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 45) [ 1575.377351] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1575.385490] EXT4-fs (loop1): get root inode failed [ 1575.385493] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1575.388400] EXT4-fs (loop1): mount failed [ 1575.394218] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1575.404892] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/193/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:54:47 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454e1, 0x0) [ 1575.454547] FAULT_INJECTION: forcing a failure. [ 1575.454547] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.456862] CPU: 0 PID: 9253 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1575.458486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1575.460724] Call Trace: [ 1575.461231] [ 1575.461670] dump_stack_lvl+0x8b/0xb3 [ 1575.462448] should_fail.cold+0x5/0xa [ 1575.463220] ? create_object.isra.0+0x3a/0xa20 [ 1575.464139] should_failslab+0x5/0x10 [ 1575.464899] kmem_cache_alloc+0x5b/0x480 [ 1575.465734] create_object.isra.0+0x3a/0xa20 [ 1575.466626] ? kasan_unpoison+0x23/0x50 [ 1575.467455] __kmalloc+0x25b/0x440 [ 1575.468182] kobject_get_path+0xc0/0x1c0 [ 1575.469015] kobject_uevent_env+0x251/0xf90 [ 1575.469894] ? _raw_spin_unlock+0x24/0x40 [ 1575.470766] disk_event_uevent+0x17b/0x1e0 [ 1575.471626] ? disk_events_async_show+0x10/0x10 [ 1575.472572] ? __fget_files+0x28d/0x470 [ 1575.473369] disk_force_media_change+0x1e/0xc0 [ 1575.474297] loop_configure+0x75b/0x1950 [ 1575.475133] ? putname+0xfe/0x140 [ 1575.475856] lo_ioctl+0x7c5/0x18b0 [ 1575.476577] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1575.477579] ? loop_set_status_old+0x1b0/0x1b0 [ 1575.478510] ? avc_ss_reset+0x180/0x180 [ 1575.479360] ? __lock_acquire+0xbac/0x5b70 [ 1575.480300] ? selinux_inode_getsecctx+0x90/0x90 [ 1575.481286] ? loop_set_status_old+0x1b0/0x1b0 [ 1575.482226] blkdev_ioctl+0x362/0x7f0 [ 1575.483006] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1575.483969] ? __x64_sys_ioctl+0x97/0x210 [ 1575.484820] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1575.485952] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1575.486943] __x64_sys_ioctl+0x196/0x210 [ 1575.487783] do_syscall_64+0x3b/0x90 [ 1575.488568] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1575.489629] RIP: 0033:0x7fed060d28d7 [ 1575.490390] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1575.494173] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1575.495743] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1575.497209] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1575.498679] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1575.500172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1575.501645] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1575.503158] [ 1575.507584] loop4: detected capacity change from 0 to 140 [ 1575.529880] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1575.536100] EXT4-fs (loop4): get root inode failed [ 1575.537332] EXT4-fs (loop4): mount failed 08:55:01 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1589.984249] loop6: detected capacity change from 0 to 140 08:55:01 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="01ff0f0000eaaa04aabb6a484e32e7a81999cb82f8b076892a620cfc2225c1fc3553f5c9f9902c662bad66e418b0ffa634ee1690617a2b2acb0289a87077137ef50caa4593ed889ff887ad4f8700000000ae6aba3b43b88d2b682f79166695a5e7590b14cf36bae7d12b1e58e1e30259c39e9c93cfc3af06f74c2e4648a14f4cd464cb31eda886d507e7b3cb99cee06af103066b8700c01d842e277c00"]) 08:55:01 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x80086601, 0x0) 08:55:01 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0), 0x0, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:55:01 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x500) 08:55:01 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsopen(&(0x7f0000000080)='pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:55:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 46) 08:55:01 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xdeffffff) [ 1590.025193] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1590.028304] FAULT_INJECTION: forcing a failure. [ 1590.028304] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.031036] CPU: 1 PID: 9281 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1590.032664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1590.034928] Call Trace: [ 1590.035450] [ 1590.035896] dump_stack_lvl+0x8b/0xb3 [ 1590.036660] should_fail.cold+0x5/0xa [ 1590.037423] ? __alloc_skb+0x211/0x340 [ 1590.038197] should_failslab+0x5/0x10 [ 1590.038932] kmem_cache_alloc_node+0x55/0x490 [ 1590.039857] __alloc_skb+0x211/0x340 [ 1590.040600] alloc_uevent_skb+0x7b/0x210 [ 1590.041399] kobject_uevent_env+0x996/0xf90 [ 1590.042263] disk_event_uevent+0x17b/0x1e0 [ 1590.043097] ? disk_events_async_show+0x10/0x10 [ 1590.044004] ? __fget_files+0x28d/0x470 [ 1590.044785] disk_force_media_change+0x1e/0xc0 [ 1590.045670] loop_configure+0x75b/0x1950 [ 1590.046474] lo_ioctl+0x7c5/0x18b0 [ 1590.047175] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1590.048132] ? loop_set_status_old+0x1b0/0x1b0 [ 1590.049016] ? avc_ss_reset+0x180/0x180 [ 1590.049812] ? __lock_acquire+0xbac/0x5b70 [ 1590.050648] ? lock_is_held_type+0xd7/0x130 [ 1590.051577] ? selinux_inode_getsecctx+0x90/0x90 [ 1590.052518] ? loop_set_status_old+0x1b0/0x1b0 [ 1590.053447] blkdev_ioctl+0x362/0x7f0 [ 1590.054254] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1590.055501] ? __x64_sys_ioctl+0x97/0x210 [ 1590.056618] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1590.057939] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1590.058918] __x64_sys_ioctl+0x196/0x210 [ 1590.059806] do_syscall_64+0x3b/0x90 [ 1590.060554] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1590.061586] RIP: 0033:0x7fed060d28d7 [ 1590.062324] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1590.066019] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1590.067525] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 08:55:01 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x600) [ 1590.068917] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1590.070508] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1590.071920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1590.073316] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1590.074762] 08:55:01 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:wtmp_t:s0\x00', 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1590.103741] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1590.121607] loop4: detected capacity change from 0 to 140 [ 1590.121856] loop1: detected capacity change from 0 to 140 [ 1590.137331] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1590.141911] EXT4-fs (loop4): get root inode failed [ 1590.143037] EXT4-fs (loop4): mount failed [ 1590.188373] EXT4-fs error (device loop1): __ext4_fill_super:5273: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1590.199555] EXT4-fs (loop1): get root inode failed [ 1590.200776] EXT4-fs (loop1): mount failed 08:55:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x700) 08:55:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 47) 08:55:18 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0), 0x0, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:55:18 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:55:18 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xf5ffffff) 08:55:18 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x0) fsmount(r1, 0x1, 0xf9) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fsmount(r2, 0x1, 0x80) 08:55:18 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000080)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'macvlan1\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'bridge_slave_1\x00'}) 08:55:18 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x80087601, 0x0) [ 1606.848168] FAULT_INJECTION: forcing a failure. [ 1606.848168] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.849508] CPU: 1 PID: 9316 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1606.850413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1606.851646] Call Trace: [ 1606.851927] [ 1606.852170] dump_stack_lvl+0x8b/0xb3 [ 1606.852589] should_fail.cold+0x5/0xa [ 1606.853009] ? create_object.isra.0+0x3a/0xa20 [ 1606.853514] should_failslab+0x5/0x10 [ 1606.853924] kmem_cache_alloc+0x5b/0x480 [ 1606.854370] create_object.isra.0+0x3a/0xa20 [ 1606.854849] ? kasan_unpoison+0x23/0x50 [ 1606.855299] kmem_cache_alloc_node+0x248/0x490 [ 1606.855791] __alloc_skb+0x211/0x340 [ 1606.856200] alloc_uevent_skb+0x7b/0x210 [ 1606.856654] kobject_uevent_env+0x996/0xf90 [ 1606.857133] disk_event_uevent+0x17b/0x1e0 [ 1606.857577] ? disk_events_async_show+0x10/0x10 [ 1606.858098] ? __fget_files+0x28d/0x470 [ 1606.858546] disk_force_media_change+0x1e/0xc0 [ 1606.859057] loop_configure+0x75b/0x1950 [ 1606.859517] ? putname+0xfe/0x140 [ 1606.859910] lo_ioctl+0x7c5/0x18b0 [ 1606.860307] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1606.860847] ? loop_set_status_old+0x1b0/0x1b0 [ 1606.861359] ? avc_ss_reset+0x180/0x180 [ 1606.861801] ? __lock_acquire+0xbac/0x5b70 [ 1606.862275] ? selinux_inode_getsecctx+0x90/0x90 [ 1606.862818] ? loop_set_status_old+0x1b0/0x1b0 [ 1606.863351] blkdev_ioctl+0x362/0x7f0 [ 1606.863776] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1606.864307] ? __x64_sys_ioctl+0x97/0x210 [ 1606.864765] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1606.865375] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1606.865889] __x64_sys_ioctl+0x196/0x210 [ 1606.866347] do_syscall_64+0x3b/0x90 [ 1606.866774] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1606.867321] RIP: 0033:0x7fed060d28d7 [ 1606.867731] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1606.869777] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1606.870620] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1606.871420] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1606.872203] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1606.872999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1606.873788] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1606.874596] [ 1606.879776] loop6: detected capacity change from 0 to 140 [ 1606.882222] loop1: detected capacity change from 0 to 140 [ 1606.889618] loop4: detected capacity change from 0 to 140 [ 1606.894080] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1606.895314] EXT4-fs error (device loop1): __ext4_fill_super:5273: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1606.897310] EXT4-fs (loop1): get root inode failed [ 1606.897882] EXT4-fs (loop1): mount failed [ 1606.912828] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1606.918031] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1606.919515] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1606.922744] EXT4-fs (loop4): get root inode failed [ 1606.923346] EXT4-fs (loop4): mount failed [ 1606.928342] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/195/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1606.973863] FAULT_INJECTION: forcing a failure. [ 1606.973863] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.975262] CPU: 1 PID: 9338 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1606.976143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1606.977355] Call Trace: [ 1606.977640] [ 1606.977876] dump_stack_lvl+0x8b/0xb3 [ 1606.978304] should_fail.cold+0x5/0xa [ 1606.978725] should_failslab+0x5/0x10 [ 1606.979138] __kmalloc_node_track_caller+0x7e/0x440 [ 1606.979695] ? alloc_uevent_skb+0x7b/0x210 [ 1606.980157] __alloc_skb+0xe3/0x340 [ 1606.980552] alloc_uevent_skb+0x7b/0x210 [ 1606.980999] kobject_uevent_env+0x996/0xf90 [ 1606.981464] disk_event_uevent+0x17b/0x1e0 [ 1606.981922] ? disk_events_async_show+0x10/0x10 [ 1606.982431] ? __fget_files+0x28d/0x470 [ 1606.982867] disk_force_media_change+0x1e/0xc0 [ 1606.983375] loop_configure+0x75b/0x1950 [ 1606.983825] ? putname+0xfe/0x140 08:55:18 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0), 0x0, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:55:18 executing program 5: r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x80, 0x0) fsmount(r1, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000100)={0x9, 0x20, [0x1, 0x2, 0x5ef2], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:55:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 48) [ 1606.984203] lo_ioctl+0x7c5/0x18b0 [ 1606.984837] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1606.985364] ? loop_set_status_old+0x1b0/0x1b0 [ 1606.985862] ? avc_ss_reset+0x180/0x180 [ 1606.986301] ? __lock_acquire+0xbac/0x5b70 [ 1606.986800] ? selinux_inode_getsecctx+0x90/0x90 [ 1606.987318] ? loop_set_status_old+0x1b0/0x1b0 [ 1606.987815] blkdev_ioctl+0x362/0x7f0 [ 1606.988217] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1606.988727] ? __x64_sys_ioctl+0x97/0x210 [ 1606.989163] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1606.989763] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1606.990288] __x64_sys_ioctl+0x196/0x210 [ 1606.990736] do_syscall_64+0x3b/0x90 [ 1606.991145] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1606.991702] RIP: 0033:0x7fed060d28d7 [ 1606.992096] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1606.994059] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1606.994879] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1606.995662] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1606.996654] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1606.997424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1606.998184] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1606.998934] [ 1606.999821] loop4: detected capacity change from 0 to 140 [ 1607.034510] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1607.037357] EXT4-fs (loop4): get root inode failed [ 1607.037963] EXT4-fs (loop4): mount failed 08:55:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x4800) 08:55:18 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:55:18 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xfbffffff) 08:55:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x4c00) 08:55:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 49) [ 1607.146288] loop1: detected capacity change from 0 to 140 [ 1607.213227] EXT4-fs error (device loop1): __ext4_fill_super:5273: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1607.236672] EXT4-fs (loop1): get root inode failed [ 1607.237913] EXT4-fs (loop1): mount failed [ 1607.253791] FAULT_INJECTION: forcing a failure. [ 1607.253791] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.255289] CPU: 1 PID: 9364 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1607.256138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1607.257377] Call Trace: [ 1607.257735] [ 1607.258042] dump_stack_lvl+0x8b/0xb3 [ 1607.258459] should_fail.cold+0x5/0xa [ 1607.258865] ? create_object.isra.0+0x3a/0xa20 [ 1607.259367] should_failslab+0x5/0x10 [ 1607.259766] kmem_cache_alloc+0x5b/0x480 [ 1607.260200] create_object.isra.0+0x3a/0xa20 [ 1607.260664] ? kasan_unpoison+0x23/0x50 [ 1607.261098] __kmalloc_node_track_caller+0x269/0x440 [ 1607.261626] ? alloc_uevent_skb+0x7b/0x210 [ 1607.262083] __alloc_skb+0xe3/0x340 [ 1607.262475] alloc_uevent_skb+0x7b/0x210 [ 1607.262964] kobject_uevent_env+0x996/0xf90 [ 1607.263534] disk_event_uevent+0x17b/0x1e0 [ 1607.263981] ? disk_events_async_show+0x10/0x10 [ 1607.264462] ? __fget_files+0x28d/0x470 [ 1607.264875] disk_force_media_change+0x1e/0xc0 [ 1607.265350] loop_configure+0x75b/0x1950 [ 1607.265776] ? putname+0xfe/0x140 [ 1607.266287] lo_ioctl+0x7c5/0x18b0 [ 1607.266731] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1607.267387] ? loop_set_status_old+0x1b0/0x1b0 [ 1607.267981] ? avc_ss_reset+0x180/0x180 [ 1607.268477] ? __lock_acquire+0xbac/0x5b70 [ 1607.268955] ? selinux_inode_getsecctx+0x90/0x90 [ 1607.269453] ? loop_set_status_old+0x1b0/0x1b0 [ 1607.269927] blkdev_ioctl+0x362/0x7f0 [ 1607.270471] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1607.270962] ? __x64_sys_ioctl+0x97/0x210 [ 1607.271460] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1607.272156] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1607.272645] __x64_sys_ioctl+0x196/0x210 [ 1607.273107] do_syscall_64+0x3b/0x90 [ 1607.273606] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1607.274144] RIP: 0033:0x7fed060d28d7 [ 1607.274525] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1607.276537] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1607.277454] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1607.278319] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1607.279173] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1607.279995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1607.280804] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1607.281747] [ 1607.290271] loop4: detected capacity change from 0 to 140 [ 1607.302593] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1607.305798] EXT4-fs (loop4): get root inode failed [ 1607.306535] EXT4-fs (loop4): mount failed [ 1620.944986] loop1: detected capacity change from 0 to 140 [ 1620.955063] FAULT_INJECTION: forcing a failure. [ 1620.955063] name failslab, interval 1, probability 0, space 0, times 0 [ 1620.957508] CPU: 0 PID: 9378 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1620.959215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1620.961617] Call Trace: [ 1620.962162] 08:55:32 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x2, 0x1, [@remote]}) 08:55:32 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x6800) 08:55:32 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x4, 0x408101) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000180)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = open_tree(r0, &(0x7f00000002c0)='./file1\x00', 0x100801) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) kcmp(0xffffffffffffffff, 0x0, 0x4, r5, r6) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x1) io_uring_enter(r2, 0x100001, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000480)=ANY=[@ANYBLOB="df22a1569e12fab71561c7f7573ec6435c43655af6c78aa308792e949e372f5e8c0bb1696d440ae21e5c3fbdfd0d7aedaec33ff5ade44778bdbd1081354253c9751b6d6a1c76b4cfb9810023830c4eedfce2d71f589140ff03e45456f781be7b6500000000000000568b085dca49f8014e5f31756df81f84a9391fb89150e939dbaf9eebfc895944778267c40590e15d95a3adb42171c48ce87566259f28ffb58129edf6c42f473700c0"]) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000080)={0x43, 0x9, 0x1, {0xfffffff8, 0x4, 0x8, 0x6097d25b, 0xa32, 0x0, 0x2, 0x2, 0xfffffff8}}, 0x43) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r7, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000200)) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000100)) 08:55:32 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c7", 0x2f, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:55:32 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xfeffffff) 08:55:32 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) fsmount(r0, 0x0, 0x80) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0xd8da, 0x434a83) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='rpc_pipefs\x00', &(0x7f0000000140)='\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:55:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 50) 08:55:32 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x801054db, 0x0) [ 1620.962639] dump_stack_lvl+0x8b/0xb3 [ 1620.963691] should_fail.cold+0x5/0xa [ 1620.964515] ? skb_clone+0x170/0x3c0 [ 1620.965320] should_failslab+0x5/0x10 [ 1620.966128] kmem_cache_alloc+0x5b/0x480 [ 1620.967006] skb_clone+0x170/0x3c0 [ 1620.967784] netlink_broadcast+0x9ac/0xd60 [ 1620.968703] ? alloc_uevent_skb+0x1c2/0x210 [ 1620.969635] kobject_uevent_env+0x939/0xf90 [ 1620.970580] disk_event_uevent+0x17b/0x1e0 [ 1620.971504] ? disk_events_async_show+0x10/0x10 [ 1620.972506] ? __fget_files+0x28d/0x470 [ 1620.973364] disk_force_media_change+0x1e/0xc0 [ 1620.974341] loop_configure+0x75b/0x1950 [ 1620.975216] ? putname+0xfe/0x140 [ 1620.975979] lo_ioctl+0x7c5/0x18b0 [ 1620.976729] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1620.977769] ? loop_set_status_old+0x1b0/0x1b0 [ 1620.978739] ? avc_ss_reset+0x180/0x180 [ 1620.979633] ? __lock_acquire+0xbac/0x5b70 [ 1620.980621] ? selinux_inode_getsecctx+0x90/0x90 [ 1620.981653] ? loop_set_status_old+0x1b0/0x1b0 [ 1620.982624] blkdev_ioctl+0x362/0x7f0 [ 1620.983435] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1620.984438] ? __x64_sys_ioctl+0x97/0x210 [ 1620.985322] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1620.986488] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1620.987502] __x64_sys_ioctl+0x196/0x210 [ 1620.988367] do_syscall_64+0x3b/0x90 [ 1620.989173] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1620.990263] RIP: 0033:0x7fed060d28d7 [ 1620.991045] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1620.994898] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1620.996521] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1620.998023] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1620.999528] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1621.001036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1621.002540] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1621.004101] [ 1621.011600] loop6: detected capacity change from 0 to 140 [ 1621.021471] loop4: detected capacity change from 0 to 140 [ 1621.024373] EXT4-fs error (device loop1): __ext4_fill_super:5273: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1621.026967] EXT4-fs (loop1): get root inode failed [ 1621.027515] EXT4-fs (loop1): mount failed [ 1621.029534] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:55:32 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x6c00) [ 1621.040182] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1621.043093] EXT4-fs (loop4): get root inode failed [ 1621.043646] EXT4-fs (loop4): mount failed [ 1621.064855] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:55:32 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@remote]}) 08:55:32 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x801c581f, 0x0) 08:55:32 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c7", 0x2f, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:55:32 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xff0f0000) 08:55:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 51) 08:55:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x7400) 08:55:33 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB]) 08:55:33 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x300, [@remote]}) [ 1621.213751] loop1: detected capacity change from 0 to 140 08:55:33 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/23, 0x17}], 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) [ 1621.248069] FAULT_INJECTION: forcing a failure. [ 1621.248069] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.249312] CPU: 1 PID: 9416 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1621.250168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1621.251389] Call Trace: [ 1621.251679] [ 1621.251913] dump_stack_lvl+0x8b/0xb3 [ 1621.252328] should_fail.cold+0x5/0xa [ 1621.252730] ? create_object.isra.0+0x3a/0xa20 [ 1621.253216] should_failslab+0x5/0x10 [ 1621.253612] kmem_cache_alloc+0x5b/0x480 [ 1621.254048] create_object.isra.0+0x3a/0xa20 [ 1621.254513] ? kasan_unpoison+0x23/0x50 [ 1621.254939] kmem_cache_alloc+0x239/0x480 [ 1621.255376] skb_clone+0x170/0x3c0 [ 1621.255789] netlink_broadcast+0x9ac/0xd60 [ 1621.256247] ? alloc_uevent_skb+0x1c2/0x210 [ 1621.256703] kobject_uevent_env+0x939/0xf90 [ 1621.257175] disk_event_uevent+0x17b/0x1e0 [ 1621.257621] ? disk_events_async_show+0x10/0x10 [ 1621.258113] ? __fget_files+0x28d/0x470 [ 1621.258534] disk_force_media_change+0x1e/0xc0 [ 1621.259015] loop_configure+0x75b/0x1950 [ 1621.259455] ? putname+0xfe/0x140 [ 1621.259839] lo_ioctl+0x7c5/0x18b0 [ 1621.260212] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1621.260732] ? loop_set_status_old+0x1b0/0x1b0 [ 1621.261213] ? avc_ss_reset+0x180/0x180 [ 1621.261649] ? __lock_acquire+0xbac/0x5b70 [ 1621.262143] ? selinux_inode_getsecctx+0x90/0x90 [ 1621.262670] ? loop_set_status_old+0x1b0/0x1b0 [ 1621.263148] blkdev_ioctl+0x362/0x7f0 [ 1621.263577] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1621.264071] ? __x64_sys_ioctl+0x97/0x210 [ 1621.264512] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1621.265091] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1621.265599] __x64_sys_ioctl+0x196/0x210 [ 1621.266026] do_syscall_64+0x3b/0x90 [ 1621.266445] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1621.266985] RIP: 0033:0x7fed060d28d7 [ 1621.267392] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1621.269307] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1621.270116] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1621.270872] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1621.271628] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1621.272382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1621.273133] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1621.273903] [ 1621.279400] loop6: detected capacity change from 0 to 140 [ 1621.296322] EXT4-fs error (device loop1): __ext4_fill_super:5273: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1621.299642] EXT4-fs (loop1): get root inode failed [ 1621.300737] EXT4-fs (loop1): mount failed [ 1621.305363] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1621.308165] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1621.317747] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1621.323179] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/198/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1621.330422] loop4: detected capacity change from 0 to 140 [ 1621.360520] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1621.362726] EXT4-fs (loop4): get root inode failed [ 1621.363289] EXT4-fs (loop4): mount failed 08:55:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x7a00) 08:55:49 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='%?!)#\x00', &(0x7f00000000c0)='!\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r1 = epoll_create(0xfffffffc) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000100)=0x1) 08:55:49 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0xc0045878, 0x0) 08:55:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 52) 08:55:49 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40042, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_macvtap\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:55:49 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x5, [@random="d73f477a2248", @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}]}) 08:55:49 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xfffbffff) 08:55:49 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c7", 0x2f, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1637.473228] FAULT_INJECTION: forcing a failure. [ 1637.473228] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.474531] CPU: 1 PID: 9452 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1637.475402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1637.476606] Call Trace: [ 1637.476872] [ 1637.477111] dump_stack_lvl+0x8b/0xb3 [ 1637.477523] should_fail.cold+0x5/0xa [ 1637.477885] loop6: detected capacity change from 0 to 140 [ 1637.477931] ? __kernfs_new_node+0xd4/0x8b0 [ 1637.477950] should_failslab+0x5/0x10 [ 1637.477963] kmem_cache_alloc+0x5b/0x480 [ 1637.480330] __kernfs_new_node+0xd4/0x8b0 [ 1637.480774] ? kernfs_path_from_node+0x60/0x60 [ 1637.481248] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1637.481807] ? mark_held_locks+0x9e/0xe0 [ 1637.482244] ? lock_is_held_type+0xd7/0x130 [ 1637.482692] ? find_held_lock+0x2c/0x110 [ 1637.483121] kernfs_create_dir_ns+0x9c/0x220 [ 1637.483579] internal_create_group+0x782/0xb20 [ 1637.484077] ? sysfs_remove_group+0x170/0x170 [ 1637.484556] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1637.485073] ? __loop_update_dio+0x2a3/0x620 [ 1637.485538] loop_configure+0xe87/0x1950 [ 1637.485974] lo_ioctl+0x7c5/0x18b0 [ 1637.486341] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1637.486849] ? loop_set_status_old+0x1b0/0x1b0 [ 1637.487326] ? avc_ss_reset+0x180/0x180 [ 1637.487753] ? __lock_acquire+0xbac/0x5b70 [ 1637.488242] ? selinux_inode_getsecctx+0x90/0x90 [ 1637.488738] ? loop_set_status_old+0x1b0/0x1b0 [ 1637.489217] blkdev_ioctl+0x362/0x7f0 [ 1637.489613] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1637.490113] ? __x64_sys_ioctl+0x97/0x210 [ 1637.490548] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1637.491122] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1637.491627] __x64_sys_ioctl+0x196/0x210 [ 1637.492069] do_syscall_64+0x3b/0x90 [ 1637.492472] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1637.493005] RIP: 0033:0x7fed060d28d7 [ 1637.493391] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1637.495278] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1637.496069] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1637.496807] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1637.497552] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1637.498288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1637.499025] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1637.499790] [ 1637.500098] loop4: detected capacity change from 0 to 140 [ 1637.532559] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1637.534835] EXT4-fs (loop4): get root inode failed [ 1637.535401] EXT4-fs (loop4): mount failed [ 1637.539447] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1637.558105] loop1: detected capacity change from 0 to 140 [ 1637.576114] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1637.590068] FAULT_INJECTION: forcing a failure. [ 1637.590068] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.592404] CPU: 0 PID: 9471 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1637.594063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1637.596356] Call Trace: [ 1637.596869] [ 1637.597318] dump_stack_lvl+0x8b/0xb3 [ 1637.598119] should_fail.cold+0x5/0xa [ 1637.598907] ? __kernfs_new_node+0xd4/0x8b0 [ 1637.599782] should_failslab+0x5/0x10 [ 1637.600542] kmem_cache_alloc+0x5b/0x480 [ 1637.601371] __kernfs_new_node+0xd4/0x8b0 [ 1637.602210] ? kernfs_path_from_node+0x60/0x60 [ 1637.603130] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1637.604206] ? mark_held_locks+0x9e/0xe0 [ 1637.605060] ? lock_is_held_type+0xd7/0x130 [ 1637.605931] ? find_held_lock+0x2c/0x110 [ 1637.606762] kernfs_create_dir_ns+0x9c/0x220 [ 1637.607665] internal_create_group+0x782/0xb20 [ 1637.608626] ? sysfs_remove_group+0x170/0x170 [ 1637.609554] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1637.610558] ? __loop_update_dio+0x2a3/0x620 [ 1637.611443] loop_configure+0xe87/0x1950 [ 1637.612274] lo_ioctl+0x7c5/0x18b0 [ 1637.612972] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1637.613947] ? loop_set_status_old+0x1b0/0x1b0 [ 1637.614852] ? avc_ss_reset+0x180/0x180 [ 1637.615665] ? __lock_acquire+0xbac/0x5b70 [ 1637.616614] ? selinux_inode_getsecctx+0x90/0x90 [ 1637.617572] ? loop_set_status_old+0x1b0/0x1b0 [ 1637.618498] blkdev_ioctl+0x362/0x7f0 [ 1637.619333] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1637.620379] ? __x64_sys_ioctl+0x97/0x210 [ 1637.621295] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1637.622505] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1637.623541] __x64_sys_ioctl+0x196/0x210 [ 1637.624456] do_syscall_64+0x3b/0x90 [ 1637.625288] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1637.626426] RIP: 0033:0x7fed060d28d7 [ 1637.627235] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1637.631307] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1637.632989] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1637.634544] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1637.635956] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1637.637355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1637.638751] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1637.640195] [ 1637.640842] loop4: detected capacity change from 0 to 140 08:55:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 53) 08:55:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x100000) 08:55:49 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0xc0045878, 0x0) [ 1637.652351] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/199/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1637.671104] EXT4-fs error (device loop1): __ext4_fill_super:5273: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1637.675976] EXT4-fs (loop1): get root inode failed [ 1637.676526] EXT4-fs (loop1): mount failed 08:55:49 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x700, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x6b1, 0x33, @mgmt_frame=@auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7ff8}, @broadcast, @device_a, @from_mac, {0x3}}, 0x0, 0x3, 0x30, @void, [{0xdd, 0x7b, "5ac8bdf54bcc8510859d8443efa6962749a64002536d76b379bda9f656072739b717bdb9d4d5b2326203391c254cb39a51c13d85ba894fd1817fe6dbe57456402f58592e0aee15202bd5089c80fd39f7868e59cb143e5f0ff39973b01e120778b1b436d909705b292e78874020e145e689789ab452564cfa29a1bd"}, {0xdd, 0xf0, "2587216ad92e86d9a90747735d280cf1e3d0adeadeddd158703a1de377dbb14465dc513cc6267b7cc53a4d540dd054732980ec534f4911064a379c95b211ca35369277a5d3c6dbb2159574f7acaad8c5d3f1fc67a88f05cf28f3f44d403ea73e9c12bc2f4acc8b8052ba6f9013e8b54aa7cf3021697d63f49e4839a591ec61c0ebc9fc15c4b2768bc9c48dc0e1ecd616204ad3f0f3b7bc7f106d91bbb01c013d0e1f52eeb10f7d4121217cbdf8dd09552c1e5c885c5f9ba9f920144f628af2ca9b86590cd75ae40d2f2f15a4e6f7665e4270e5e6ab406c11f374834f18e47e52ddbd963285a44d59fb5b794bde802042"}, {0xdd, 0x70, "144a4548de8ff80854d64750b2b9d88f71fbf4a597cc1a78b74227a53de93d2352674d55f8413e1a350f13ea46ba61a743bcc9726b2f9c41b08bd513717418efa739e793a8c86751e4c5581b8d88dcc4169e49cbc237eaa66e7e53c858371cc26b0bf4de92f24e17ed66b3911e1a7958"}, {0xdd, 0x72, "faaf0aafd52c51d08112cb4cf06d44a1f29dcef24716f7914c06efc31eb9246746b972413265895e46e1e0ddf594ce8ced15384bf4e8f0689300ca23441de9460c4a7272d752f59627d2fb3985ca233ae179364c4336d465bc5b57a5e722bef345a3b628969505456427c5ea6441a8e9036b"}, {0xdd, 0xfa, "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"}, {0xdd, 0x40, "ecefce2881670650f0c2ff28f41f75cc30fb4f1900840c7947e98d2c5b97761c5eb333c22393459834cc1515e7b21a33e6893212004b8bb565d9a7ca5b69c813"}, {0xdd, 0x9c, "5ecd63c62f8ba6177026dbc3ad247ef37f57f986dd6c64fe41bdee822ee09cbb2c0751e3eee1d57275a55d2b032df46d143581ec4f71283a186bc921e7e7da4bb6207597f3390284515270896b323518cd8b45d7532c03aaede8f08a0fc7b46fd18900ba5fd6970c2100a80dc4062ad81d221a7489ffdec4c19e2767e51f29000bae03d98d524bf1b5b7cef8a47b967d553740accb9935c38ebd393c"}, {0xdd, 0xb5, "9aa85424e748e04a1f5c29a69d20e4139311e912afa010d525ad71894c89257bbcd4e86a909f264941ebb7e6dc5a261f555886c848e62de657ceb5e134ad1724e43f819485d79d8c07767267e1e98f360529594b6640d2b997384fc82b50802abf0678bda7e25a4dfb66bea10c7e3cb1bb46a3328a8b19efe7bf5a2a46313c5c93a175aff69c7aa507da39cae0a4a7f1a34e3592665d1645ada74eb82238784717af4abdc9696ddf24083786c332d9e21dbcb1b479"}, {0xdd, 0xf7, "cf7b07d166f2b9cb94abf62742566bc2802c5f245ba37bdbd841629a25f89fc7971bf2087a88e63ddf38c709345eafcd044503f61639dcfe0124f0e8644da0a7aabca756e6b50507fb1defa12e8c231fd15d208bc2d76b1339b11cf899d610458054febe11874876609b14fef89ebd988bb96c8e4124a56cd1a421ece0187a3eb844202578cd69fd03ccac1a45bc3db0afb277f5e4e05a5ac57708b0fa779f2879b365889d1f504f4e96c62e0f4cf83b892ee70afc5ff65c81dd902820d16a219d9b89a685f96e0ad93dada9827b4e1918dbdecff6762d8c76932682293e8607d26271afe63f57dbb4c7e27a2b9a292b5a945968ec08c2"}, {0xdd, 0xac, "fbd5722f4314a97f71ff9ade581941ea2078e3048b1543f657cb7f8b71ac4beca57d05afba6a043e1ae2533b3f3707e092458906ce123c3d791d0ba77c545114bab459a687e9e5700e25ddfd1327b5229a88dc9e5024f8fd2d30c219eb1dd58663c6f45a8fcd0dba4dab9a898cdae4c2b2d657706d1c6681fc0c8217b2209483b58988f77c825a29e0d374604da5777fa7fb7a32636cf36f1319c9f464e6523b0c58e5def2003e6cecb42735"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {}, @device_a, @device_b}}]}, 0x700}, 0x1, 0x0, 0x0, 0x20000891}, 0x40000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:55:49 executing program 5: r0 = fsopen(&(0x7f0000000080)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="10d9ef86c74264bbf29199af76dccf08f1cff140416d6bef306067e7974a3f230db66fc860fe4db4928d917d49339ad60fa9520bbd53edf4f0cbe991d1b462ada8601c5131ee7a88c44d3b337ce14c33221630bbaecddc9a579f70f1f5f3e73a0d931b7e293e3a3318d3e72cc6c48b01f031ddc41da705e1cf806d33900deb488ca016fae9a40da4b61a5665ad15fd1d83f959a088ae85d591d5cd5acdd56e4f72e3af86d29dde74fae3125329c90239406c6ced1b", 0xb5}, {&(0x7f0000000180)="b42b3c358a9cac2f1b376e0c86392fbd2fe6e906f5b8f130907f7ce8ef718add55b67e2b9f8717d2085462a8f501dfbf2dfea19cc8a82e3c2d64ccb76d3b05e5142cca9631044923f040d839334fe265fa21993236de4588301c36df4b4e4b2876553079db036f76534fd8b3df61e5280c435351e22b", 0x76}, {&(0x7f0000000200)="b6e9adfa655555a42b326e3c8b9e3ec377fea279b780783d911b6044630f5bac7ebb4f02da065cca2f321d9dfd357fbba636e9f0d86f8f9cccd4c9c53039d39fcbabe7d97bec8209b62d70f731d43c7de3f954ba73d485fa560d4ffab1a7ede499fe5ec9b6291cf8a010b4f9660d344c20e342527a9e4000e7", 0x79}, {&(0x7f0000000040)="28280466afeb8e364811d9c578f435e2e329d02f3091b5230eaa8d1a70dc9eeeab6b979236f29568201e76c060bb249a5f93c545ba3356a906ded76526fa", 0x3e}, {&(0x7f0000000280)="5e49c1b0e4214ac70332b70e82c79212e838d388cfd2b4c5f78a498ee1a1db8bdcb1e8a91e2496b0ce59d7dd5e362c2fea28a5922eff269b319e82f3fd3faf0b81185cf8c546d27ab916123768129a5fba4c17bf8767fa9bc7af468f31eeb178dac7aaabddf9e86819c6c485b4dafed0191f349c0583", 0x76}, {&(0x7f0000000300)="f8ee63dea9fa6d05274eace677565cc89ff004b36b140454478a0f930ce5262f7e0f9b3477a39208e3e6d0efb6a8a868c451e4e8de045c5e4f4d01ea2f4d443fee6934d48d95459a304b7cdb910f2f15f6df71d8e30626633697822d15cd717c2aadada4baf96de519020cf5ae5d28f0790e87a36dabd9f4f838a930dc3a76c5d59016c5683a987d16bf9e5bbb042edc6fac3381c86b", 0x96}], 0x6, 0x9, 0x6) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:55:49 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x3a, 0xc, '\x00', [@pad1, @generic={0x2, 0x55, "80cb6b1e03879fc2fedc0ba6ceb5a729dcaa66431c97a77d807a787dafedade84fd4693e26c098a867c130acf9cdd5f1c39f2a93bda33e390d24719cf96d9e417fd62ff4e052b0e143a958fab0100de8275c1946d1"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x68) clock_gettime(0x0, &(0x7f0000003bc0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000003ac0)=[{{&(0x7f0000000100)=@ax25={{}, [@bcast, @remote, @bcast, @rose, @netrom, @default, @netrom, @null]}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/84, 0x54}], 0x1, &(0x7f00000002c0)=""/136, 0x88}, 0x3f}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/119, 0x77}, {&(0x7f0000000240)=""/10, 0xa}], 0x2}, 0x3f}, {{&(0x7f0000000440)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f00000004c0)=""/25, 0x19}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/105, 0x69}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/169, 0xa9}], 0x5, &(0x7f00000026c0)=""/210, 0xd2}, 0x7}, {{&(0x7f00000027c0)=@vsock, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002840)=""/160, 0xa0}, {&(0x7f0000002900)=""/206, 0xce}, {&(0x7f0000002a00)=""/42, 0x2a}, {&(0x7f0000002a40)=""/24, 0x18}], 0x4, &(0x7f0000002ac0)=""/4096, 0x1000}, 0x80000000}], 0x4, 0x40000141, &(0x7f0000003c00)={r0, r1+60000000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) dup3(r2, r2, 0x80000) 08:55:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x1000000) 08:55:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x2000000) [ 1637.778337] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1637.780541] EXT4-fs (loop4): get root inode failed [ 1637.781237] EXT4-fs (loop4): mount failed 08:55:49 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008000000", 0x46, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:55:49 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xffffe000) 08:55:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x3000000) 08:55:49 executing program 0: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}]}, 0x58}, 0x1, 0x0, 0x0, 0x220088d4}, 0x8040) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000200)=0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:55:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 54) [ 1637.896472] FAULT_INJECTION: forcing a failure. [ 1637.896472] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.898218] CPU: 1 PID: 9508 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1637.899122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1637.900306] Call Trace: [ 1637.900581] [ 1637.900826] dump_stack_lvl+0x8b/0xb3 [ 1637.901255] should_fail.cold+0x5/0xa [ 1637.901670] ? radix_tree_node_alloc.constprop.0+0x1df/0x330 [ 1637.902298] should_failslab+0x5/0x10 [ 1637.902710] kmem_cache_alloc+0x5b/0x480 [ 1637.903162] radix_tree_node_alloc.constprop.0+0x1df/0x330 [ 1637.903803] idr_get_free+0x4b5/0x8f0 [ 1637.904239] idr_alloc_u32+0x16c/0x2c0 [ 1637.904669] ? __fprop_add_percpu_max+0x1a0/0x1a0 [ 1637.905199] ? lock_acquire+0x1b2/0x4d0 [ 1637.905636] idr_alloc_cyclic+0x102/0x230 [ 1637.906095] ? idr_alloc+0x130/0x130 [ 1637.906504] ? rwlock_bug.part.0+0x90/0x90 [ 1637.906974] __kernfs_new_node+0x117/0x8b0 [ 1637.907430] ? kernfs_path_from_node+0x60/0x60 [ 1637.907930] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1637.908500] ? mark_held_locks+0x9e/0xe0 [ 1637.908953] ? lock_is_held_type+0xd7/0x130 [ 1637.909424] ? find_held_lock+0x2c/0x110 [ 1637.909873] kernfs_create_dir_ns+0x9c/0x220 [ 1637.910354] internal_create_group+0x782/0xb20 [ 1637.910865] ? sysfs_remove_group+0x170/0x170 [ 1637.911372] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1637.911956] ? __loop_update_dio+0x2a3/0x620 [ 1637.912480] loop_configure+0xe87/0x1950 [ 1637.912951] lo_ioctl+0x7c5/0x18b0 [ 1637.913360] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1637.913924] ? loop_set_status_old+0x1b0/0x1b0 [ 1637.914452] ? avc_ss_reset+0x180/0x180 [ 1637.914920] ? __lock_acquire+0xbac/0x5b70 [ 1637.915430] ? selinux_inode_getsecctx+0x90/0x90 [ 1637.915983] ? loop_set_status_old+0x1b0/0x1b0 [ 1637.916495] blkdev_ioctl+0x362/0x7f0 [ 1637.916889] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1637.917434] ? __x64_sys_ioctl+0x97/0x210 [ 1637.917870] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1637.918470] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1637.918977] __x64_sys_ioctl+0x196/0x210 [ 1637.919422] do_syscall_64+0x3b/0x90 [ 1637.919862] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1637.920414] RIP: 0033:0x7fed060d28d7 [ 1637.920813] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1637.922802] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1637.923617] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1637.924414] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1637.925166] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1637.925945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1637.926725] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1637.927512] 08:55:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x4000000) 08:55:49 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'veth0_to_bond\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x0, 0x4, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @remote, @remote]}) 08:55:49 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0xc0189436, 0x0) [ 1637.964096] loop6: detected capacity change from 0 to 140 08:55:49 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00'}) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x2, 0x178, 0x10}, 0x18) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x240080, 0x0) syz_open_dev$vcsa(&(0x7f0000000180), 0x9, 0x4000) openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x82c02, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0x4d, [@broadcast]}) [ 1637.999072] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1638.007345] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1638.009810] loop1: detected capacity change from 0 to 140 [ 1638.015707] loop4: detected capacity change from 0 to 140 [ 1638.019809] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1638.025216] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/200/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1638.042277] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1638.046867] EXT4-fs error (device loop1): ext4_ext_check_inode:497: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1638.050695] EXT4-fs (loop1): get root inode failed [ 1638.051812] EXT4-fs (loop1): mount failed [ 1638.074742] EXT4-fs (loop4): get root inode failed [ 1638.075990] EXT4-fs (loop4): mount failed 08:56:05 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:56:05 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x5) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'gre0\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00f10100aaaaaaaaaabb45630f5a19b25867704301cc4063afa28990088f121342ff1147fef79ae02c9d7e33d7b105a51000f3d2bdf9495418fa"]) r3 = socket(0x9, 0x3, 0x6) pwrite64(r3, &(0x7f00000000c0)="dc7b21d807f6a1bdacaa870b5e02f3a653e8ad2339141fd00d602f6016490e1ceb75a44fff106e07941deb842dbf186c2053ca1a102374e0279041d04fcd325f6377e0a119debefcb59b97634f8d5a5b551d63590a59e6325dc3", 0x5a, 0x5) [ 1653.533129] FAULT_INJECTION: forcing a failure. [ 1653.533129] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.534776] CPU: 0 PID: 9540 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1653.535875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1653.537481] Call Trace: [ 1653.537822] [ 1653.538120] dump_stack_lvl+0x8b/0xb3 [ 1653.538656] should_fail.cold+0x5/0xa [ 1653.539181] ? create_object.isra.0+0x3a/0xa20 [ 1653.539781] should_failslab+0x5/0x10 [ 1653.540374] kmem_cache_alloc+0x5b/0x480 [ 1653.540950] create_object.isra.0+0x3a/0xa20 [ 1653.541534] ? kasan_unpoison+0x23/0x50 [ 1653.542074] kmem_cache_alloc+0x239/0x480 [ 1653.542620] radix_tree_node_alloc.constprop.0+0x1df/0x330 [ 1653.543372] idr_get_free+0x4b5/0x8f0 [ 1653.543884] idr_alloc_u32+0x16c/0x2c0 [ 1653.544491] ? __fprop_add_percpu_max+0x1a0/0x1a0 [ 1653.545174] ? lock_acquire+0x1b2/0x4d0 [ 1653.545741] idr_alloc_cyclic+0x102/0x230 [ 1653.546333] ? idr_alloc+0x130/0x130 [ 1653.546860] ? rwlock_bug.part.0+0x90/0x90 [ 1653.547468] __kernfs_new_node+0x117/0x8b0 [ 1653.548169] ? kernfs_path_from_node+0x60/0x60 [ 1653.548773] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1653.549513] ? mark_held_locks+0x9e/0xe0 [ 1653.550086] ? lock_is_held_type+0xd7/0x130 [ 1653.550687] ? find_held_lock+0x2c/0x110 [ 1653.551250] kernfs_create_dir_ns+0x9c/0x220 [ 1653.551843] internal_create_group+0x782/0xb20 [ 1653.552565] ? sysfs_remove_group+0x170/0x170 [ 1653.553153] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1653.553822] ? __loop_update_dio+0x2a3/0x620 [ 1653.554460] loop_configure+0xe87/0x1950 [ 1653.555172] lo_ioctl+0x7c5/0x18b0 [ 1653.555676] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1653.556459] ? loop_set_status_old+0x1b0/0x1b0 [ 1653.557099] ? avc_ss_reset+0x180/0x180 [ 1653.557683] ? __lock_acquire+0xbac/0x5b70 [ 1653.558318] ? selinux_inode_getsecctx+0x90/0x90 [ 1653.558995] ? loop_set_status_old+0x1b0/0x1b0 [ 1653.559629] blkdev_ioctl+0x362/0x7f0 [ 1653.560193] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1653.560842] ? __x64_sys_ioctl+0x97/0x210 [ 1653.561460] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1653.562260] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1653.562919] __x64_sys_ioctl+0x196/0x210 [ 1653.563490] do_syscall_64+0x3b/0x90 [ 1653.564137] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1653.564845] RIP: 0033:0x7fed060d28d7 [ 1653.565341] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1653.568014] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1653.569569] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1653.570546] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1653.571564] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1653.572646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1653.573641] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1653.574682] [ 1653.607469] loop1: detected capacity change from 0 to 140 08:56:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 55) 08:56:05 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xfffffbff) 08:56:05 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008000000", 0x46, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:56:05 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0xc020660b, 0x0) 08:56:05 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x5000000) 08:56:05 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x805) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c6300, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000300)) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x6, 0x0, r2, &(0x7f00000001c0)="10", 0x1}]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan1\x00'}) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f0000000200)="07c9b7f17ebb26d49473c7572f04a963f767e30d4ee8c39f6535c36558cfe412f254abc03946b94a9dde617da4", 0x2d}, {&(0x7f0000000180)="4e877ebe51bebdf1a2c85bc508135624e3b80426328ece448e1d03d12f75f3c483fad935ddea85969c2303bf", 0x2c}, {&(0x7f0000000240)="0bbd6b1ad8a05749fb9c2b21aae3a2e336092e32a83fc6f09a1b7c4f42d57d2d7e3db4fb696093fa6cedb2e636b686effe32a4c0661d39b561403f96e6a0a2baebf16a39666aa4fbb14d82c0a36d3fdece63774cc27a48f5d7f14021fcd7cd2d43b89429543c27e70eff23af6f66697a40c01d56dc73d20d7c78add53d019dc89294e50a2d10ce9f63eaa8e27342290b0dfd9f3e98026a8a344bceb29266029e6628b963199879efd4bb01109be44dd6f16d1edeea7dbf279192", 0xba}, {&(0x7f0000000140)="186c6a2ab6af4598012c67a50545773b6a5cd4b5bb938ed7105ec18d296baca62cbffbad18f3574bf5a45772d2399d", 0x2f}], 0x23b034bed995ebff, 0x4) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = open_tree(r4, &(0x7f0000000380)='./file1\x00', 0x81901) ioctl$SCSI_IOCTL_START_UNIT(r5, 0x5) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000040)) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000500)=ANY=[@ANYBLOB="01000100aaaaaaaad1c98f1e7982bc045dd47e5309ef40ac5f36c5095945af21918760dee21800dc645fe13838c7f1452fe9c04a4800cb21c9422f5ea612d6a9ac8165654ae7aff605b5d08969b3f8eb608000211fb95ae71bb59c895bdcd81e5f250ac40f80ddab968ec3598554efa62eba43d7094edc90cf1217351ff901ca760fecd4fde27be0a548190d64e7982d9e2e6659c324b14ca6588ccab926a8f3921111cfe4415f83757ffc828d547a94ce6a5a0ab1adca2250e3a37bcfb5d78eb6c41758aafd8d38281453c460a0b615d99f5bd4721dcfb513e3301551cd0ff3fc6cef69f80824f59b0421aaf720be9f44307d182ba2afb44bb505b62b34d4f313ef128fa48051"]) [ 1653.639760] EXT4-fs error (device loop1): ext4_ext_check_inode:497: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1653.650816] EXT4-fs (loop1): get root inode failed [ 1653.652334] EXT4-fs (loop1): mount failed 08:56:05 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x6000000) [ 1653.682242] loop6: detected capacity change from 0 to 140 [ 1653.704995] loop4: detected capacity change from 0 to 140 08:56:05 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x11}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000100)={0x9, 0x20, [0x2, 0x2a, 0x200000006cd9, 0xfff], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="bb"]) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00'}) [ 1653.727369] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1653.747847] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1653.754036] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1653.757605] EXT4-fs (loop4): get root inode failed [ 1653.758560] EXT4-fs (loop4): mount failed 08:56:05 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008000000", 0x46, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1653.772558] EXT4-fs error (device loop6): ext4_validate_block_bitmap:398: comm ext4lazyinit: bg 0: block 3: invalid block bitmap 08:56:05 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x450003, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) 08:56:05 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)) r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x65e2b4e7fe05d5ed) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000300)=0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x154, 0x0, 0x5, 0x3, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x3}, [@nested={0x138, 0x50, 0x0, 0x1, [@typed={0x8, 0x82, 0x0, 0x0, @fd=r2}, @generic="1272ab392c46341336c761b6b376d58b32ed1828c8c97d4956b1e61c4a141a786460e8021691f36b7f05456afdc73a3af16b1d637f668b86490bb842aa96eedf62f55f2904495eff657be849b44ace120e501110602881756176d274134950a935abfa2e172107756c8178a8930ac662bfc4bce747407caacea3f1f89458cb4093176b3cf232a5cbec68be94b35cc43a57668a7da7fbda5bc3d3d265b56d380af1f0e648ede9cb493af2f4f31296aa70cdc0705dbdd6d7c50f00f8f8002260f27c97fbf5df609ae7006e85", @generic="17faec83ce2e07c9add58fc993ad644cf6012961ecf3ba72175c74257e4b0ac117f0ebdf052285065745f3dc432ee2bf4033caff4fafda8e68d104de8e2b04b33471e3f3eb8d0da45720f2df371eb433e7106bfd5f", @typed={0x8, 0x43, 0x0, 0x0, @uid=0xee00}, @typed={0x4, 0x5a}]}, @typed={0x8, 0x52, 0x0, 0x0, @pid=r3}]}, 0x154}, 0x1, 0x0, 0x0, 0x40c0}, 0x24000) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1653.900866] loop1: detected capacity change from 0 to 140 [ 1653.918971] EXT4-fs error (device loop1): ext4_ext_check_inode:497: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1653.922765] EXT4-fs (loop1): get root inode failed [ 1653.923721] EXT4-fs (loop1): mount failed 08:56:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 56) 08:56:20 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x1, [@broadcast]}) 08:56:20 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000", 0x52, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:56:20 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:56:20 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xffffff7f) 08:56:20 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x7000000) [ 1668.623724] loop6: detected capacity change from 0 to 140 [ 1668.640426] loop1: detected capacity change from 0 to 140 08:56:20 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={{r2}, 0x10001, 0x6, 0x4}) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x0) 08:56:20 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x210841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'team0\x00'}) finit_module(r0, &(0x7f0000000080)='%+\x00', 0x2) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) [ 1668.666671] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1668.669575] FAULT_INJECTION: forcing a failure. [ 1668.669575] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.671217] CPU: 1 PID: 9607 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1668.672547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1668.674163] Call Trace: [ 1668.674616] [ 1668.675020] dump_stack_lvl+0x8b/0xb3 [ 1668.676526] should_fail.cold+0x5/0xa [ 1668.677523] ? __kernfs_new_node+0xd4/0x8b0 [ 1668.678175] should_failslab+0x5/0x10 [ 1668.678677] kmem_cache_alloc+0x5b/0x480 [ 1668.679256] __kernfs_new_node+0xd4/0x8b0 [ 1668.679837] ? kernfs_path_from_node+0x60/0x60 [ 1668.680599] ? find_held_lock+0x2c/0x110 [ 1668.681891] ? lock_release+0x3b2/0x6f0 [ 1668.682417] ? kernfs_add_one+0x3c6/0x550 [ 1668.683633] ? lock_downgrade+0x6d0/0x6d0 [ 1668.684245] ? lock_is_held_type+0xd7/0x130 [ 1668.684846] kernfs_new_node+0x93/0x120 [ 1668.685401] __kernfs_create_file+0x51/0x350 [ 1668.686024] sysfs_add_file_mode_ns+0x218/0x430 [ 1668.687298] ? component_del+0x4c0/0x4c0 [ 1668.688312] internal_create_group+0x322/0xb20 [ 1668.688918] ? sysfs_remove_group+0x170/0x170 [ 1668.689538] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1668.690201] ? __loop_update_dio+0x2a3/0x620 [ 1668.690773] loop_configure+0xe87/0x1950 [ 1668.691964] lo_ioctl+0x7c5/0x18b0 [ 1668.693230] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1668.693914] ? loop_set_status_old+0x1b0/0x1b0 [ 1668.694651] ? avc_ss_reset+0x180/0x180 [ 1668.695353] ? __lock_acquire+0xbac/0x5b70 [ 1668.696015] ? selinux_inode_getsecctx+0x90/0x90 [ 1668.696764] ? loop_set_status_old+0x1b0/0x1b0 [ 1668.697380] blkdev_ioctl+0x362/0x7f0 [ 1668.697968] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1668.698703] ? __x64_sys_ioctl+0x97/0x210 [ 1668.699299] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.700287] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1668.701051] __x64_sys_ioctl+0x196/0x210 [ 1668.701693] do_syscall_64+0x3b/0x90 [ 1668.702262] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1668.702980] RIP: 0033:0x7fed060d28d7 [ 1668.703479] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1668.706064] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1668.707153] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1668.708174] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1668.709117] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1668.710190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1668.711155] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1668.712131] 08:56:20 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000040)=""/157) [ 1668.721177] loop4: detected capacity change from 0 to 140 [ 1668.729768] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1668.730277] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1668.733472] EXT4-fs (loop4): get root inode failed [ 1668.734313] EXT4-fs (loop4): mount failed [ 1668.735035] EXT4-fs error (device loop1): ext4_ext_check_inode:497: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1668.738744] EXT4-fs (loop1): get root inode failed [ 1668.739590] EXT4-fs (loop1): mount failed 08:56:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 57) [ 1668.845799] FAULT_INJECTION: forcing a failure. [ 1668.845799] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.847510] CPU: 0 PID: 9619 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1668.848682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1668.850143] Call Trace: [ 1668.850490] [ 1668.850817] dump_stack_lvl+0x8b/0xb3 [ 1668.851351] should_fail.cold+0x5/0xa [ 1668.851898] ? create_object.isra.0+0x3a/0xa20 [ 1668.852555] should_failslab+0x5/0x10 [ 1668.853060] kmem_cache_alloc+0x5b/0x480 [ 1668.853603] create_object.isra.0+0x3a/0xa20 [ 1668.854233] ? kasan_unpoison+0x23/0x50 [ 1668.854792] kmem_cache_alloc+0x239/0x480 [ 1668.855358] __kernfs_new_node+0xd4/0x8b0 [ 1668.855946] ? kernfs_add_one+0x3c6/0x550 [ 1668.856580] ? kernfs_path_from_node+0x60/0x60 [ 1668.857228] ? lock_is_held_type+0xd7/0x130 [ 1668.857839] ? up_write+0x148/0x460 [ 1668.858341] ? kernfs_activate+0x1c4/0x240 [ 1668.858911] kernfs_new_node+0x93/0x120 [ 1668.859453] __kernfs_create_file+0x51/0x350 [ 1668.860055] sysfs_add_file_mode_ns+0x218/0x430 [ 1668.860730] ? component_del+0x4c0/0x4c0 [ 1668.861301] internal_create_group+0x322/0xb20 [ 1668.861965] ? sysfs_remove_group+0x170/0x170 [ 1668.862594] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1668.863247] ? __loop_update_dio+0x2a3/0x620 [ 1668.863894] loop_configure+0xe87/0x1950 [ 1668.864574] lo_ioctl+0x7c5/0x18b0 [ 1668.865087] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1668.865731] ? loop_set_status_old+0x1b0/0x1b0 [ 1668.866340] ? avc_ss_reset+0x180/0x180 [ 1668.866876] ? __lock_acquire+0xbac/0x5b70 [ 1668.867479] ? selinux_inode_getsecctx+0x90/0x90 [ 1668.868113] ? loop_set_status_old+0x1b0/0x1b0 [ 1668.868746] blkdev_ioctl+0x362/0x7f0 [ 1668.869270] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1668.869945] ? __x64_sys_ioctl+0x97/0x210 [ 1668.870648] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.871530] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1668.872265] __x64_sys_ioctl+0x196/0x210 [ 1668.872903] do_syscall_64+0x3b/0x90 [ 1668.873480] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1668.874216] RIP: 0033:0x7fed060d28d7 [ 1668.874742] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1668.877446] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1668.878579] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1668.879648] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1668.880667] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1668.881703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1668.882735] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1668.883719] [ 1668.937879] loop4: detected capacity change from 0 to 140 [ 1668.955459] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1668.960698] EXT4-fs (loop4): get root inode failed [ 1668.961583] EXT4-fs (loop4): mount failed [ 1683.506895] loop1: detected capacity change from 0 to 140 08:56:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 58) 08:56:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x5, 0x400002) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x24, 0x6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000080)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$TUNSETTXFILTER(r2, 0x4b47, 0x0) 08:56:35 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = fsmount(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000013000"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) 08:56:35 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000", 0x52, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:56:35 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x10000000) 08:56:35 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x610200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:56:35 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xffffffde) [ 1683.524721] FAULT_INJECTION: forcing a failure. [ 1683.524721] name failslab, interval 1, probability 0, space 0, times 0 [ 1683.526339] CPU: 0 PID: 9643 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1683.527434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1683.529033] Call Trace: [ 1683.529388] [ 1683.529702] dump_stack_lvl+0x8b/0xb3 [ 1683.530254] should_fail.cold+0x5/0xa [ 1683.530804] ? __kernfs_new_node+0xd4/0x8b0 [ 1683.531424] should_failslab+0x5/0x10 [ 1683.531965] kmem_cache_alloc+0x5b/0x480 [ 1683.532576] __kernfs_new_node+0xd4/0x8b0 [ 1683.533176] ? kernfs_add_one+0x3c6/0x550 [ 1683.533730] ? kernfs_path_from_node+0x60/0x60 [ 1683.534338] ? lock_is_held_type+0xd7/0x130 [ 1683.534913] ? up_write+0x148/0x460 [ 1683.535384] ? kernfs_activate+0x1c4/0x240 [ 1683.535945] kernfs_new_node+0x93/0x120 [ 1683.536508] __kernfs_create_file+0x51/0x350 [ 1683.537106] sysfs_add_file_mode_ns+0x218/0x430 [ 1683.537741] ? component_del+0x4c0/0x4c0 [ 1683.538314] internal_create_group+0x322/0xb20 [ 1683.538975] ? sysfs_remove_group+0x170/0x170 [ 1683.539591] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1683.540261] ? __loop_update_dio+0x2a3/0x620 [ 1683.540937] loop_configure+0xe87/0x1950 [ 1683.541522] lo_ioctl+0x7c5/0x18b0 [ 1683.542012] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1683.542691] ? loop_set_status_old+0x1b0/0x1b0 [ 1683.543410] ? avc_ss_reset+0x180/0x180 [ 1683.543993] ? __lock_acquire+0xbac/0x5b70 [ 1683.544705] ? selinux_inode_getsecctx+0x90/0x90 [ 1683.545401] ? loop_set_status_old+0x1b0/0x1b0 [ 1683.546039] blkdev_ioctl+0x362/0x7f0 [ 1683.546629] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1683.547326] ? __x64_sys_ioctl+0x97/0x210 [ 1683.547904] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1683.548737] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1683.549446] __x64_sys_ioctl+0x196/0x210 [ 1683.550013] do_syscall_64+0x3b/0x90 [ 1683.550562] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1683.551299] RIP: 0033:0x7fed060d28d7 [ 1683.551835] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1683.554502] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1683.555590] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1683.556614] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1683.557614] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1683.558634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1683.559641] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1683.560742] [ 1683.569330] loop6: detected capacity change from 0 to 140 [ 1683.581021] EXT4-fs error (device loop1): ext4_ext_check_inode:497: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1683.585722] EXT4-fs (loop1): get root inode failed [ 1683.586565] EXT4-fs (loop1): mount failed 08:56:35 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@random="e53ef082f65b"]}) 08:56:35 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000100aaaaaaae72bb"]) [ 1683.606678] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1683.645431] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:56:35 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x48000000) 08:56:35 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:lvm_control_t:s0\x00', 0x23) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_vlan\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1683.672099] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/203/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:56:35 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x3, 0x12d143) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x288}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100)={[0x9]}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:56:35 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x2, 0x1, 0xfffffffffffeffff, 0x1, 0xffffffffffffffff}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)) 08:56:35 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000", 0x52, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:56:35 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x4c000000) [ 1683.760210] loop4: detected capacity change from 0 to 140 [ 1683.787832] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1683.803001] loop1: detected capacity change from 0 to 140 08:56:35 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x68000000) [ 1683.850278] EXT4-fs (loop4): get root inode failed [ 1683.851436] EXT4-fs (loop4): mount failed [ 1683.859202] EXT4-fs error (device loop1): ext4_ext_check_inode:497: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1683.878546] EXT4-fs (loop1): get root inode failed [ 1683.879725] EXT4-fs (loop1): mount failed 08:56:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 59) 08:56:35 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:56:35 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xfffffff5) 08:56:35 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x9]}, 0x8) accept$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x6, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x811) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:56:35 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "1cd7949795f5102e9ccf5699ea4ceae96cb1e0af"}, 0x15, 0x1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) write$binfmt_misc(r0, &(0x7f0000000100)={'syz1', "555fec1f17c1d509d60a2c238118aabcff9b08678ab6c1c99b77a119d06e751d2ff57546b269947dbb8a50d4ede6be70420827144c2b6f670b1959234821a1d58ac34e1be890b66c73f5d144dd2db74651e529e2eb1afcb053cd611d3b2c02736fea7d1b9113270f436e00853bdc1d7df92d88231314593ea6b9cbfef5908e7277cb2a54795fdf958372f9e3c1bf3858a7652726b6b94d6aed841697bb138c3ca9b340149ca23376c2efe140b4ad418b9bb6604083a1f5ec5d5cc9ddbacd52ac1962304e688fbe389d2181c3ca7020afd9ad5b055a02f0be752e6704441c2fda8589887a03ba240a1daa35558d"}, 0xf1) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0x0, 0xfffffffffffffffe, 0xc6, 0x9, @buffer={0x0, 0x7b, &(0x7f00000002c0)=""/123}, &(0x7f0000000340)="71a36adf0f226e7e081b5df169c098d8cdeb0257b4887201eff2786c111254bcfa91e1011e46f9d573be8a6b22edfb1e5f6046551de1eea28cc0f80e93140279f9686f50afdf49d74e6eedf7fcb2d680f969db0abb4422a6b601fb4bf4712ba5da98745486924eab58b6c1aef1dfb15dd66802f1dfb016d9e4171f3828073fd69dfbf6cb9f71d3a4e2e4a3055ac072ece050f7fa6fbc56055a773283f55902693354486f9898d9aaa592ba1535add1703871076db0f689c0aba7b028ea9daf6d18aa0c9d8768", &(0x7f0000000440)=""/161, 0x7, 0x0, 0x1, &(0x7f0000000200)}) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000240)={0x80000000, 0x0, [0x1, 0x8, 0x7fff, 0x8c5], &(0x7f0000000200)}) [ 1683.979897] loop6: detected capacity change from 0 to 140 08:56:35 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400"/88, 0x58, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:56:35 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:56:35 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x6c000000) [ 1684.048752] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1684.055281] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1684.093305] FAULT_INJECTION: forcing a failure. [ 1684.093305] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.094958] CPU: 0 PID: 9700 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1684.096075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1684.097689] Call Trace: [ 1684.098044] [ 1684.098341] dump_stack_lvl+0x8b/0xb3 [ 1684.098926] should_fail.cold+0x5/0xa [ 1684.099446] ? create_object.isra.0+0x3a/0xa20 [ 1684.100123] should_failslab+0x5/0x10 [ 1684.100343] loop1: detected capacity change from 0 to 140 [ 1684.100704] kmem_cache_alloc+0x5b/0x480 [ 1684.102254] create_object.isra.0+0x3a/0xa20 [ 1684.102889] ? kasan_unpoison+0x23/0x50 [ 1684.103455] kmem_cache_alloc+0x239/0x480 [ 1684.104061] __kernfs_new_node+0xd4/0x8b0 [ 1684.104702] ? kernfs_add_one+0x3c6/0x550 [ 1684.105294] ? kernfs_path_from_node+0x60/0x60 [ 1684.105920] ? lock_is_held_type+0xd7/0x130 [ 1684.106475] ? up_write+0x148/0x460 [ 1684.106978] ? kernfs_activate+0x1c4/0x240 [ 1684.107608] kernfs_new_node+0x93/0x120 [ 1684.108164] __kernfs_create_file+0x51/0x350 [ 1684.108807] sysfs_add_file_mode_ns+0x218/0x430 [ 1684.109441] ? component_del+0x4c0/0x4c0 [ 1684.110051] internal_create_group+0x322/0xb20 [ 1684.110698] ? sysfs_remove_group+0x170/0x170 [ 1684.111361] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1684.112040] ? __loop_update_dio+0x2a3/0x620 [ 1684.112152] EXT4-fs error (device loop1): ext4_ext_check_inode:497: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1684.112687] loop_configure+0xe87/0x1950 [ 1684.112718] lo_ioctl+0x7c5/0x18b0 [ 1684.115789] EXT4-fs (loop1): get root inode failed [ 1684.116038] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1684.116779] EXT4-fs (loop1): mount failed [ 1684.117442] ? loop_set_status_old+0x1b0/0x1b0 [ 1684.117470] ? avc_ss_reset+0x180/0x180 [ 1684.119186] ? __lock_acquire+0xbac/0x5b70 [ 1684.119821] ? selinux_inode_getsecctx+0x90/0x90 [ 1684.120533] ? loop_set_status_old+0x1b0/0x1b0 [ 1684.121165] blkdev_ioctl+0x362/0x7f0 [ 1684.121689] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1684.122344] ? __x64_sys_ioctl+0x97/0x210 [ 1684.122914] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1684.123666] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1684.124306] __x64_sys_ioctl+0x196/0x210 [ 1684.124875] do_syscall_64+0x3b/0x90 [ 1684.125383] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1684.126077] RIP: 0033:0x7fed060d28d7 [ 1684.126623] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.129081] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1684.130114] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1684.131073] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1684.132027] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1684.133058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1684.133985] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1684.134964] [ 1684.143074] loop4: detected capacity change from 0 to 140 [ 1684.191744] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) 08:56:36 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x74000000) [ 1684.200775] EXT4-fs (loop4): get root inode failed [ 1684.201545] EXT4-fs (loop4): mount failed 08:56:50 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000180)={{0x0, 0xfffffffffffffff7, 0x3, 0x9, 0x7, 0x9d92, 0x8, 0xffffffff, 0xf0000000, 0x1, 0x6, 0x7d4, 0x7fff, 0x2, 0x8000}}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='rw\x00', &(0x7f00000000c0)='rw\x00', 0x0) r2 = fsmount(r0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, 0x10010, r2, 0x10000000) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r3, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r4, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) io_uring_enter(r3, 0x413, 0xad1d, 0x1, &(0x7f0000000100)={[0x7]}, 0x8) 08:56:50 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000002c0)) 08:56:50 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x7a000000) 08:56:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 60) 08:56:50 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x1, 0x3, 0x8}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r3, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYRES32]) 08:56:50 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400"/88, 0x58, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:56:50 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xfffffffb) 08:56:50 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x280200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) r3 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r7, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000100)={0x1, 0x6, [@remote, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @remote, @broadcast, @broadcast]}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1698.850521] loop6: detected capacity change from 0 to 140 [ 1698.851218] loop1: detected capacity change from 0 to 140 [ 1698.858604] FAULT_INJECTION: forcing a failure. [ 1698.858604] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.860538] CPU: 1 PID: 9734 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1698.861670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1698.863443] Call Trace: [ 1698.863772] [ 1698.864062] dump_stack_lvl+0x8b/0xb3 [ 1698.864575] should_fail.cold+0x5/0xa [ 1698.865102] ? __kernfs_new_node+0xd4/0x8b0 [ 1698.865660] should_failslab+0x5/0x10 [ 1698.866172] kmem_cache_alloc+0x5b/0x480 [ 1698.866740] __kernfs_new_node+0xd4/0x8b0 [ 1698.867283] ? kernfs_add_one+0x3c6/0x550 [ 1698.867828] ? kernfs_path_from_node+0x60/0x60 [ 1698.868484] ? lock_is_held_type+0xd7/0x130 [ 1698.869357] ? up_write+0x148/0x460 [ 1698.869840] ? kernfs_activate+0x1c4/0x240 [ 1698.870429] kernfs_new_node+0x93/0x120 [ 1698.870984] __kernfs_create_file+0x51/0x350 [ 1698.871631] sysfs_add_file_mode_ns+0x218/0x430 [ 1698.872351] ? component_del+0x4c0/0x4c0 [ 1698.873016] internal_create_group+0x322/0xb20 [ 1698.873833] ? sysfs_remove_group+0x170/0x170 [ 1698.874592] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1698.875337] ? __loop_update_dio+0x2a3/0x620 [ 1698.875970] loop_configure+0xe87/0x1950 [ 1698.876608] lo_ioctl+0x7c5/0x18b0 [ 1698.877336] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1698.878016] ? loop_set_status_old+0x1b0/0x1b0 [ 1698.878644] ? avc_ss_reset+0x180/0x180 [ 1698.879218] ? __lock_acquire+0xbac/0x5b70 [ 1698.880224] ? selinux_inode_getsecctx+0x90/0x90 [ 1698.881130] ? loop_set_status_old+0x1b0/0x1b0 [ 1698.881897] blkdev_ioctl+0x362/0x7f0 [ 1698.882414] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1698.883047] ? __x64_sys_ioctl+0x97/0x210 [ 1698.883637] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1698.884490] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1698.885168] __x64_sys_ioctl+0x196/0x210 [ 1698.885727] do_syscall_64+0x3b/0x90 [ 1698.886371] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1698.887293] RIP: 0033:0x7fed060d28d7 [ 1698.887998] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1698.890714] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1698.891819] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1698.892991] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1698.894233] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1698.895303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1698.896406] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1698.897543] [ 1698.911809] EXT4-fs error (device loop1): ext4_ext_check_inode:497: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1698.918114] EXT4-fs (loop1): get root inode failed [ 1698.918792] EXT4-fs (loop1): mount failed [ 1698.932568] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1698.946677] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1698.962005] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/205/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:56:50 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) pwritev(r1, &(0x7f0000001300)=[{&(0x7f0000001180)="abb83ec4862fb138cda888e8943ee721abaf6b115e55135b68079a8a190dd4424aefab192087757f0ddf15adbced976f8acae764a09b525b7cfc573a93839cfd3c35d1e1b479e7bb26af47bc62f959a83f0e457e66ea136fc4f3d00a9dc4cc000c4977769ff4a56a66632dab59d9131a2a344fe3a0cba27dda516971f92579302c194c4be3064173af37a83ab9e057d4c2dfd0db5139f462e38d32daf76f4c314c966bacab31b1b39ca14f12cab4cb287e692b04d1aa09caabcc7472607810767166f154ede7", 0xc6}, {&(0x7f0000001080)="425e903c38394580c2d957f2e607b6a553f3e794e2176d01ed36f8bd8f3657b1b3a962dd3cacbfaeb61c87294fec653ad16c00ad1c4d3b0e213bab5d3bb50f06859b5d7429e410b7015728d0fe4063a66caed0b0861e9f5928b4ba5c4ecf3e846197ac8464e5189475413d443c49e5fa16a2239c3cd8500f0e1a2d45db29e4e56e68c432497ebf11c85ad0d7b122f92d712d062642ebbcf3151e4305106ae8", 0x9f}, {&(0x7f0000001280)="f6cccad8625b04fdf0d8954089e22e0fdc5e027710079e099a0ca3bca41222d7458231899c83767cc1a91704aadb9f297a87673f9433adac1fb04b929d5ac2314628e3bc7195cfed90d8d657d964baa0f030fdfdb5f21e89740d6e6358ded63bc88c9f2ac075a4232270d3608b90072c616fd0e5f977c47165778a1a7ab115", 0x7f}, {&(0x7f0000000040)="b49aeda488d9a8b562a176169d54563c58b0445cece90dfe5930bb041bbf753a55f5fd8fa4c66d", 0x27}], 0x4, 0x5, 0x40a) preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 08:56:50 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'sit0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) [ 1698.988289] loop4: detected capacity change from 0 to 140 [ 1699.026765] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1699.043135] EXT4-fs (loop4): get root inode failed [ 1699.044069] EXT4-fs (loop4): mount failed 08:56:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0x1d) pwritev(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000001180)="6f5bffcd8323f051ddcb61827ef423de1c4ba8cd319d7f5c50017b87a87cb975aa1bb442a921fdde6244f0508bff621c7cad23d6701fda5b13af19390864a6fd905a5d10e96ee1cb49829f36019a9343277edaa35cc0bd42c353eb5debf806f29dfde19bfa587eba2f291f2ae156c3cdf43293eadb1623b32cf2cc98ce1c4405549127e00d0a2b200593c05f2a7fa09f676ea695d8f2a8ad7a5761d1e8dd78b980696eb37e7ac3fa205bea14af6d0ae0f3f56ac81e9aea63999f0362bf76778d5bb826713c29dd124f98cb9fe47c5f60e94d1bda111c6c38939ef561c5afdee18c4d178f602b12dc", 0xe8}, {&(0x7f0000001280)="ee665938dc18d079ba07430c5365a533b8d01cb9ab01ad2b540c54f53a06f6d231d9a620c31071044c209b78d8db2ae127556850e35b97407611401c685b4896ac9124d6289861ec939130bdb1f77b1df813e6bd8cb38b1151a1bfaa1d57ce2e57b0d338749c61300ed8d25cd721d096607e69ad3e92cfcb3ff09ee14b6ada65b999419c942d9c4d83512abc5cabb1c05303ff15153ebe0c1a106007299cd499a5b28bb260bd04d6840e2884e8f27ca718af9acd929d23424bfe378ac8cb630002b64d261dd97d742c1850e1bc73b712c0cc9a6577d379cef4b8bb3dde1856b7d08c62b96cc236f8a5887d", 0xeb}, {&(0x7f0000001380)="a5c47a3bd53550da3c61812d0038031ba5a97e73fdace09b5a5285bf51bb391d6f7589804be676e5f84c1e21a8a4100e5a2b08fa6e501b61b9879eb6cbec04c7444b3b0d3c7f7c10d5e13a02f52df06a01605527d3d09344ded38af5c7548fae47c56eba9b903536bac0b4ff50ce2f9e0d8a2da2af404236948d105926c5ff70d61f6bd392bba7cf9c2eb332c8243aa382521554a147ca8a3a9dfddc6ffa324de5610e3652b646b0e2def6a54f091fa09c014c52661c92c362957d3aeabb1bd8b50da209598843bb1b15c0f2f0f4ce6b91b3a8b342ddf41078c7", 0xda}, {&(0x7f0000001080)="794d1bb7c1ecfabd3fc31abb186f85960a10e592e1f4168f6759aa6763a90bdc6e6ad1e5ef86ecd0680dfee91605afb49e90829a05effadb759cbe81d23974d5aeb25a7c77925cecb62d49090ed1ff834cdb94078424f78b2bda6b4fc16bb80c0c3eb012bdeb7e72fcacd4882bc3c893de3b9c92e42fb76d9c69c92baff3566e2ec18e6063250506b55ce15b6d33b608a49a1399352bc8f277a906af75c7f80ca434d5d2c65a495b5a42f061e99a654e60ccf64207f811f355cc19d4", 0xbc}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="8aad76e6176cc43676ff1f8b7deb2eecc9721f75d13c6d84766a737335f611e888b4cf60bc322bf0f7c01dbb8ed8f58669d60275e59ffdf908a3da9bafedade8152868b871fa63916add88658740480260228b2d7be0cfddd7fd7f3edf42bdd150ef069c29a1b9118490889f756e68a809c06b56703f2c50cb1a0d584c1b1f12d7cd59920f0324ab03de1a3ad02aad36d1bc1ba564541571ab5ff14056f6", 0x9e}, {&(0x7f0000002680)="45a5d37e3a266ceac354ef6fe5721f7e5fac8b768890217353c05b4320effe1a4febd17a046c72803981646978b5f5867a8be365fab724af4d1bbc1c8d126327891fffba5c751dc2c179f4ffebea5a5c19bc7aaafb932b918f4aadb020d6c0db038045e044badf55c346f33434078fbd694c80da6b2544ddcffd6c86e1be22a61666323482e24a1dbe7b5111f0671d94ac24df2ad04da79f4a663cea3b4a8dc7c3388aee5f7e6f154b5d8d7fea9e8301d2cb888b12ad575e1084bd68cfaaeea60fb22c612e79496969914ddb4a77f1a2abb346eb193734df95c058ee67f9ed2b275f9aa289f706fa0600"/243, 0xf3}], 0x7, 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan1\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 08:56:50 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400"/88, 0x58, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1699.166342] loop1: detected capacity change from 0 to 140 08:56:50 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xfffffffe) [ 1699.224360] EXT4-fs error (device loop1): ext4_ext_check_inode:497: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1699.243806] loop6: detected capacity change from 0 to 140 [ 1699.252036] EXT4-fs (loop1): get root inode failed [ 1699.253073] EXT4-fs (loop1): mount failed [ 1699.283123] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1699.299643] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1699.310001] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1699.339839] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/206/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1712.777539] loop6: detected capacity change from 0 to 140 08:57:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 61) 08:57:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = fsmount(r0, 0x1, 0xe0) read(r1, &(0x7f0000000140)=""/94, 0x5e) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:random_device_t:s0\x00', 0x25) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r2, 0x4b47, 0x0) 08:57:04 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040), 0x4) r1 = fcntl$getown(r0, 0x9) syz_open_procfs(r1, &(0x7f0000001080)='net/netstat\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000001180)=""/4108, 0x100c}], 0x1, 0x0, 0x1) 08:57:04 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x1000000000000) 08:57:04 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='totmaps\x00') fsmount(r1, 0x1, 0x80) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='\x00', &(0x7f0000000140)='{\x00', 0x0) 08:57:04 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000", 0x5b, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1712.788622] loop1: detected capacity change from 0 to 140 08:57:04 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00'}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000f80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000580)={0x9a0, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x6, 0x81, 0x20, 0x7}, {0x3, 0x6, 0xff, 0x80000001}, {0x8, 0x40, 0x1, 0x7f}, {0x3, 0x1, 0x5, 0xbc38}, {0xfffe, 0xfd, 0x7f, 0x5}, {0x2, 0x1, 0x0, 0x9}, {0x9, 0x3, 0x2, 0x7}, {0x4, 0x7, 0x2, 0x8}, {0x20, 0x1, 0x9, 0x267b}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffe401}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x3f, 0x80}, {0x4, 0x8, 0x0, 0x80}, {0x2, 0x96, 0x89, 0x5}, {0x0, 0x40, 0x9, 0x8c8}, {0x2, 0x28, 0x5, 0x6b}, {0x100, 0x19, 0x8, 0x1}, {0x7, 0x81, 0x8, 0x6}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x98, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xff80, 0x2, 0x4, 0x100}, {0xa2c6, 0xff, 0x0, 0xd14e}, {0x8001, 0x1, 0x66, 0x5}, {0x1, 0x5, 0xa, 0x6}, {0xc4, 0x6, 0x9, 0x20000}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x9a0}, 0x1, 0x0, 0x0, 0x870}, 0x4000000) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000000c0)=0x9) 08:57:04 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x101, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1712.826536] EXT4-fs error (device loop1): ext4_ext_check_inode:497: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1712.829412] EXT4-fs (loop1): get root inode failed [ 1712.829989] EXT4-fs (loop1): mount failed 08:57:04 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) signalfd4(r0, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0xffffffa2, r1}, './file1\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'team_slave_1\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00']) 08:57:04 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) mknodat$null(r2, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x103) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1712.858871] FAULT_INJECTION: forcing a failure. [ 1712.858871] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.861977] CPU: 0 PID: 9794 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1712.863946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1712.866384] Call Trace: [ 1712.866935] [ 1712.867415] dump_stack_lvl+0x8b/0xb3 [ 1712.868262] should_fail.cold+0x5/0xa [ 1712.869113] ? create_object.isra.0+0x3a/0xa20 [ 1712.870111] should_failslab+0x5/0x10 [ 1712.870926] kmem_cache_alloc+0x5b/0x480 [ 1712.871810] create_object.isra.0+0x3a/0xa20 08:57:04 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000", 0x5b, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1712.872755] ? kasan_unpoison+0x23/0x50 [ 1712.873703] kmem_cache_alloc+0x239/0x480 [ 1712.874600] __kernfs_new_node+0xd4/0x8b0 [ 1712.875486] ? kernfs_add_one+0x3c6/0x550 [ 1712.876369] ? kernfs_path_from_node+0x60/0x60 [ 1712.877367] ? lock_is_held_type+0xd7/0x130 [ 1712.878300] ? up_write+0x148/0x460 [ 1712.879073] ? kernfs_activate+0x1c4/0x240 [ 1712.879985] kernfs_new_node+0x93/0x120 [ 1712.880848] __kernfs_create_file+0x51/0x350 [ 1712.881799] sysfs_add_file_mode_ns+0x218/0x430 [ 1712.882799] ? component_del+0x4c0/0x4c0 [ 1712.883680] internal_create_group+0x322/0xb20 [ 1712.884676] ? sysfs_remove_group+0x170/0x170 [ 1712.885672] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1712.886187] loop1: detected capacity change from 0 to 140 [ 1712.886735] ? __loop_update_dio+0x2a3/0x620 [ 1712.888263] loop_configure+0xe87/0x1950 [ 1712.889163] lo_ioctl+0x7c5/0x18b0 [ 1712.889915] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1712.890959] ? loop_set_status_old+0x1b0/0x1b0 [ 1712.891933] ? avc_ss_reset+0x180/0x180 [ 1712.892799] ? __lock_acquire+0xbac/0x5b70 [ 1712.893794] ? selinux_inode_getsecctx+0x90/0x90 [ 1712.894816] ? loop_set_status_old+0x1b0/0x1b0 [ 1712.895784] blkdev_ioctl+0x362/0x7f0 [ 1712.896590] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1712.897606] ? __x64_sys_ioctl+0x97/0x210 [ 1712.898487] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1712.899648] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1712.900648] __x64_sys_ioctl+0x196/0x210 [ 1712.901514] do_syscall_64+0x3b/0x90 [ 1712.902306] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1712.903388] RIP: 0033:0x7fed060d28d7 [ 1712.904171] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.908491] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1712.910275] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1712.911940] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1712.913622] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1712.915266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1712.916934] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1712.918603] [ 1712.932850] EXT4-fs error (device loop1): ext4_ext_check_inode:497: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1712.935871] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1712.939931] EXT4-fs (loop1): get root inode failed [ 1712.940568] EXT4-fs (loop1): mount failed [ 1712.976541] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:57:04 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 1713.009867] loop4: detected capacity change from 0 to 140 [ 1713.030872] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1713.037621] EXT4-fs (loop4): get root inode failed [ 1713.038527] EXT4-fs (loop4): mount failed 08:57:04 executing program 5: r0 = fsopen(&(0x7f0000000040)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x800) 08:57:04 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x4000000000000) 08:57:04 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000", 0x5b, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:57:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 62) 08:57:04 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x5, 0x2, 0x7ff, 0xed54, 0x4}) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000014c0)={[0x400]}, 0x8, 0xc0000) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="00400100aaaaaaaa01bb3a123b30b38aa5594976cec5c2c8b69f1088b37fa285473ab452debbb00ef2b57a3ca7b08637a25a84b5d3"]) [ 1713.191255] loop1: detected capacity change from 0 to 140 [ 1713.224965] EXT4-fs error (device loop1): ext4_ext_check_inode:497: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1713.231355] FAULT_INJECTION: forcing a failure. [ 1713.231355] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.233105] CPU: 1 PID: 9836 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 [ 1713.234173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1713.235627] Call Trace: [ 1713.235966] [ 1713.236256] dump_stack_lvl+0x8b/0xb3 [ 1713.236397] EXT4-fs (loop1): get root inode failed [ 1713.236772] should_fail.cold+0x5/0xa [ 1713.236800] ? __kernfs_new_node+0xd4/0x8b0 [ 1713.236865] should_failslab+0x5/0x10 [ 1713.238150] EXT4-fs (loop1): mount failed [ 1713.238620] kmem_cache_alloc+0x5b/0x480 [ 1713.238647] __kernfs_new_node+0xd4/0x8b0 [ 1713.241774] ? kernfs_add_one+0x3c6/0x550 [ 1713.242354] ? kernfs_path_from_node+0x60/0x60 [ 1713.242998] ? lock_is_held_type+0xd7/0x130 [ 1713.243576] ? up_write+0x148/0x460 [ 1713.244066] ? kernfs_activate+0x1c4/0x240 [ 1713.244657] kernfs_new_node+0x93/0x120 [ 1713.245236] __kernfs_create_file+0x51/0x350 [ 1713.245828] sysfs_add_file_mode_ns+0x218/0x430 [ 1713.246482] ? component_del+0x4c0/0x4c0 [ 1713.247038] internal_create_group+0x322/0xb20 [ 1713.247650] ? sysfs_remove_group+0x170/0x170 [ 1713.248240] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1713.248934] ? __loop_update_dio+0x2a3/0x620 [ 1713.249508] loop_configure+0xe87/0x1950 [ 1713.250031] lo_ioctl+0x7c5/0x18b0 [ 1713.250478] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1713.251093] ? loop_set_status_old+0x1b0/0x1b0 [ 1713.251656] ? avc_ss_reset+0x180/0x180 [ 1713.252164] ? __lock_acquire+0xbac/0x5b70 [ 1713.252748] ? selinux_inode_getsecctx+0x90/0x90 [ 1713.253390] ? loop_set_status_old+0x1b0/0x1b0 [ 1713.253953] blkdev_ioctl+0x362/0x7f0 [ 1713.254454] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1713.255085] ? __x64_sys_ioctl+0x97/0x210 [ 1713.255676] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1713.256493] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1713.257194] __x64_sys_ioctl+0x196/0x210 [ 1713.257699] do_syscall_64+0x3b/0x90 [ 1713.258187] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1713.258810] RIP: 0033:0x7fed060d28d7 [ 1713.259261] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.261639] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1713.262600] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1713.263480] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1713.264364] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1713.265303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1713.266164] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1713.267050] [ 1713.377144] loop4: detected capacity change from 0 to 140 [ 1713.392781] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1713.396042] EXT4-fs (loop4): get root inode failed [ 1713.396699] EXT4-fs (loop4): mount failed [ 1728.560881] FAULT_INJECTION: forcing a failure. [ 1728.560881] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.563075] CPU: 1 PID: 9850 Comm: syz-executor.4 Not tainted 5.16.0-rc6-next-20211222 #1 08:57:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 63) 08:57:20 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x684c42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10041, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 08:57:20 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="00a168a52e27000100aaaaaaaaaabb3f79d807fda545a5b7c833394123163f1039224671b402caa964b26f2c6ce94e4bb6099e2504"]) 08:57:20 executing program 5: r0 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='4\xd7\x8f\xbe\x9a\x8c\xc1+#0\x96B\xe9^s{0\x12\xea?i\xe0Q\x99 \xd7\xd8\x96\b\x00\x00\x008\xd7@\b\xaa\xa8\xf6\x9a\x02!\xd2\xf0\xf5\xd5|\x80-\xbbN&\x15r\x94\x03\xd6\xef\xd1@ty\x96\x0eU\xd5M\xb2\x06X^\x0e>\x8c\x1a\x9a\xa8\xee\xe8M5\xfc\xab\xedSZ-?\xb9\xa0\x12\xb5\xde\xa8\xc3\xa6p\xd0\xa6\xaf#\xee\x91\xe3\x1e7s\xb4AW\x18\xd8\xe9\xaf\xf7\xec\xe7\xa5 [ 1728.566907] dump_stack_lvl+0x8b/0xb3 [ 1728.567408] should_fail.cold+0x5/0xa [ 1728.567908] ? create_object.isra.0+0x3a/0xa20 [ 1728.568537] should_failslab+0x5/0x10 [ 1728.569172] kmem_cache_alloc+0x5b/0x480 [ 1728.569771] create_object.isra.0+0x3a/0xa20 [ 1728.570395] ? kasan_unpoison+0x23/0x50 [ 1728.571005] kmem_cache_alloc+0x239/0x480 [ 1728.571591] __kernfs_new_node+0xd4/0x8b0 [ 1728.572169] ? kernfs_add_one+0x3c6/0x550 [ 1728.572842] ? kernfs_path_from_node+0x60/0x60 [ 1728.573737] ? lock_is_held_type+0xd7/0x130 [ 1728.574488] ? up_write+0x148/0x460 [ 1728.575088] ? kernfs_activate+0x1c4/0x240 [ 1728.575699] kernfs_new_node+0x93/0x120 [ 1728.576260] __kernfs_create_file+0x51/0x350 [ 1728.576842] sysfs_add_file_mode_ns+0x218/0x430 [ 1728.577492] ? component_del+0x4c0/0x4c0 [ 1728.578041] internal_create_group+0x322/0xb20 [ 1728.578679] ? sysfs_remove_group+0x170/0x170 [ 1728.579323] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1728.580015] ? __loop_update_dio+0x2a3/0x620 [ 1728.580642] loop_configure+0xe87/0x1950 [ 1728.581292] lo_ioctl+0x7c5/0x18b0 [ 1728.581790] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1728.582493] ? loop_set_status_old+0x1b0/0x1b0 [ 1728.583122] ? avc_ss_reset+0x180/0x180 [ 1728.583671] ? __lock_acquire+0xbac/0x5b70 [ 1728.584313] ? selinux_inode_getsecctx+0x90/0x90 [ 1728.584964] ? loop_set_status_old+0x1b0/0x1b0 [ 1728.585622] blkdev_ioctl+0x362/0x7f0 [ 1728.586148] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1728.586792] ? __x64_sys_ioctl+0x97/0x210 [ 1728.587431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1728.588291] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1728.588962] __x64_sys_ioctl+0x196/0x210 [ 1728.589568] do_syscall_64+0x3b/0x90 [ 1728.590092] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1728.590794] RIP: 0033:0x7fed060d28d7 [ 1728.591301] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1728.593950] RSP: 002b:00007fed03647f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1728.594517] loop6: detected capacity change from 0 to 140 [ 1728.595000] RAX: ffffffffffffffda RBX: 00007fed0611c970 RCX: 00007fed060d28d7 [ 1728.595016] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1728.595027] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1728.595036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1728.595047] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1728.595081] [ 1728.626807] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1728.644554] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1728.645165] loop1: detected capacity change from 0 to 140 [ 1728.648987] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1728.653490] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/209/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1728.678306] loop7: detected capacity change from 0 to 264192 [ 1728.689002] loop4: detected capacity change from 0 to 140 08:57:20 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xc0000000000000) 08:57:20 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='rw\x00', &(0x7f00000000c0)='(=(', 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1728.733658] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1728.738556] EXT4-fs error (device loop1): ext4_ext_check_inode:497: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1728.738703] EXT4-fs (loop4): get root inode failed [ 1728.742055] EXT4-fs (loop4): mount failed [ 1728.746585] EXT4-fs (loop1): get root inode failed [ 1728.747683] EXT4-fs (loop1): mount failed 08:57:20 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="52583c9bfb61eec2a94266c5c0d8d7829d36162a3bb452d6158d9afad9ce3a2e0e2901b0500ddaee8505e503a0812e00776b795700000000f7089a547bbeca8986446fac99b30f9e763ce4de5fadbbba6b644d950f452bd76df30d176d00f183f71460a7d9401b2cdcb2ce1cebd85bd22613dfbcb4e7e6edf48f9ae0f7464f4b7eb07d1b0edf51af247ea6cae80882e6038869e4086a9eb096856e90e072f22656b0589a8eaee0a2e3098e5f1c2f9ad84cec682cdaab"]) 08:57:20 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="0100014162956c9da98fe7aa7c4df90ba46e213b067600000000000000"]) 08:57:20 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xca42, 0x4) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000080)) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000180)={0x7ff, 0xf5e7, 0x7, 0x2, 0x1, [{0x17, 0x1, 0xe5e, '\x00', 0x2c00}]}) [ 1728.832610] loop6: detected capacity change from 0 to 140 08:57:20 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) [ 1728.896964] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:57:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) (fail_nth: 64) 08:57:20 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000", 0x5c, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1728.920418] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:57:20 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xff) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000001180)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001080), 0x21c001, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000001300)={0x1, 0x2, 0x1000, 0x0, &(0x7f00000010c0), 0x54, 0x0, &(0x7f0000001280)="540d4b061b33266c462df38493bc21b9492e2716ed7746cd47f4f532832fd731511f2c6ec0a27fbc28c8442bab19af55cc556c5439ee5763e51d8b5796f2b6e7f5af6ed9992b628051b8a6da702fb8723ad58cce"}) preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x8000000, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) [ 1729.042524] loop1: detected capacity change from 0 to 140 [ 1729.089501] EXT4-fs error (device loop1): ext4_ext_check_inode:497: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1729.098651] EXT4-fs (loop1): get root inode failed [ 1729.099869] EXT4-fs (loop1): mount failed 08:57:35 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000", 0x5c, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:57:35 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x228282, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) 08:57:35 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xe0ffff00000000) 08:57:35 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan1\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000100aaaa8aaaaabb"]) 08:57:35 executing program 5: r0 = fsopen(&(0x7f0000000040)='hostfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r1, 0x81, 0x95, 0xc}) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000100)={{r1}, 0xab, 0x4}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xe400, 0x0) fsmount(r3, 0x1, 0x6) 08:57:35 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000040)={0x8, 0x4, 0x3f, 0x4}) preadv(r0, &(0x7f0000001140)=[{&(0x7f0000001180)=""/4111, 0x100f}], 0x1, 0x0, 0x0) [ 1743.448499] loop6: detected capacity change from 0 to 140 [ 1743.461850] loop1: detected capacity change from 0 to 140 [ 1743.465419] loop4: detected capacity change from 0 to 140 08:57:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:57:35 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000080)='system_u:object_r:hald_mac_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1743.488549] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1743.498070] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1743.504641] EXT4-fs (loop4): get root inode failed [ 1743.505439] EXT4-fs (loop4): mount failed [ 1743.509457] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1743.511747] EXT4-fs error (device loop1): ext4_ext_check_inode:497: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1743.516434] EXT4-fs (loop1): get root inode failed [ 1743.517322] EXT4-fs (loop1): mount failed [ 1743.520978] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 08:57:35 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x391600, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="0006efbb7300000000000000bb"]) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000080)) [ 1743.537832] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/211/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:57:35 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1/file0\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'caif0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0) fallocate(r2, 0x40, 0x4, 0x30) ioctl$TUNSETTXFILTER(r1, 0x4b47, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 08:57:35 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x741000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040)) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8000) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/31, 0x1f}], 0x2, 0x3, 0x3) 08:57:35 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x100000000000000) 08:57:35 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1743.721877] loop1: detected capacity change from 0 to 7 [ 1743.735238] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (3 blocks) [ 1744.116116] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1758.029529] loop6: detected capacity change from 0 to 140 08:57:49 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x2, 0x30bc00) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x60100, 0x0) fsmount(r2, 0x0, 0x11) 08:57:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r1, &(0x7f0000001140)=[{&(0x7f0000001180)=""/4098, 0x1002}], 0x1, 0x0, 0x0) fchdir(r0) 08:57:49 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000200)=0x1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="0400000000000000070000000000000006000000b06400000600000000000000118a0000000000001f000000000000000500000000000000000000000000000000000000000000000814000000000000000000000000000003000000000000000600000000000000000000e06f10000000000000000000000000000000000000002000000000000000000000000000007f700000000000000400000000000000070000000000000000000000000000000000000000000000062c000000000000000000000000000003000000000000003f000000000000007f00000000000000000000000000000000000000000000000608000000000000000000000000000007000000000000007f0000000000000005000000000000000000000000000000000000000000000002120000000000000000000000000000040000000000000003000000000000000900000000000000000000000000000000000000000000000a300000000000000000800000000000"]) 08:57:49 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:57:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:57:49 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000c0601040000000000000000050000030900020073797a3000000000ca548c705bd2b2b41bfddd06fd9da76965a37522e138fd6e3186b831fe35d46ad3e7feb077b8ead7b763ce0aad7ea3d45fd1e62faa42010361015fc2be2a88d8f61ec791c7345c9802f1f4983216c0eb52307c9f93e3b82c4a34668a43f5d234e3db34b0c98240188ec5cf30f5099c309c8ec6cb459879ea4caadfe5e7a84b9499091361a95b0ffe7a0882c7a56c4a4e93672f5ddb5bf056def7000048"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc090) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="0001000000000000c204000000002701"], 0x18) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x48) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x3, 0x400, 0x20, 0x100, 0x8, 0xea0b9d0b2e74ce02}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'team_slave_0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100aaaabf16a08303dcedaa35338eaaaaaaa6"]) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xd1cc8b93348bfd36}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r6, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x44}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "e29fb8653d430d832593249ef2898cfe"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0xe0) 08:57:49 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x200000000000000) 08:57:49 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x3ff, &(0x7f0000000080)={[0x2]}, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) dup(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="16000100aaaaaaaaaabb"]) [ 1758.047105] loop4: detected capacity change from 0 to 140 [ 1758.050875] loop1: detected capacity change from 0 to 7 [ 1758.056544] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1758.101357] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1758.109542] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (3 blocks) [ 1758.120493] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1758.122830] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1758.128002] EXT4-fs (loop4): get root inode failed [ 1758.128792] EXT4-fs (loop4): mount failed [ 1758.134320] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/213/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:57:49 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) [ 1758.171965] loop4: detected capacity change from 0 to 140 [ 1758.212626] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1758.216178] EXT4-fs (loop4): get root inode failed [ 1758.216932] EXT4-fs (loop4): mount failed 08:58:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(0xffffffffffffffff, &(0x7f00000010c0), 0x0, 0x5, 0x3dbb) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="0001000000000000c204000000002701"], 0x18) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001080)) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000040)={0x6, 'vlan0\x00', {0x7}, 0xdb5c}) 08:58:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="01000100aaaaaaaaaabb8887c3c79ac4dde1bed83fe2d3bd8d40d8b28fc46499bafa71ab7c5ac317fef1a63669427608"]) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x4000) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080)) 08:58:02 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1ac02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:58:02 executing program 5: r0 = fsopen(&(0x7f0000000040)='bfs\x00', 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{r0}, 0x101, 0x5, 0x7}) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:58:02 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:58:02 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x300000000000000) 08:58:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:58:02 executing program 3: syz_io_uring_setup(0x525c, &(0x7f0000000200)={0x0, 0xe46b}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6007, @fd_index}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000f00), 0xc000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000016c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x79d9) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r4, r4, r4, 0x0, 0x0, r4, r4, r4, r5]) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, 0x0, 0x0) setgroups(0x9, &(0x7f0000000800)=[r7, r7, r7, 0x0, 0x0, r7, r7, r7, r8]) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f00000002c0)=""/76, 0x4c}], 0x2, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000580)=""/88, 0x58}, {&(0x7f0000000600)=""/54, 0x36}], 0x2, &(0x7f0000000680)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000740)=""/27, 0x1b}, {&(0x7f0000000780)=""/80, 0x50}, {&(0x7f0000000800)=""/173, 0xad}, {&(0x7f00000008c0)=""/140, 0x8c}, {&(0x7f0000000980)=""/100, 0x64}, {&(0x7f0000000a00)=""/214, 0xd6}, {&(0x7f0000000b00)=""/108, 0x6c}, {&(0x7f0000000b80)=""/209, 0xd1}, {&(0x7f0000000c80)=""/152, 0x98}], 0x9, &(0x7f0000000e00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000000e80)=@abs, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000f00)}, {&(0x7f0000000f40)=""/15, 0xf}, {&(0x7f0000000f80)=""/182, 0xb6}, {&(0x7f0000001040)=""/255, 0xff}, {&(0x7f0000001140)=""/100, 0x64}], 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="20fa7fffffff0b000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000012c0)=""/128, 0x80}, {&(0x7f0000001340)=""/133, 0x85}], 0x2, &(0x7f0000001440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x5, 0x0, &(0x7f0000001600)={0x77359400}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000001640)={{}, {0x1, 0x5}, [{0x2, 0x5, r3}], {0x4, 0x5}, [{0x8, 0x4, r4}, {}, {0x8, 0x2, r6}, {0x8, 0x6, r7}, {0x8, 0x1, r9}], {}, {0x20, 0x3}}, 0x54, 0x2) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r10, 0x4b47, 0x0) [ 1771.146303] loop4: detected capacity change from 0 to 140 [ 1771.156047] loop1: detected capacity change from 0 to 7 [ 1771.161000] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (3 blocks) [ 1771.185728] loop6: detected capacity change from 0 to 140 08:58:03 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1771.211814] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1771.218376] EXT4-fs (loop4): get root inode failed [ 1771.219596] EXT4-fs (loop4): mount failed [ 1771.243243] loop4: detected capacity change from 0 to 140 [ 1771.249737] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:58:03 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:nvram_device_t:s0\x00', 0x24) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x1, 0x1, 0x4}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x105000, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f00000002c0)={{r3}, "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"}) fchmodat(r1, &(0x7f0000000100)='./file0\x00', 0x1b) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40000, 0x8) pwrite64(r4, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="214087bb7a8b430ab637"]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6tnl0\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000180)) 08:58:03 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x610100, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)=0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="5a34defad5907ca2ca641f6d483685b975150c07cc7c525daf09945c9d81033def07ebcae6f1e9880715c555f7d148d21534d46deaeb93d9dc3f92b97a86648240cd5684fdb05e0d2e75"]) [ 1771.290614] loop1: detected capacity change from 0 to 140 [ 1771.294304] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1771.296615] EXT4-fs (loop4): get root inode failed [ 1771.297227] EXT4-fs (loop4): mount failed [ 1771.305140] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:58:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) [ 1771.351448] loop4: detected capacity change from 0 to 140 [ 1771.364470] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1771.365978] EXT4-fs (loop1): group descriptors corrupted! 08:58:03 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r1 = fsmount(r0, 0x0, 0x2) fsmount(r1, 0x0, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0xffffffff, 0x80400) fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000100)='.\x00', 0x0, r2) r5 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) fchdir(r5) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1771.391663] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1771.396200] EXT4-fs (loop4): get root inode failed [ 1771.396751] EXT4-fs (loop4): mount failed [ 1771.415916] loop4: detected capacity change from 0 to 140 08:58:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fsetxattr$security_capability(r3, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x5, 0x9}]}, 0xc, 0x3) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) [ 1771.448009] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1771.451307] EXT4-fs (loop4): get root inode failed [ 1771.451855] EXT4-fs (loop4): mount failed 08:58:03 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:58:03 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) 08:58:03 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x400000000000000) 08:58:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x5, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) [ 1771.526360] loop4: detected capacity change from 0 to 140 08:58:03 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fchmod(r0, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$FITHAW(r2, 0xc0045878) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) [ 1771.550523] loop6: detected capacity change from 0 to 140 08:58:03 executing program 2: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x8, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="80000100aaaaaaaaaabb01c53b"]) [ 1771.564271] loop1: detected capacity change from 0 to 140 08:58:03 executing program 7: syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4080, 0xff0}], 0x1, 0x0, 0x0) 08:58:03 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='rpc_pipefs\x00', 0x0, r2) [ 1771.590174] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) 08:58:03 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) r1 = signalfd4(r0, &(0x7f0000000040)={[0x3]}, 0x8, 0x80000) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000100)={{0x21, @broadcast, 0x4e24, 0x0, 'dh\x00', 0x20, 0x6, 0x4b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x2000, 0x43, 0x2, 0x7fff}}, 0x44) 08:58:03 executing program 2: semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x9, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="27c29a18ce06a8cb33ad02584d0bd893012da18d5a7d0ce231c7061dd0ec21e431bbd9f7d82c4f8de0dd1bf8a18f58275f3ebbb341a1dbf87fdf7516ad7567ec5b70fb13c7ed079efab88c4ec569866ca4c1131ac0b41b745c34443345f8092ef4b63d1736f335408fbddc32329aa915ec1ea43d37c76c920e74350e30185a0c014604110f4ed74e2a95b68c1411b1ee483c4fcb5f538c6039335da44878ff7bc6d4d1de7ee3e1fcb1474a47be196f4feced8bce5d872e66d3be36986a3a1541cf1b9c18dee4a0c603327ae87e2654df122195ccb5880ffa2d43d4fd48b7e2df410e897f166f1ad42c3c5f6ff6f46a88646a1f397846", 0xf6, 0x9}], 0x200400, &(0x7f0000000340)={[{@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}], [{@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '^:}-$*[.'}}]}) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc0102, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) r2 = semget(0x1, 0x4, 0x10) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f00000003c0)=0x7fffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x5, 0x204, 0x0, 'queue1\x00', 0x40}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x612643, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="e6ae7f91189abc896b00000100aaaaaaaaaabb"]) [ 1771.617497] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1771.618975] EXT4-fs (loop1): group descriptors corrupted! [ 1771.623708] EXT4-fs (loop4): get root inode failed [ 1771.624804] EXT4-fs (loop4): mount failed [ 1771.637847] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1771.654747] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1771.656251] loop4: detected capacity change from 0 to 140 [ 1771.709475] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1771.734391] EXT4-fs (loop4): get root inode failed [ 1771.735637] EXT4-fs (loop4): mount failed 08:58:19 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:58:19 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') pread64(r0, &(0x7f0000001080)=""/143, 0x8f, 0xffff) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x4, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000001180)={0x1, 0x58f9, 0x8}) preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 08:58:19 executing program 3: ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000002c0)={{}, "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"}) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000012c0)={0xe38, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x67}}}}, [@NL80211_PMSR_ATTR_PEERS={0x20, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}, @NL80211_PMSR_ATTR_PEERS={0x334, 0x5, 0x0, 0x1, [{0x1a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xdc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfc00}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xaf}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x80, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x144, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcc3f}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x60}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x57}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x16c, 0x5, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x45d}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}]}, {0x110, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xe0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x660, 0x5, 0x0, 0x1, [{0x128, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x39}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x400, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2e8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x67}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa0}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9c7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb6}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xbb2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x2c4d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa2e3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xca}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x117}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}, @NL80211_PMSR_ATTR_PEERS={0x2f8, 0x5, 0x0, 0x1, [{0x2f4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32a}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x2b4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6af7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}]}, 0xe38}, 0x1, 0x0, 0x0, 0x44050}, 0x2800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) 08:58:19 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = epoll_create(0x2) dup(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="12000100aaaaaaaaaabb"]) [ 1787.371532] loop1: detected capacity change from 0 to 140 [ 1787.389051] loop6: detected capacity change from 0 to 140 [ 1787.390536] loop4: detected capacity change from 0 to 140 08:58:19 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 08:58:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x6, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:58:19 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x500000000000000) 08:58:19 executing program 0: memfd_secret(0x80000) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="88b3d7ae99bf3225cf7f9572fe332c3572f25823e4c346aff4bc9374ec9ba12e43bb77771385bd0e3061d68628fb63a3f6927d4777292e0951a752b96d7b471e8a605656ec3fbc075a534eefb8b8f822887fcb01cdda21a42f79ecb23c299c2101e409c2f82216f959b6ba90213f984b50e948711becb532e4133ca44763803eaa23738d6eb50243caa8affd9448ead8d2a2a74f1afd4344cea7cbf9f7cc459e61185477ac928fbe3f132cb115006371bf13bcd1378951930a3cd747125c2204b6b96792093b86f3"]) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0xa6e4, 0x210000) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080)) [ 1787.397138] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1787.399011] EXT4-fs (loop1): group descriptors corrupted! [ 1787.414237] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1787.418952] EXT4-fs (loop4): get root inode failed [ 1787.419763] EXT4-fs (loop4): mount failed [ 1787.453809] loop4: detected capacity change from 0 to 140 08:58:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) write$selinux_attr(r1, &(0x7f0000000980)='system_u:object_r:cgroup_t:s0\x00', 0x1e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000240)=""/20, 0x14}, {&(0x7f0000000340)=""/226, 0xe2}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000600)=""/157, 0x9d}, {&(0x7f00000006c0)=""/217, 0xd9}], 0xa, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x10000) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000940)=0x1) 08:58:19 executing program 5: r0 = fsopen(&(0x7f0000000080)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0x1, 0x8) r2 = mq_open(&(0x7f00000000c0)='rw\x00', 0x1, 0x40, &(0x7f0000000100)={0x40, 0x7, 0xd13, 0x8000}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='hpfs\x00', 0x0, r2) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1787.478060] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1787.504654] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1787.508650] EXT4-fs (loop4): get root inode failed [ 1787.509896] EXT4-fs (loop4): mount failed [ 1787.528748] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:58:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x7, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) [ 1787.607093] EXT4-fs error (device loop6): ext4_validate_block_bitmap:398: comm ext4lazyinit: bg 0: block 3: invalid block bitmap [ 1787.611019] loop1: detected capacity change from 0 to 140 08:58:19 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:58:19 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ipvlan0\x00'}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x400000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f8, 0x200, 0x70bd2c, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x44041}, 0x40800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:58:19 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = memfd_secret(0x80000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc1}) 08:58:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'lo\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2d920000130a0500000000000000c2f01c5958c84d29010073795a31000000000900020073797a31003a6142"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10) [ 1787.669406] loop4: detected capacity change from 0 to 140 [ 1787.670135] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1787.672812] EXT4-fs (loop1): group descriptors corrupted! [ 1787.738548] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1787.760625] EXT4-fs (loop4): get root inode failed [ 1787.761481] EXT4-fs (loop4): mount failed [ 1787.797204] loop4: detected capacity change from 0 to 140 [ 1787.823649] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1787.827586] EXT4-fs (loop4): get root inode failed [ 1787.828392] EXT4-fs (loop4): mount failed 08:58:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x8, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:58:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) r1 = signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8) write$selinux_attr(r1, &(0x7f0000000080)='system_u:object_r:sendmail_exec_t:s0\x00', 0x25) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000103000000aaaabb"]) syncfs(r2) 08:58:34 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'netdevsim0\x00', {0x1}, 0x4}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth1_macvtap\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, 0xfffffffffffffffc) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) 08:58:34 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000080)) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1802.362412] loop4: detected capacity change from 0 to 140 [ 1802.375108] loop6: detected capacity change from 0 to 140 08:58:34 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x600000000000000) [ 1802.391330] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) 08:58:34 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) syz_io_uring_setup(0x31cd, &(0x7f0000000040)={0x0, 0x8d05, 0x4, 0x2, 0x135, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) [ 1802.400382] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1802.403224] EXT4-fs (loop4): get root inode failed [ 1802.405093] EXT4-fs (loop4): mount failed [ 1802.419306] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1802.438489] loop4: detected capacity change from 0 to 140 [ 1802.448192] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1802.453642] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1802.457667] EXT4-fs (loop4): get root inode failed [ 1802.458370] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/217/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1802.458849] EXT4-fs (loop4): mount failed 08:58:34 executing program 7: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) add_key$fscrypt_v1(&(0x7f0000001240), 0x0, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000040)='logon\x00', &(0x7f0000001080)={'syz', 0x0}, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 08:58:34 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1802.554758] loop1: detected capacity change from 0 to 140 08:58:34 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4000000}}, './file0\x00'}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) [ 1802.566948] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1802.568623] EXT4-fs (loop1): group descriptors corrupted! 08:58:34 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000001100)=ANY=[@ANYBLOB="010000008100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001300)={0x54, 0x0, &(0x7f0000001240)=[@request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001180)={@fda={0x66646185, 0x7, 0x1, 0x1f}, @fda={0x66646185, 0x2, 0x0, 0x3c}, @fda={0x66646185, 0x1, 0x1, 0x24}}, &(0x7f0000001200)={0x0, 0x20, 0x40}}}], 0x32, 0x0, &(0x7f00000012c0)="93e99180e9b94f3d884f9726821673becc1221eab1cd259673d3a7e5ec0640943d1f94459f9a139674c345d2e46f26c1ace1"}) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000001080)={0x5, "18e523dfbdae7398a3c72aeefdf5ebc4a070c3d180df5aa6d6780bd59b09e9e597eb7455e913714717c159f2ec2fccedbff787edbee9e29ca06f37e90001c6fc"}) preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) [ 1816.812837] loop4: detected capacity change from 0 to 140 [ 1816.819691] loop6: detected capacity change from 0 to 140 [ 1816.850453] loop1: detected capacity change from 0 to 140 08:58:48 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000a80)={'fscrypt:', @desc1}, &(0x7f0000000ac0)={0x0, "7dd2a7a5b6373bbe7de3b6a943223af3e01915249c749864e6b0dc494786c009286aaf53d60d493f5882f4846f8261c422245093bfdd3abdbbb783c708c751df"}, 0xfffffffffffffcf6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0xa000, 0x88) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) dup2(r0, r2) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)={'vlan1\x00'}) 08:58:48 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/8250_core', 0x4800, 0x8) r2 = fspick(r1, &(0x7f00000001c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000200)='async\x00', 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x5) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='[&-[+@***\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0) 08:58:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:58:48 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:58:48 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x700000000000000) 08:58:48 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:58:48 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 08:58:48 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1816.859667] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1816.861136] EXT4-fs (loop1): group descriptors corrupted! [ 1816.879109] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1816.881714] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1816.893113] EXT4-fs (loop4): get root inode failed [ 1816.893899] EXT4-fs (loop4): mount failed [ 1816.925745] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:58:48 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)={'veth0_to_bond\x00'}) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)={'bond_slave_0\x00'}) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000140)={{0x1, 0x80}, 0x100, './file1\x00'}) 08:58:48 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x7e) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x3c, 0xffffffffffffffff}, './file0\x00'}) fsmount(r2, 0x0, 0x85) fsmount(r2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x43) 08:58:48 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0x1) r1 = dup2(r0, r0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000180)=0x200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/10]) 08:58:48 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100), 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:58:48 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pread64(r1, &(0x7f0000001080)=""/93, 0x5d, 0x3) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@private2, 0x3e}) [ 1816.960854] loop1: detected capacity change from 0 to 140 [ 1816.963939] loop4: detected capacity change from 0 to 140 [ 1817.000962] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1817.016097] EXT4-fs (loop4): get root inode failed [ 1817.016916] EXT4-fs (loop4): mount failed [ 1817.025809] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1817.027611] EXT4-fs (loop1): group descriptors corrupted! 08:58:48 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) write$selinux_attr(r0, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(r1, 0x4b47, 0x0) 08:58:48 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xa00000000000000) 08:58:48 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000000c0)='dirsync\x00', 0x0, 0x0) 08:58:48 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket(0x29, 0x800, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0xad, 0x32, 0x2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x80, 0x6, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x2, 0x2, 0x7f, 0x6, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x8419, 0x3}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7e}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/anycast6\x00') r6 = fork() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fddbdf254c0000000800030002000000080003000100000008000300010000000200000000000000ac3d330003000000080001007063690011000200303030303a30303aea6e76968b7f7353a5869a29c131302e3000000000"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:58:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xa, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) [ 1817.167344] loop6: detected capacity change from 0 to 140 08:58:48 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000001080)=0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f0000001180)={0x58, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10000, 0x6e}}}}, [@NL80211_ATTR_KEY_SEQ={0x12, 0xa, "17c17f2896f30a7dcc77593fca61"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "683c51dfc3a73793b2335c99a1"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f0000001240), r1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r2) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x38, r5, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x10) 08:58:49 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100), 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:58:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pread64(r1, &(0x7f0000001080)=""/93, 0x5d, 0x3) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@private2, 0x3e}) [ 1817.227445] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1817.232139] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1817.242937] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1817.246929] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/219/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1817.307445] loop1: detected capacity change from 0 to 140 [ 1817.358929] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1817.360479] EXT4-fs (loop1): group descriptors corrupted! [ 1817.740028] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 08:59:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) r1 = signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8) write$selinux_attr(r1, &(0x7f0000000080)='system_u:object_r:sendmail_exec_t:s0\x00', 0x25) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000103000000aaaabb"]) syncfs(r2) 08:59:03 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100), 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:59:03 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="c659ce6daaaaaaaaaabbc45540359422e191b85c3b705e844d17cb89ba7e87b1b8bd5fa49b1260d97aa9d3806656acda9b40d329b90c82c32b5356dc652c7d533002773392acb9826edb71d8f87f04301da9472147287e40d695bfc1ff3c2d0b8d1b5da8ef103c4865facb0359817e0429cc2cc723e41c855e9f65d30908300fd390d7e40fce7b6c9ebc7a2fc5bf17a644ce7bbcb3eaf24f9cd45038a0c8e9ca8910fe0a63b081fa6944bf1e92a756d972872e6eb8ca9dba7aca3daab16cdadbdebfee651a7cd546c2854a47667c79bd9cb153db870dc7f9119066da042d6d067c98881c0b2d3b6b38744d301eeab5a3db42f7218625a69d9bf0c4d5b94004bfb5253534ab164a9e8bb84c647e4e2cb1afa89be0d93cbbaaeaf44dfc821d12643c78825ea79a0295c04321955c4726065f1fd86f"]) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000080), &(0x7f0000000040)) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) 08:59:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xb, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:59:03 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xc00000000000000) 08:59:03 executing program 7: r0 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000580)={0x21100, 0x0, &(0x7f0000000440), &(0x7f0000000480), {0x28}, &(0x7f00000004c0)=""/29, 0x1d, &(0x7f0000000500)=""/24, &(0x7f0000000540)=[r0, r0], 0x2}, 0x58) r1 = getpid() clone3(&(0x7f0000001280)={0x44000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000001080), &(0x7f00000010c0), {0x9}, &(0x7f0000001180)=""/122, 0x7a, &(0x7f0000001200)=""/95, &(0x7f0000001100)=[r0, r1], 0x2}, 0x58) r3 = syz_open_procfs(r0, &(0x7f0000000000)='net/if_inet6\x00') r4 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000580)={0x21100, 0x0, &(0x7f0000000440), &(0x7f0000000480), {0x28}, &(0x7f00000004c0)=""/29, 0x1d, &(0x7f0000000500)=""/24, &(0x7f0000000540)=[r4, r4], 0x2}, 0x58) fcntl$setownex(r3, 0xf, &(0x7f0000001300)={0x2, r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001340)={0x0, 0x0}) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = gettid() kcmp(r5, r7, 0x2, r2, r6) preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) read(r2, &(0x7f0000001400)=""/142, 0x8e) 08:59:03 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:59:03 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040840}, 0x24040000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r2, 0x4b47, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x1, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @broadcast, @multicast]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r3, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'vlan1\x00'}) [ 1831.998837] loop6: detected capacity change from 0 to 140 [ 1832.004844] loop4: detected capacity change from 0 to 140 [ 1832.005287] loop1: detected capacity change from 0 to 140 [ 1832.034851] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1832.039396] EXT4-fs (loop4): get root inode failed [ 1832.040248] EXT4-fs (loop4): mount failed [ 1832.046843] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1832.048593] EXT4-fs (loop1): group descriptors corrupted! [ 1832.050058] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 08:59:03 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000667413c80b74d4e6"]) 08:59:03 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x371200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000100aaaaaaaaaabb"]) [ 1832.072483] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1832.112419] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1832.113819] Buffer I/O error on dev loop1, logical block 0, async page read [ 1832.116003] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1832.117293] Buffer I/O error on dev loop1, logical block 3, async page read [ 1832.124327] loop4: detected capacity change from 0 to 140 08:59:04 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)='\x00'/24, 0x18, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1832.202224] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1832.211441] EXT4-fs (loop4): get root inode failed [ 1832.212340] EXT4-fs (loop4): mount failed [ 1832.224059] loop1: detected capacity change from 0 to 140 [ 1832.243717] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1832.245280] EXT4-fs (loop1): group descriptors corrupted! 08:59:04 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x2000000000000000) 08:59:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xd, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:59:04 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="01000100aaaaaaaaaabb8244655126c78062d84959c83d384e9d3b64b1888f8b6cb2add12e4ec1d26f31238882b348116446032bcd32f9c08188914b737a0b8f96b015ab0dcaa804000000b12ba5dc8381b0757e1780f35c2de7606b9b828c88393b03d03c7961db24ff8e664f4fd69367862662fbd7230cda5e5a960e08c8f9f986e5fa"]) 08:59:04 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x600000000000000) [ 1832.376949] loop5: detected capacity change from 0 to 140 [ 1832.398432] loop4: detected capacity change from 0 to 140 [ 1832.407637] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1832.410817] EXT4-fs (loop4): get root inode failed [ 1832.411679] EXT4-fs (loop4): mount failed [ 1832.434809] loop4: detected capacity change from 0 to 140 [ 1832.440136] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1832.450830] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1832.452245] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1832.452798] EXT4-fs (loop4): get root inode failed [ 1832.455575] EXT4-fs (loop4): mount failed [ 1832.469950] EXT4-fs error (device loop5): __ext4_new_inode:1071: comm syz-executor.5: reserved inode found cleared - inode=1 [ 1832.473977] EXT4-fs error (device loop5): ext4_readdir:258: inode #2: block 4: comm syz-executor.5: path /syzkaller-testdir286319133/syzkaller.d9TaX1/210/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:59:19 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x500000000000000) 08:59:19 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) fallocate(r1, 0x50, 0x0, 0x4000000000000007) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000005100)={{0x1, 0x1, 0x18, r1, {r1}}, './file1\x00'}) r3 = syz_open_dev$vcsn(&(0x7f0000005240), 0x13a8cd94, 0x800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000005380)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r5, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) io_submit(0x0, 0xa, &(0x7f0000005440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x480, 0xffffffffffffffff, &(0x7f00000002c0)="12859b4ff7d2e619def783543beeff9119c83fedfa05fe18aea2f4d6e5b275a7c6c251992208b415496ac827b8ed1c61d9d835219328b9acec98ef90a85351349b5430e17dd7851b25c30a4c176b5182c55bf0ba1cfd591e5af489497845582c17e1e7e43173408f7c65428ccd87383fa86799ea13b390ebbdc44a9ec4b9886407cf93ac9bf312709767f407f48b285206fdbdc278c5be2e4d558462b0a83984a6a6d8312f1c2f4724b4d4ea8ce29dc3abe45e5584cb8acb49e67f36a469abc8bffaaf03a617141eda64d883813d2b6fa056872649dec2c38b675ef8998bc839b072138a", 0xe4, 0x10000}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x400, r1, &(0x7f00000003c0)="ae8ae9afd8c808729dfdae4073a7aa1222891437b9f78a5929744fdfbd8e8a05df259bbbe635553d4314e17cba728146e2c8785efa9d63e66f8ca04a7473bfe403c42ec85f96c243f3cd4a037b68423bf7836a45e4baa208db89ac061cf4c02fe043973213e8fc635f6c09726d3b209eca4c2c94dab28c7b8f4ec50df0cda22bf717c43364a13db75308fce2d1ec", 0x8e, 0x8, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000000480)="88b4f74ae7528a5b4844fef0439ee9dcff996618006bfc3f3ef5d68a41c1625b933d2abf4d481202f80192b999176f0230ccd8eec3bc5472a82fadf1d1416b1b3d9c82a7749047a9da0de8167e80fd854750696e685af978b5b8b03c1f0da5d985b9abb8cf9f9fd1ba7314322dc17ad5136720f5350642d11bab10f00e427207a5a5c5d94f4552e0dc663066da7650a7878d202ae6fda4690e731c708b8e6bff0f070a4abd963905f8b7e84d93b02477970b5900f049baf84135418deb9f04bd09bcddc3ea339e92506b362e6074d552696c2f731cc3a761967b1b932295d035cb78d9", 0xe3, 0x9}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x3, r1, &(0x7f00000005c0)="f459e51438ea9eab6b2c011d36020501e9a386124dbde82695f6efcce093c3d4243d6e87a53c548a4d037acb9bdc223b", 0x30, 0x6}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000680)="f81788ac4f425d48f35a9f8e115fb829cec5ee819eb85db9e28a1e6c19128e471a70cf7ba09d495e0a686daa040eccdfe875b7d1fef11bddc71b5429", 0x3c, 0x7, 0x0, 0x1}, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x2, 0xae66, r0, &(0x7f0000000700)="27d9c35e0fb9b647cf47c40143355fba186189f4623e03ac9bb0a1b7bee33ce3db3dbc6db2822903d220499931b3278aad89edbf2e298b4f6eee7ff905", 0x3d, 0x3, 0x0, 0x2}, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f00000050c0)="2946c3a9a1d118bded540f8cd21b22db9d984976342537c179c49267de4781525518c6e6ae4303dd88d0502fe24522c6bc", 0x31, 0x1, 0x0, 0x2, r2}, &(0x7f0000005280)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000005180)="35199ded62480edf78bbed7f63d73225e1c0a13b27295299c0c06c5c2889372f512f6a4a192a12e1c27b9da59b5ec28c3b65ea87b59840432d00a5bb733e2363b026e53c1c7c717eb7e6b16d8b112311127addfb6a988975e9f8256097e60a6e65ed9f9325e96b10b7e7538fd04dadc17db65833e67efb4aaba3a61416c72a8f4875ca2250e7c33fffe2ef928c39ef8c4866f04bdea08fd6bc2eeada60612ec11fa266b3e382", 0xa6, 0x1, 0x0, 0x1, r3}, &(0x7f0000005340)={0x0, 0x0, 0x0, 0x3, 0x7a, r0, &(0x7f00000052c0)="7e4ed0ed34c1980ac158509627bd552762ffc94e5c6aa4fe415597cde367e3fadd912191846578dabb51be5a69e100a9f5f9172a0ab0b9d977b471246d6c25c9fbb5b0d35fcc6d3b4dfbbb59553b", 0x4e, 0xfffffffffffffffa, 0x0, 0x1}, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x7, 0x70, r4, &(0x7f00000053c0)="0754c423b3322b070c965b9cd1c5a0783b96f8070eacfed87caabc58348c2eb44e03e742891c0cbe598fc7f943f4071b37ace11b06be14ef3a79", 0x3a, 0x4, 0x0, 0x0, r5}]) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000140)={0x0, 0x5, [@broadcast, @local, @remote, @local, @local]}) pwrite64(r6, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)=0x5) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:59:19 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 08:59:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xf, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:59:19 executing program 3: r0 = dup(0xffffffffffffffff) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1000) r3 = openat2(r1, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x40000, 0x12, 0x1}, 0x18) r4 = syz_open_dev$mouse(&(0x7f0000000380), 0x2, 0x600200) write$P9_RREADLINK(r4, &(0x7f00000003c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000340)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), 0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000004c0)={{}, "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"}) sendmsg$TIPC_CMD_GET_NETID(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="195a14000000", @ANYRES16=r6, @ANYBLOB="000d27bd7000fedbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x404c0d0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl(r0, 0x4, &(0x7f0000000240)="d6380f5a4b11ee74282e02805d2c3b947fefeb476af88f5480e69f4ebef7c0185f230a") sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000081}, 0x20004000) ioctl$TUNSETTXFILTER(r2, 0x4b47, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 08:59:19 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/anycast6\x00') r3 = fork() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000011c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0x8c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x12000000000000}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x2004c014) preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 08:59:19 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)='\x00'/24, 0x18, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:59:19 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x3f00000000000000) [ 1847.358218] loop4: detected capacity change from 0 to 140 [ 1847.360355] loop5: detected capacity change from 0 to 140 [ 1847.361934] loop6: detected capacity change from 0 to 140 [ 1847.369656] loop1: detected capacity change from 0 to 140 [ 1847.392209] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1847.394780] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1847.396373] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1847.401779] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1847.403423] EXT4-fs (loop1): group descriptors corrupted! [ 1847.406678] EXT4-fs (loop4): get root inode failed [ 1847.407562] EXT4-fs (loop4): mount failed [ 1847.432108] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1847.433266] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1847.440522] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1847.444118] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/222/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1847.493525] loop4: detected capacity change from 0 to 140 [ 1847.498304] EXT4-fs error (device loop5): ext4_readdir:258: inode #2: block 4: comm syz-executor.5: path /syzkaller-testdir286319133/syzkaller.d9TaX1/211/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 08:59:19 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x4800000000000000) [ 1847.540070] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1847.543550] EXT4-fs (loop4): get root inode failed [ 1847.544368] EXT4-fs (loop4): mount failed 08:59:19 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_to_team\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) [ 1847.625660] loop6: detected capacity change from 0 to 140 08:59:19 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)='\x00'/24, 0x18, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:59:19 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x14042, 0x20) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x214082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100aaaaaa440000"]) 08:59:19 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="b461fcec6742387b6178e6d3320ea35d642542a664959b9c6ce76120129ed2635974ee87616743d955f5c1b86efe151d1fe8ac9a528ca5a169ebbc0e0476b7d2db3d45e52f73d761a4c891b5ba501aede265e09d50e965c8b47d81cce878e688c1f1c520e7cdd588abdf98442c0c1e6702b62f036abd104b1119be4b66d5941ad2958364a3", 0x85}, {&(0x7f0000000140)="14a9a31d89db98ec5bb707e8d17ebb0b7d99fe7d45cea005e4b5ae022afb21c5854c773c9e2fbc3e3aec2e59bbaf397e728887a84f2c62a933b1e590e6bca8b24d3aa183b08c16edb1aeddf9", 0x4c}], 0x2, 0x0, 0x5, 0x1b) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x4b47, 0x0) 08:59:19 executing program 5: r0 = dup(0xffffffffffffffff) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1000) r3 = openat2(r1, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x40000, 0x12, 0x1}, 0x18) r4 = syz_open_dev$mouse(&(0x7f0000000380), 0x2, 0x600200) write$P9_RREADLINK(r4, &(0x7f00000003c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000340)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), 0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000004c0)={{}, "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"}) sendmsg$TIPC_CMD_GET_NETID(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="195a14000000", @ANYRES16=r6, @ANYBLOB="000d27bd7000fedbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x404c0d0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl(r0, 0x4, &(0x7f0000000240)="d6380f5a4b11ee74282e02805d2c3b947fefeb476af88f5480e69f4ebef7c0185f230a") sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000081}, 0x20004000) ioctl$TUNSETTXFILTER(r2, 0x4b47, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 08:59:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) [ 1847.702474] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1847.716944] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1847.720430] loop1: detected capacity change from 0 to 140 [ 1847.726140] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1847.727646] EXT4-fs (loop1): group descriptors corrupted! [ 1847.743117] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/223/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1847.772774] loop1: detected capacity change from 0 to 140 [ 1847.778819] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 1847.780574] EXT4-fs (loop1): group descriptors corrupted! [ 1847.791009] loop4: detected capacity change from 0 to 140 08:59:19 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000", 0x24, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:59:19 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="0001d2802e201bb6270000007ecef42f76bb693fd9b5ac01448be965994e75ea10d43a8f4f99fef005ef69db498158fbcebc2fe798bbcb35ae2b15099e7c73bde63deb5defff8d3eb01a410f3c97fb2bb14f3d60b11d47264b3139825dd2176a55cb5309d1e7003b3e960cdeab14787c32604e21a127a66bb618ac7f1a4d60d4059f92fa9cdae54c737c29ef7e62839906b64ff658d27a9083aed6c3d55c6b2c77ca6e159c62555c98b4941f"]) 08:59:19 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) preadv2(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000040)=""/238, 0xee}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/102, 0x66}, {&(0x7f00000001c0)=""/108, 0x6c}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f00000012c0)=""/122, 0x7a}, {&(0x7f0000001340)=""/214, 0xd6}, {&(0x7f0000001440)=""/10, 0xa}, {&(0x7f0000001480)=""/163, 0xa3}, {&(0x7f0000001540)=""/37, 0x25}], 0xa, 0x7, 0xe0f0000, 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) 08:59:19 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000", 0x24, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1847.837653] loop1: detected capacity change from 0 to 140 08:59:19 executing program 7: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000001180)={0x99, 0x1, 0x5, 0x7fff, 0x7, [{0x0, 0x7, 0xffffffffffffffff, '\x00', 0x4}, {0xfffffffffffffff7, 0x6, 0x10000000000000, '\x00', 0x2404}, {0x8, 0x8, 0x7fffffff, '\x00', 0x1002}, {0x6, 0x6, 0x4, '\x00', 0x800}, {0x0, 0xffffffffffffff81, 0xcfa, '\x00', 0x1}, {0x0, 0x8e0, 0x7, '\x00', 0xa84}, {0xd9, 0x5bd1, 0x56f8, '\x00', 0x402}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000001080)={0x1d62, 0x2, {0x0, 0x1, 0x5, 0x1, 0x7fff}, 0xcd6}) preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 1847.856949] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1847.874373] EXT4-fs (loop4): get root inode failed [ 1847.875259] EXT4-fs (loop4): mount failed [ 1847.896153] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 1847.897698] EXT4-fs (loop1): group descriptors corrupted! [ 1847.923764] loop4: detected capacity change from 0 to 140 08:59:19 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x4c00000000000000) [ 1847.982476] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1847.995004] EXT4-fs (loop4): get root inode failed [ 1847.995897] EXT4-fs (loop4): mount failed [ 1848.002113] loop6: detected capacity change from 0 to 140 [ 1848.042314] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1848.047538] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 08:59:19 executing program 2: r0 = epoll_create(0x8e) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x8, 0x1}) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00800100aa0200aaaabb"]) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) 08:59:19 executing program 5: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) fallocate(r1, 0x50, 0x0, 0x4000000000000007) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000005100)={{0x1, 0x1, 0x18, r1, {r1}}, './file1\x00'}) r3 = syz_open_dev$vcsn(&(0x7f0000005240), 0x13a8cd94, 0x800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000005380)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r5, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) io_submit(0x0, 0xa, &(0x7f0000005440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x480, 0xffffffffffffffff, &(0x7f00000002c0)="12859b4ff7d2e619def783543beeff9119c83fedfa05fe18aea2f4d6e5b275a7c6c251992208b415496ac827b8ed1c61d9d835219328b9acec98ef90a85351349b5430e17dd7851b25c30a4c176b5182c55bf0ba1cfd591e5af489497845582c17e1e7e43173408f7c65428ccd87383fa86799ea13b390ebbdc44a9ec4b9886407cf93ac9bf312709767f407f48b285206fdbdc278c5be2e4d558462b0a83984a6a6d8312f1c2f4724b4d4ea8ce29dc3abe45e5584cb8acb49e67f36a469abc8bffaaf03a617141eda64d883813d2b6fa056872649dec2c38b675ef8998bc839b072138a", 0xe4, 0x10000}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x400, r1, &(0x7f00000003c0)="ae8ae9afd8c808729dfdae4073a7aa1222891437b9f78a5929744fdfbd8e8a05df259bbbe635553d4314e17cba728146e2c8785efa9d63e66f8ca04a7473bfe403c42ec85f96c243f3cd4a037b68423bf7836a45e4baa208db89ac061cf4c02fe043973213e8fc635f6c09726d3b209eca4c2c94dab28c7b8f4ec50df0cda22bf717c43364a13db75308fce2d1ec", 0x8e, 0x8, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000000480)="88b4f74ae7528a5b4844fef0439ee9dcff996618006bfc3f3ef5d68a41c1625b933d2abf4d481202f80192b999176f0230ccd8eec3bc5472a82fadf1d1416b1b3d9c82a7749047a9da0de8167e80fd854750696e685af978b5b8b03c1f0da5d985b9abb8cf9f9fd1ba7314322dc17ad5136720f5350642d11bab10f00e427207a5a5c5d94f4552e0dc663066da7650a7878d202ae6fda4690e731c708b8e6bff0f070a4abd963905f8b7e84d93b02477970b5900f049baf84135418deb9f04bd09bcddc3ea339e92506b362e6074d552696c2f731cc3a761967b1b932295d035cb78d9", 0xe3, 0x9}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x3, r1, &(0x7f00000005c0)="f459e51438ea9eab6b2c011d36020501e9a386124dbde82695f6efcce093c3d4243d6e87a53c548a4d037acb9bdc223b", 0x30, 0x6}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000680)="f81788ac4f425d48f35a9f8e115fb829cec5ee819eb85db9e28a1e6c19128e471a70cf7ba09d495e0a686daa040eccdfe875b7d1fef11bddc71b5429", 0x3c, 0x7, 0x0, 0x1}, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x2, 0xae66, r0, &(0x7f0000000700)="27d9c35e0fb9b647cf47c40143355fba186189f4623e03ac9bb0a1b7bee33ce3db3dbc6db2822903d220499931b3278aad89edbf2e298b4f6eee7ff905", 0x3d, 0x3, 0x0, 0x2}, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f00000050c0)="2946c3a9a1d118bded540f8cd21b22db9d984976342537c179c49267de4781525518c6e6ae4303dd88d0502fe24522c6bc", 0x31, 0x1, 0x0, 0x2, r2}, &(0x7f0000005280)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000005180)="35199ded62480edf78bbed7f63d73225e1c0a13b27295299c0c06c5c2889372f512f6a4a192a12e1c27b9da59b5ec28c3b65ea87b59840432d00a5bb733e2363b026e53c1c7c717eb7e6b16d8b112311127addfb6a988975e9f8256097e60a6e65ed9f9325e96b10b7e7538fd04dadc17db65833e67efb4aaba3a61416c72a8f4875ca2250e7c33fffe2ef928c39ef8c4866f04bdea08fd6bc2eeada60612ec11fa266b3e382", 0xa6, 0x1, 0x0, 0x1, r3}, &(0x7f0000005340)={0x0, 0x0, 0x0, 0x3, 0x7a, r0, &(0x7f00000052c0)="7e4ed0ed34c1980ac158509627bd552762ffc94e5c6aa4fe415597cde367e3fadd912191846578dabb51be5a69e100a9f5f9172a0ab0b9d977b471246d6c25c9fbb5b0d35fcc6d3b4dfbbb59553b", 0x4e, 0xfffffffffffffffa, 0x0, 0x1}, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x7, 0x70, r4, &(0x7f00000053c0)="0754c423b3322b070c965b9cd1c5a0783b96f8070eacfed87caabc58348c2eb44e03e742891c0cbe598fc7f943f4071b37ace11b06be14ef3a79", 0x3a, 0x4, 0x0, 0x0, r5}]) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000140)={0x0, 0x5, [@broadcast, @local, @remote, @local, @local]}) pwrite64(r6, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)=0x5) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:59:19 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000", 0x24, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:59:19 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400c00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) [ 1848.071385] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1848.081976] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/224/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1848.103688] loop1: detected capacity change from 0 to 140 [ 1848.135210] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 1848.136570] EXT4-fs (loop1): group descriptors corrupted! 08:59:34 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000130000002300", 0x2a, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:59:34 executing program 5: r0 = epoll_create(0x8e) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x8, 0x1}) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00800100aa0200aaaabb"]) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) 08:59:34 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) 08:59:34 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000000)) epoll_create(0x0) clock_gettime(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x11}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}], 0x2, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x88100) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000280)={0x0, 0x0, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x600, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 08:59:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x11, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:59:34 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001080)={'veth0_macvtap\x00'}) openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000010c0), 0x2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001100)) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x1d, 0x101000) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r4, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001180)=""/16) dup2(r2, r0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000011c0)={{r1}, 0x0, 0xa, @unused=[0x8, 0x9, 0xffff, 0x5], @name="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"}) [ 1862.486108] loop4: detected capacity change from 0 to 140 08:59:34 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2e98633b01"]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) recvmmsg$unix(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)}, {&(0x7f0000000240)}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000400)=""/91, 0x5b}, {&(0x7f0000000480)=""/95, 0x5f}], 0x7, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/70, 0x46}, {&(0x7f00000006c0)=""/38, 0x26}, {&(0x7f0000000700)=""/73, 0x49}, {&(0x7f0000000780)=""/82, 0x52}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/142, 0x8e}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/214, 0xd6}, {&(0x7f0000000b00)=""/166, 0xa6}], 0x9}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000c80)=""/204, 0xcc}, {&(0x7f0000000d80)=""/92, 0x5c}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/177, 0xb1}, {&(0x7f0000000f00)=""/70, 0x46}, {&(0x7f0000000f80)=""/62, 0x3e}, {&(0x7f0000000fc0)=""/162, 0xa2}], 0x7, &(0x7f0000001100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x3, 0x40000000, &(0x7f0000001240)={0x0, 0x3938700}) openat$cgroup_procs(r2, &(0x7f0000001280)='cgroup.threads\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'macsec0\x00'}) 08:59:34 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x6800000000000000) [ 1862.498980] loop6: detected capacity change from 0 to 140 [ 1862.500691] loop1: detected capacity change from 0 to 140 [ 1862.529062] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1862.534483] EXT4-fs (loop4): get root inode failed [ 1862.535252] EXT4-fs (loop4): mount failed [ 1862.540466] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1862.570507] loop4: detected capacity change from 0 to 140 [ 1862.577566] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1862.580627] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1862.586878] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1862.590384] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 08:59:34 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'erspan0\x00', @link_local}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)) [ 1862.607416] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/225/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1862.633042] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1862.660306] EXT4-fs (loop4): get root inode failed [ 1862.661224] EXT4-fs (loop4): mount failed 08:59:34 executing program 5: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000001180)={0x99, 0x1, 0x5, 0x7fff, 0x7, [{0x0, 0x7, 0xffffffffffffffff, '\x00', 0x4}, {0xfffffffffffffff7, 0x6, 0x10000000000000, '\x00', 0x2404}, {0x8, 0x8, 0x7fffffff, '\x00', 0x1002}, {0x6, 0x6, 0x4, '\x00', 0x800}, {0x0, 0xffffffffffffff81, 0xcfa, '\x00', 0x1}, {0x0, 0x8e0, 0x7, '\x00', 0xa84}, {0xd9, 0x5bd1, 0x56f8, '\x00', 0x402}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000001080)={0x1d62, 0x2, {0x0, 0x1, 0x5, 0x1, 0x7fff}, 0xcd6}) preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 1877.345619] loop1: detected capacity change from 0 to 140 08:59:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001080)={'veth0_macvtap\x00'}) openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000010c0), 0x2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001100)) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x1d, 0x101000) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r4, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001180)=""/16) dup2(r2, r0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000011c0)={{r1}, 0x0, 0xa, @unused=[0x8, 0x9, 0xffff, 0x5], @name="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"}) 08:59:49 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000130000002300", 0x2a, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:59:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x4000) dup3(r1, 0xffffffffffffffff, 0x80000) 08:59:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x14, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 08:59:49 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001500), 0x6e, &(0x7f0000001780)=[{&(0x7f0000001580)=""/63, 0x3f}, {&(0x7f00000015c0)=""/88, 0x58}, {&(0x7f0000001640)=""/134, 0x86}, {&(0x7f0000001700)}, {&(0x7f0000001740)=""/24, 0x18}], 0x5, &(0x7f0000001800)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x63) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x280, 0x80}, 0x18) write$selinux_attr(r0, &(0x7f00000000c0)='system_u:object_r:hald_cache_t:s0\x00', 0x22) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0]) write$binfmt_misc(r1, &(0x7f0000000080)={'syz0', "795b0511ddd16228e076"}, 0xe) 08:59:49 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x6c00000000000000) 08:59:49 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x4, @mcast2, 0x1f}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="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", 0xfc}, {&(0x7f00000001c0)="c4cd0be524f5113f48d659da8be775c4655126fc2a6da78f67b6f14aeab513748ac2cb5aaf3c8ab8bd25242eda482a807373d4d042230d73e3c94d95b1e3865e93c2c6e14d974f8a792c95f504e9ce30c6dd7a1f36e99d5209ec5fbc404165e6db1d9d855afe49549117bb432f19e3", 0x6f}], 0x2, &(0x7f00000002c0)=[@hopopts={{0xd8, 0x29, 0x36, {0x2e, 0x17, '\x00', [@ra, @jumbo={0xc2, 0x4, 0x7ff}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x28, {0x3, 0x8, 0x2, 0xe8c5, [0x401, 0x3, 0x9, 0x8]}}, @pad1, @calipso={0x7, 0x38, {0x1, 0xc, 0x2, 0xb582, [0x9, 0xffff, 0x7f, 0x7fff, 0x200, 0x5]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3f, 0x800, [0x9820, 0x100, 0x3, 0xdf, 0xd]}}, @hao={0xc9, 0x10, @remote}]}}}, @dontfrag={{0x14}}], 0xf0}}, {{&(0x7f00000003c0)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x34}, 0x5c1}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000400)="78132e9d96bb7f3d4d6b4f794652a5e1497c2757b5deff3dcb0d27f1b0fc39", 0x1f}, {&(0x7f0000000440)="618890554b089587983b83311476fa4aad5db51b6017e43ec0d5531a32beb52b87ea03a850f8453ea8c085d1e1863804b3b7f5938a4aa9d05d16236442b7299299f5925cb600e8e27086eb3f3bbbeaa0ecac37fc02e26807b3fcc80cb599c165ed52a62a0fbee130fa3dd3bcc52efa19311835dbd19d533a20e5b2eeaa8c4488ca83461f646791ae6a4d0d65dd06d7779c69152e9d532ebededd2e6f3ba6c278ea9322b35995f3cf7f2595f5cb6ced2e55b466863325ee5f7fabbd80fd0fa90976b916fa917b77d2ad36b3fbb7811df1761bf67d1d09e3bae0730009e66224", 0xdf}, {&(0x7f0000000540)="45da9bee643e0f579eba146efcb6dbe527555def011a76359d3c63e52a20d501e29d53c4a21c34231c1ea3c9e52ed0ac734569c0925852f2ebc0bbcc33206edb37fd45e08a581291177727a6a17f791d9be72faf8c07048a0e1d206bff6599a9bcdf61bb10864a7d4c0c0295c115f15536d4c19c", 0x74}, {&(0x7f00000005c0)="f5e0e9898f4c025c30dc51df1a47ba76be22d07a12387c01e77d7a0c954026837a32ef2b805712eacbfc7f78e18eb9d3e4f2a0829e318bd598ab7307fe96b27d25393f42760e4275788f4932c6ad8b6cb20e9db3a9fbb4fe7ccdaf87cafa29bf45feaba359b1aa993b56fac0375eaea03aa10ee0f9dcd48e02dd79f1f182620f", 0x80}, {&(0x7f0000000640)="e3fcb8cac6ce50967862673790695867f25b571d60ff9a80b14b36057f1197cc39ebb4118238781fa85822ffb75ba6c82206fe397430ba896569d6e5eefa64e7f388b5e5408d4f0dff1d596494b2630b08f5cdfe7faa1cbf71b7112c93cbcbf696a0b9d01d0fd81b247c1adc804adcb3ff69e726bc4f87bc1d2cc83778fb7986", 0x80}, {&(0x7f00000006c0)="239e81ab81dc572374410326f45f84d9fa5f114b3c68c459078fcad9558e303ec066058fce7352d3e9e7084b137564840bc9e05e87c922b2ebcff6483558ac31ca8067f46273efe00638686574fa2c17fbefac75922c9acd618734bfc336750fe807a4a7dd6e68faf5669202c4d99d73e3c2cf16", 0x74}, {&(0x7f0000000740)="727e9453294b9a2582a758d42241e082a0ecaf1d", 0x14}], 0x7, &(0x7f0000000800)=[@dontfrag={{0x14, 0x29, 0x3e, 0x10000}}], 0x18}}, {{&(0x7f0000000840)={0xa, 0x4e20, 0x7fffffff, @loopback, 0x1}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000880)="c6e9beac4496b7a2aa", 0x9}, {&(0x7f00000008c0)="d8cc1074f38a2b4b04dc3c831ba2f61c68117a2c00360a6c16e3d839d894bc4a6e2d289672c484b7add5f521843286e065935695b54465360a259691111e8640982989bd289eecdb80bf48fd5b951a1d5070a845d011c714426fb076672cc3e2c093a447d5960f911df31d6c98a74200fb30b0b7de01ecbe7dff59d773f5256b7e75c91eb586c0bf43d9a9fc681c034bca19c22220b63bb6fe4ff560fc1952ee04472e73", 0xa4}], 0x2, &(0x7f00000009c0)=[@dontfrag={{0x14}}], 0x18}}], 0x3, 0x4044004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01008a06f091d9c67e01dd1ae0a14ddd809f0100aaaaaaaaaabb"]) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 08:59:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x4b47, 0x0) r2 = pidfd_getfd(r0, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) [ 1877.379020] loop6: detected capacity change from 0 to 140 [ 1877.385806] loop4: detected capacity change from 0 to 140 [ 1877.403390] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1877.419464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1877.422463] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1877.441517] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1877.443939] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1877.447575] EXT4-fs (loop4): get root inode failed [ 1877.448313] EXT4-fs (loop4): mount failed [ 1877.479230] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1877.483039] loop4: detected capacity change from 0 to 140 [ 1877.485808] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/226/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1877.519764] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1877.537956] EXT4-fs (loop4): get root inode failed [ 1877.538698] EXT4-fs (loop4): mount failed 09:00:03 executing program 5: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) 09:00:03 executing program 7: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x2000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x500) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000001200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001100)={{0x1, 0x1, 0x18, r0, {0xee01, r2}}, './file0\x00'}) preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f0000001280)=[{&(0x7f0000001240)=""/22, 0x16}], 0x1, 0x7, 0xffff) 09:00:03 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 09:00:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x26, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 09:00:03 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:ksm_device_t:s0\x00', 0x22) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) 09:00:03 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) r5 = memfd_create(&(0x7f00000002c0)='\x00', 0x2) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000300)={r4, r5, 0xaf1a}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000140)={0x1, 0x4, [@empty, @empty, @local, @broadcast]}) sendmsg$nl_generic(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x2e, 0x200, 0x70bd28, 0x25dfdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) pwrite64(r6, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 09:00:03 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000130000002300", 0x2a, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 09:00:03 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x7400000000000000) [ 1891.966622] loop1: detected capacity change from 0 to 140 [ 1891.988495] loop4: detected capacity change from 0 to 140 [ 1891.989921] loop6: detected capacity change from 0 to 140 [ 1892.011810] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1892.025112] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1892.036662] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1892.038136] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1892.038300] EXT4-fs (loop4): get root inode failed [ 1892.040372] EXT4-fs (loop4): mount failed [ 1892.057511] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1892.068136] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1892.071319] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/227/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1892.081177] loop4: detected capacity change from 0 to 140 09:00:03 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0100fc143fac5e79628efd3f2e52f4e9aa0000000000132e2f66696c65b000"]) dup3(r0, r0, 0x80000) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) 09:00:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 1892.097804] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1892.101710] EXT4-fs (loop4): get root inode failed [ 1892.102583] EXT4-fs (loop4): mount failed 09:00:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 09:00:04 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 09:00:04 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x7a00000000000000) 09:00:04 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x22000, 0x122, 0x2}, 0x18) write$binfmt_misc(r1, &(0x7f00000000c0)={'syz0', "4c686278dbc3cc7516dc0730c7f15e0323f2adaab9ce1ea971ada25189026b11025411f77d08ac38bb418f95c4e85a4736197d4c51a6a6703b96d7a98707f8309884ec1d2d346a564e3735065cdb1125ded065574943f83bc300b0cf7d3f01e583457fe7259f0a86ccf0440002dda5ea39db6af9d682744e900a5b09063ba991ed02093a95ffc1abc82a5d57afb403a357cb0005eaf709"}, 0x9b) [ 1892.231744] loop4: detected capacity change from 0 to 140 09:00:04 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1892.248449] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1892.258013] EXT4-fs (loop4): get root inode failed [ 1892.259170] EXT4-fs (loop4): mount failed 09:00:04 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x401, 0x4, 0xfffffffd, 0xde48, 0x11, "b85641e0f1a7cfaef253f62582beea51c23bf2"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000003640)={&(0x7f0000003580), 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100aa481e7b64fc4938a5ccb999fcf9a6dc753f59aaaaaaaabbe9c6c3a6d420ab494e7e847c9c49c7fc67b18be44691373ee75f72347a35fa97750a9a2f1be13b342ba0d8b40ce92bfdc1e8eff0d910fe6582977d0b84b703036b8033d47342d5283ed2ac9fa049e238a0609234b453fbc2eb8a4b1ea82701ca901e3cc0364fb1ee414d1a86c3de196fb73ce8de2fe7a543b1e0724175eac77719dd5dc891e952ab26f5bfe2cc369ded595397b91cc95bc3b0f40d0ff77173e7f194edd4dbb98c46b6e8"]) 09:00:04 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="193d2a000000000000bb"]) [ 1892.297521] loop4: detected capacity change from 0 to 140 [ 1892.314932] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1892.319650] EXT4-fs (loop4): get root inode failed [ 1892.321066] EXT4-fs (loop4): mount failed [ 1892.386351] loop6: detected capacity change from 0 to 140 [ 1892.434227] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1892.459127] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1892.465442] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1892.482744] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/228/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 09:00:18 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xa807000000000000) 09:00:18 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 09:00:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:udev_helper_exec_t:s0\x00', 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xfffffffd, 0x1, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000080)) ioctl$TUNSETTXFILTER(r1, 0x4b47, 0x0) 09:00:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x45, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 09:00:18 executing program 5: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) r5 = memfd_create(&(0x7f00000002c0)='\x00', 0x2) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000300)={r4, r5, 0xaf1a}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000140)={0x1, 0x4, [@empty, @empty, @local, @broadcast]}) sendmsg$nl_generic(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x2e, 0x200, 0x70bd28, 0x25dfdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) pwrite64(r6, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 09:00:18 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vlan1\x00'}) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x7}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) close(r2) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) 09:00:18 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x414001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_batadv\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) fchmod(r0, 0xc0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 09:00:18 executing program 7: r0 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000580)={0x21100, 0x0, &(0x7f0000000440), &(0x7f0000000480), {0x28}, &(0x7f00000004c0)=""/29, 0x1d, &(0x7f0000000500)=""/24, &(0x7f0000000540)=[r0, r0], 0x2}, 0x58) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 1906.835963] loop1: detected capacity change from 0 to 140 [ 1906.851930] loop6: detected capacity change from 0 to 140 [ 1906.881596] loop4: detected capacity change from 0 to 140 [ 1906.887422] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1906.898053] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1906.940533] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1906.953379] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1906.958534] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 09:00:18 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b00", 0x2e, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1906.964441] EXT4-fs (loop4): get root inode failed [ 1906.965234] EXT4-fs (loop4): mount failed [ 1907.009973] loop4: detected capacity change from 0 to 140 [ 1907.049531] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) 09:00:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x141) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000010c0), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000001100)=0x100000001) fgetxattr(r1, &(0x7f0000001080)=@random={'os2.', '&\\.\x00'}, &(0x7f0000001180)=""/254, 0xfe) r3 = memfd_secret(0x80000) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000001280)={0x5, 0x5}) preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 1907.062063] EXT4-fs (loop4): get root inode failed [ 1907.062765] EXT4-fs (loop4): mount failed 09:00:18 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xdeffffff00000000) 09:00:18 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b00", 0x2e, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 09:00:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x46, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) 09:00:19 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xf5ffffff00000000) [ 1907.238542] loop4: detected capacity change from 0 to 140 09:00:19 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b00", 0x2e, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 09:00:19 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, 0x0, 0xa807000000000000) [ 1907.296686] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1907.301413] EXT4-fs (loop4): get root inode failed [ 1907.302324] EXT4-fs (loop4): mount failed [ 1907.304956] loop6: detected capacity change from 0 to 140 [ 1907.339061] loop1: detected capacity change from 0 to 140 [ 1907.347209] loop5: detected capacity change from 0 to 140 [ 1907.353970] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1907.358336] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1907.374204] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 09:00:19 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'bond_slave_1\x00'}) 09:00:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x48, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[]) [ 1907.380705] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1907.385158] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1907.386579] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1907.400763] EXT4-fs error (device loop6): __ext4_new_inode:1071: comm syz-executor.6: reserved inode found cleared - inode=1 [ 1907.407424] EXT4-fs error (device loop5): __ext4_new_inode:1071: comm syz-executor.5: reserved inode found cleared - inode=1 [ 1907.411004] EXT4-fs error (device loop6): ext4_readdir:258: inode #2: block 4: comm syz-executor.6: path /syzkaller-testdir027168343/syzkaller.mfCbj7/231/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1907.417043] EXT4-fs error (device loop5): ext4_readdir:258: inode #2: block 4: comm syz-executor.5: path /syzkaller-testdir286319133/syzkaller.d9TaX1/219/mnt: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1907.509699] loop4: detected capacity change from 0 to 140 [ 1907.562104] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1907.571160] EXT4-fs (loop4): get root inode failed [ 1907.572205] EXT4-fs (loop4): mount failed [ 1907.604605] loop4: detected capacity change from 0 to 140 [ 1907.615410] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1907.620905] EXT4-fs (loop4): get root inode failed [ 1907.621686] EXT4-fs (loop4): mount failed [ 1910.393374] oom_reaper: reaped process 10665 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1910.450181] systemd-udevd invoked oom-killer: gfp_mask=0x1140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 1910.452546] CPU: 1 PID: 10658 Comm: systemd-udevd Not tainted 5.16.0-rc6-next-20211222 #1 [ 1910.453669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1910.455253] Call Trace: [ 1910.455610] [ 1910.455994] dump_stack_lvl+0x8b/0xb3 [ 1910.456593] dump_header+0x106/0x60f [ 1910.457146] oom_kill_process.cold+0x10/0x15 [ 1910.457793] out_of_memory+0x1198/0x1460 [ 1910.458425] ? oom_killer_disable+0x270/0x270 [ 1910.459116] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 [ 1910.460008] ? warn_alloc+0x120/0x120 [ 1910.460561] ? lock_is_held_type+0xd7/0x130 [ 1910.461175] ? prepare_alloc_pages+0x371/0x500 [ 1910.461813] __alloc_pages+0x403/0x4e0 [ 1910.462387] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1910.463248] ? lock_is_held_type+0xd7/0x130 [ 1910.463932] ? __filemap_get_folio+0x2d1/0xfd0 [ 1910.464596] ? lock_downgrade+0x6d0/0x6d0 [ 1910.465206] ? lock_is_held_type+0xd7/0x130 [ 1910.465832] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1910.466637] alloc_pages+0x1a0/0x2f0 [ 1910.467189] __filemap_get_folio+0x65c/0xfd0 [ 1910.467852] ? filemap_read+0xbb0/0xbb0 [ 1910.468443] filemap_fault+0x155a/0x2130 [ 1910.469053] ? read_cache_page_gfp+0x230/0x230 [ 1910.469732] __do_fault+0x113/0x5a0 [ 1910.470280] __handle_mm_fault+0x1325/0x3570 [ 1910.470928] ? lock_is_held_type+0xd7/0x130 [ 1910.471551] ? __pmd_alloc+0x680/0x680 [ 1910.472228] handle_mm_fault+0x2e6/0xa20 [ 1910.472836] do_user_addr_fault+0x54a/0x12a0 [ 1910.473480] exc_page_fault+0xa2/0x1a0 [ 1910.474045] ? asm_exc_page_fault+0x8/0x30 [ 1910.474650] asm_exc_page_fault+0x1e/0x30 [ 1910.475240] RIP: 0033:0x7f5a042e4b20 [ 1910.475778] Code: Unable to access opcode bytes at RIP 0x7f5a042e4af6. [ 1910.476746] RSP: 002b:00007ffc289677f8 EFLAGS: 00010246 [ 1910.477507] RAX: 0000000000000000 RBX: 00007f5a058d9140 RCX: 0000000000000100 [ 1910.478526] RDX: 0000000000000000 RSI: 00007f5a058d9120 RDI: 00000000ffffff9c [ 1910.479542] RBP: 00007ffc28967920 R08: 00007f5a058d3f60 R09: 00007ffc28967560 [ 1910.480643] R10: 000000000000001e R11: 0000000000000246 R12: 00007f5a058d9120 [ 1910.481638] R13: 0000000000000000 R14: 0000000000000000 R15: 00007f5a05911080 [ 1910.482691] [ 1910.484515] Mem-Info: [ 1910.485161] active_anon:10560 inactive_anon:32315 isolated_anon:0 [ 1910.485161] active_file:20 inactive_file:1 isolated_file:0 [ 1910.485161] unevictable:0 dirty:0 writeback:0 [ 1910.485161] slab_reclaimable:8842 slab_unreclaimable:60178 [ 1910.485161] mapped:69664 shmem:124 pagetables:2074 bounce:0 [ 1910.485161] kernel_misc_reclaimable:0 [ 1910.485161] free:2693 free_pcp:63 free_cma:0 [ 1910.490054] Node 0 active_anon:42240kB inactive_anon:129260kB active_file:80kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278656kB dirty:0kB writeback:0kB shmem:496kB writeback_tmp:0kB kernel_stack:5280kB pagetables:8296kB all_unreclaimable? yes [ 1910.493790] Node 0 DMA free:6488kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1910.497664] lowmem_reserve[]: 0 1617 1617 1617 [ 1910.498401] Node 0 DMA32 free:3556kB boost:2048kB min:7168kB low:8824kB high:10480kB reserved_highatomic:0KB active_anon:42240kB inactive_anon:129308kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660844kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 1910.502497] lowmem_reserve[]: 0 0 0 0 [ 1910.503076] Node 0 DMA: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (U) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6488kB [ 1910.505712] Node 0 DMA32: 482*4kB (ME) 102*8kB (M) 30*16kB (UM) 16*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3736kB [ 1910.507656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1910.509042] 157 total pagecache pages [ 1910.509607] 0 pages in swap cache [ 1910.510130] Swap cache stats: add 0, delete 0, find 0/0 [ 1910.510860] Free swap = 0kB [ 1910.511269] Total swap = 0kB [ 1910.511682] 524158 pages RAM [ 1910.512220] 0 pages HighMem/MovableOnly [ 1910.512865] 105107 pages reserved [ 1910.513379] Unreclaimable slab info: [ 1910.514587] Name Used Total [ 1910.515399] pid_3 7KB 7KB [ 1910.516182] pid_2 56KB 56KB [ 1910.516962] IEEE-802.15.4-MAC 63KB 63KB [ 1910.517682] IEEE-802.15.4-RAW 63KB 63KB [ 1910.518477] fib6_nodes 28KB 28KB [ 1910.519265] ip6_dst_cache 39KB 48KB [ 1910.520138] PINGv6 63KB 63KB [ 1910.520885] RAWv6 157KB 157KB [ 1910.521594] UDPLITEv6 62KB 62KB [ 1910.522318] UDPv6 62KB 62KB [ 1910.523037] TCPv6 62KB 62KB [ 1910.523738] scsi_sense_cache 8KB 8KB [ 1910.524522] sd_ext_cdb 3KB 3KB [ 1910.525228] virtio_scsi_cmd 16KB 16KB [ 1910.525971] bio-96 7KB 7KB [ 1910.526706] sgpool-128 352KB 535KB [ 1910.527427] sgpool-64 63KB 63KB [ 1910.528204] sgpool-32 78KB 78KB [ 1910.528924] sgpool-16 83KB 127KB [ 1910.529621] sgpool-8 45KB 45KB [ 1910.530338] bio-224 3KB 3KB [ 1910.531060] mqueue_inode_cache 60KB 60KB [ 1910.531766] nfs_commit_data 15KB 15KB [ 1910.532563] nfs_write_data 47KB 47KB [ 1910.533288] jbd2_inode 7KB 7KB [ 1910.534015] ext4_system_zone 7KB 7KB [ 1910.534730] ext4_io_end_vec 7KB 7KB [ 1910.535454] ext4_bio_post_read_ctx 15KB 15KB [ 1910.536291] io_kiocb 56KB 75KB [ 1910.537022] kioctx 31KB 31KB [ 1910.537715] aio_kiocb 7KB 7KB [ 1910.538463] fasync_cache 7KB 7KB [ 1910.539187] pid_namespace 7KB 7KB [ 1910.539986] posix_timers_cache 7KB 7KB [ 1910.540689] rpc_buffers 31KB 31KB [ 1910.541430] rpc_tasks 3KB 3KB [ 1910.542157] UNIX-STREAM 170KB 279KB [ 1910.542880] UNIX 170KB 310KB [ 1910.543592] UDP-Lite 31KB 31KB [ 1910.544355] tcp_bind_bucket 8KB 8KB [ 1910.545113] inet_peer_cache 4KB 4KB [ 1910.545868] ip_fib_trie 8KB 8KB [ 1910.546616] ip_fib_alias 15KB 15KB [ 1910.547369] ip_dst_cache 8KB 8KB [ 1910.548480] RAW 125KB 125KB [ 1910.549270] UDP 220KB 220KB [ 1910.550086] request_sock_TCP 7KB 7KB [ 1910.550886] TCP 58KB 58KB [ 1910.551636] hugetlbfs_inode_cache 31KB 31KB [ 1910.552515] bio-216 11KB 11KB [ 1910.553262] ep_head 8KB 8KB [ 1910.554043] eventpoll_pwq 19KB 19KB [ 1910.554784] eventpoll_epi 43KB 43KB [ 1910.555571] inotify_inode_mark 46KB 46KB [ 1910.556409] request_queue 62KB 62KB [ 1910.557447] blkdev_ioc 8KB 8KB [ 1910.558873] bio-160 36KB 36KB [ 1910.559608] biovec-max 884KB 1011KB [ 1910.560403] biovec-64 157KB 157KB [ 1910.561266] biovec-16 30KB 30KB [ 1910.562089] user_namespace 30KB 30KB [ 1910.562796] uid_cache 7KB 7KB [ 1910.563530] dmaengine-unmap-2 4KB 4KB [ 1910.564349] audit_buffer 7KB 7KB [ 1910.565108] skbuff_fclone_cache 67KB 67KB [ 1910.565933] skbuff_head_cache 377KB 555KB [ 1910.566726] file_lock_cache 43KB 43KB [ 1910.567528] file_lock_ctx 7KB 7KB [ 1910.568338] fsnotify_mark_connector 18KB 36KB [ 1910.569182] net_namespace 93KB 93KB [ 1910.569972] taskstats 30KB 30KB [ 1910.570952] proc_dir_entry 345KB 345KB [ 1910.571784] pde_opener 27KB 27KB [ 1910.572680] seq_file 48KB 48KB [ 1910.573464] sigqueue 47KB 47KB [ 1910.574207] shmem_inode_cache 1442KB 1559KB [ 1910.574971] kernfs_iattrs_cache 231KB 231KB [ 1910.575674] kernfs_node_cache 5268KB 5319KB [ 1910.576504] mnt_cache 212KB 212KB [ 1910.577257] filp 1518KB 1635KB [ 1910.578216] names_cache 12320KB 12775KB [ 1910.578996] hashtab_node 278KB 278KB [ 1910.579781] ebitmap_node 1149KB 1149KB [ 1910.580635] avtab_node 4976KB 4976KB [ 1910.581480] avc_node 31KB 31KB [ 1910.582271] lsm_inode_cache 3278KB 3324KB [ 1910.583024] lsm_file_cache 85KB 128KB [ 1910.583743] key_jar 39KB 39KB [ 1910.584540] uts_namespace 15KB 15KB [ 1910.585302] nsproxy 11KB 11KB [ 1910.586066] vm_area_struct 1111KB 1276KB [ 1910.586809] mm_struct 210KB 409KB [ 1910.587532] fs_cache 48KB 48KB [ 1910.588367] files_cache 147KB 191KB [ 1910.589143] signal_cache 356KB 425KB [ 1910.589961] sighand_cache 390KB 390KB [ 1910.590713] task_struct 1304KB 1578KB [ 1910.591496] cred_jar 132KB 160KB [ 1910.592344] anon_vma_chain 249KB 307KB [ 1910.593079] anon_vma 340KB 340KB [ 1910.593884] pid 58KB 63KB [ 1910.594629] Acpi-Operand 91KB 146KB [ 1910.595396] Acpi-ParseExt 31KB 31KB [ 1910.596223] Acpi-Parse 31KB 47KB [ 1910.597048] Acpi-State 47KB 63KB [ 1910.597759] Acpi-Namespace 28KB 28KB [ 1910.598538] numa_policy 3KB 3KB [ 1910.599372] perf_event 63KB 63KB [ 1910.600213] trace_event_file 171KB 171KB [ 1910.601020] ftrace_event_field 296KB 296KB [ 1910.601900] pool_workqueue 48KB 48KB [ 1910.602742] task_group 16KB 16KB [ 1910.603555] vmap_area 47KB 51KB [ 1910.604331] page->ptl 211KB 252KB [ 1910.605073] kmemleak_scan_area 23KB 23KB [ 1910.606629] kmemleak_object 139889KB 149445KB [ 1910.607395] dma-kmalloc-512 16KB 16KB [ 1910.608232] kmalloc-cg-8k 64KB 64KB [ 1910.608969] kmalloc-cg-4k 680KB 768KB [ 1910.609684] kmalloc-cg-2k 756KB 800KB [ 1910.610415] kmalloc-cg-1k 230KB 256KB [ 1910.611174] kmalloc-cg-512 280KB 304KB [ 1910.612006] kmalloc-cg-256 16KB 16KB [ 1910.612734] kmalloc-cg-192 28KB 28KB [ 1910.613465] kmalloc-cg-128 12KB 12KB [ 1910.614173] kmalloc-cg-96 36KB 36KB [ 1910.614881] kmalloc-cg-64 20KB 20KB [ 1910.615598] kmalloc-cg-32 47KB 72KB [ 1910.616397] kmalloc-cg-16 8KB 8KB [ 1910.617108] kmalloc-cg-8 15KB 15KB [ 1910.617956] kmalloc-8k 5056KB 5216KB [ 1910.618873] kmalloc-4k 6328KB 6656KB [ 1910.619756] kmalloc-2k 4012KB 4352KB [ 1910.620886] kmalloc-1k 3550KB 4640KB [ 1910.622496] kmalloc-512 2564KB 4032KB [ 1910.624056] kmalloc-256 954KB 1048KB [ 1910.624927] kmalloc-192 469KB 508KB [ 1910.625698] kmalloc-128 454KB 600KB [ 1910.626692] kmalloc-96 322KB 544KB [ 1910.627486] kmalloc-64 990KB 1244KB [ 1910.628306] kmalloc-32 724KB 780KB [ 1910.629032] kmalloc-16 319KB 328KB [ 1910.629797] kmalloc-8 265KB 270KB [ 1910.630580] kmem_cache_node 51KB 51KB [ 1910.631370] kmem_cache 78KB 78KB [ 1910.632245] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-udevd.service,task=systemd-udevd,pid=10658,uid=0 [ 1910.635704] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577 [ 1910.637410] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 10658, name: systemd-udevd [ 1910.638668] preempt_count: 1, expected: 0 [ 1910.639285] RCU nest depth: 0, expected: 0 [ 1910.639966] 3 locks held by systemd-udevd/10658: [ 1910.640624] #0: ffff88800f0f67a0 (mapping.invalidate_lock){++++}-{3:3}, at: filemap_fault+0x151a/0x2130 [ 1910.642046] #1: ffffffff85278f88 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 [ 1910.643575] #2: ffff8880181a3e20 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 [ 1910.644960] Preemption disabled at: [ 1910.644967] [<0000000000000000>] 0x0 [ 1910.645992] CPU: 1 PID: 10658 Comm: systemd-udevd Not tainted 5.16.0-rc6-next-20211222 #1 [ 1910.647316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1910.649940] Call Trace: [ 1910.650337] [ 1910.650696] dump_stack_lvl+0x8b/0xb3 [ 1910.651329] __might_resched.cold+0x222/0x26b [ 1910.652118] __mutex_lock+0x9e/0x1480 [ 1910.652703] ? futex_exit_release+0x2d/0x220 [ 1910.653391] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 1910.654116] ? find_held_lock+0x2c/0x110 [ 1910.654738] ? lock_release+0x3b2/0x6f0 [ 1910.655325] ? __oom_kill_process+0x33f/0xf90 [ 1910.656078] ? lock_downgrade+0x6d0/0x6d0 [ 1910.656668] ? mark_held_locks+0x9e/0xe0 [ 1910.657416] futex_exit_release+0x2d/0x220 [ 1910.658153] __oom_kill_process+0x373/0xf90 [ 1910.658828] ? mem_cgroup_get_oom_group+0x12f/0x420 [ 1910.659662] oom_kill_process+0xd7/0x5c0 [ 1910.660369] out_of_memory+0x1198/0x1460 [ 1910.660971] ? oom_killer_disable+0x270/0x270 [ 1910.661701] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 [ 1910.662642] ? warn_alloc+0x120/0x120 [ 1910.663277] ? lock_is_held_type+0xd7/0x130 [ 1910.663975] ? prepare_alloc_pages+0x371/0x500 [ 1910.664721] __alloc_pages+0x403/0x4e0 [ 1910.665340] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1910.666331] ? lock_is_held_type+0xd7/0x130 [ 1910.666970] ? __filemap_get_folio+0x2d1/0xfd0 [ 1910.667733] ? lock_downgrade+0x6d0/0x6d0 [ 1910.668532] ? lock_is_held_type+0xd7/0x130 [ 1910.669150] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1910.669975] alloc_pages+0x1a0/0x2f0 [ 1910.670558] __filemap_get_folio+0x65c/0xfd0 [ 1910.671236] ? filemap_read+0xbb0/0xbb0 [ 1910.671883] filemap_fault+0x155a/0x2130 [ 1910.672539] ? read_cache_page_gfp+0x230/0x230 [ 1910.673265] __do_fault+0x113/0x5a0 [ 1910.673808] __handle_mm_fault+0x1325/0x3570 [ 1910.674477] ? lock_is_held_type+0xd7/0x130 [ 1910.675139] ? __pmd_alloc+0x680/0x680 [ 1910.675720] handle_mm_fault+0x2e6/0xa20 [ 1910.676386] do_user_addr_fault+0x54a/0x12a0 [ 1910.677038] exc_page_fault+0xa2/0x1a0 [ 1910.677686] ? asm_exc_page_fault+0x8/0x30 [ 1910.678384] asm_exc_page_fault+0x1e/0x30 [ 1910.678975] RIP: 0033:0x7f5a042e4b20 [ 1910.679525] Code: Unable to access opcode bytes at RIP 0x7f5a042e4af6. [ 1910.680563] RSP: 002b:00007ffc289677f8 EFLAGS: 00010246 [ 1910.681529] RAX: 0000000000000000 RBX: 00007f5a058d9140 RCX: 0000000000000100 [ 1910.682549] RDX: 0000000000000000 RSI: 00007f5a058d9120 RDI: 00000000ffffff9c [ 1910.683575] RBP: 00007ffc28967920 R08: 00007f5a058d3f60 R09: 00007ffc28967560 [ 1910.684860] R10: 000000000000001e R11: 0000000000000246 R12: 00007f5a058d9120 [ 1910.685897] R13: 0000000000000000 R14: 0000000000000000 R15: 00007f5a05911080 [ 1910.687022] [ 1910.687644] [ 1910.688251] ============================= [ 1910.689030] [ BUG: Invalid wait context ] [ 1910.689629] 5.16.0-rc6-next-20211222 #1 Tainted: G W [ 1910.690510] ----------------------------- [ 1910.691083] systemd-udevd/10658 is trying to lock: [ 1910.691748] ffff8880181a4830 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_exit_release+0x2d/0x220 [ 1910.693098] other info that might help us debug this: [ 1910.693780] context-{4:4} [ 1910.694161] 3 locks held by systemd-udevd/10658: [ 1910.694846] #0: ffff88800f0f67a0 (mapping.invalidate_lock){++++}-{3:3}, at: filemap_fault+0x151a/0x2130 [ 1910.696214] #1: ffffffff85278f88 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 [ 1910.697586] #2: ffff8880181a3e20 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 [ 1910.698795] stack backtrace: [ 1910.699198] CPU: 1 PID: 10658 Comm: systemd-udevd Tainted: G W 5.16.0-rc6-next-20211222 #1 [ 1910.700513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1910.701918] Call Trace: [ 1910.702233] [ 1910.702509] dump_stack_lvl+0x8b/0xb3 [ 1910.702995] __lock_acquire.cold+0xc8/0x3b4 [ 1910.703581] ? record_print_text.cold+0x11/0x16 [ 1910.704239] ? lock_chain_count+0x20/0x20 [ 1910.704778] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1910.705452] lock_acquire+0x1a2/0x4d0 [ 1910.705926] ? futex_exit_release+0x2d/0x220 [ 1910.706485] ? lock_release+0x6f0/0x6f0 [ 1910.706991] ? dump_stack_lvl+0xab/0xb3 [ 1910.707485] __mutex_lock+0x136/0x1480 [ 1910.708014] ? futex_exit_release+0x2d/0x220 [ 1910.708564] ? futex_exit_release+0x2d/0x220 [ 1910.709154] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 1910.709820] ? find_held_lock+0x2c/0x110 [ 1910.710368] ? lock_release+0x3b2/0x6f0 [ 1910.710892] ? __oom_kill_process+0x33f/0xf90 [ 1910.711476] ? lock_downgrade+0x6d0/0x6d0 [ 1910.712073] ? mark_held_locks+0x9e/0xe0 [ 1910.712654] futex_exit_release+0x2d/0x220 [ 1910.713192] __oom_kill_process+0x373/0xf90 [ 1910.713857] ? mem_cgroup_get_oom_group+0x12f/0x420 [ 1910.714601] oom_kill_process+0xd7/0x5c0 [ 1910.715116] out_of_memory+0x1198/0x1460 [ 1910.715670] ? oom_killer_disable+0x270/0x270 [ 1910.716405] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 [ 1910.717211] ? warn_alloc+0x120/0x120 [ 1910.717782] ? lock_is_held_type+0xd7/0x130 [ 1910.718442] ? prepare_alloc_pages+0x371/0x500 [ 1910.719073] __alloc_pages+0x403/0x4e0 [ 1910.719653] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1910.720559] ? lock_is_held_type+0xd7/0x130 [ 1910.721133] ? __filemap_get_folio+0x2d1/0xfd0 [ 1910.721800] ? lock_downgrade+0x6d0/0x6d0 [ 1910.722394] ? lock_is_held_type+0xd7/0x130 [ 1910.722972] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1910.723693] alloc_pages+0x1a0/0x2f0 [ 1910.724229] __filemap_get_folio+0x65c/0xfd0 [ 1910.724865] ? filemap_read+0xbb0/0xbb0 [ 1910.725413] filemap_fault+0x155a/0x2130 [ 1910.725967] ? read_cache_page_gfp+0x230/0x230 [ 1910.726561] __do_fault+0x113/0x5a0 [ 1910.727045] __handle_mm_fault+0x1325/0x3570 [ 1910.727637] ? lock_is_held_type+0xd7/0x130 [ 1910.728274] ? __pmd_alloc+0x680/0x680 [ 1910.728820] handle_mm_fault+0x2e6/0xa20 [ 1910.729367] do_user_addr_fault+0x54a/0x12a0 [ 1910.729970] exc_page_fault+0xa2/0x1a0 [ 1910.730513] ? asm_exc_page_fault+0x8/0x30 [ 1910.731098] asm_exc_page_fault+0x1e/0x30 [ 1910.731659] RIP: 0033:0x7f5a042e4b20 [ 1910.732184] Code: Unable to access opcode bytes at RIP 0x7f5a042e4af6. [ 1910.733025] RSP: 002b:00007ffc289677f8 EFLAGS: 00010246 [ 1910.733745] RAX: 0000000000000000 RBX: 00007f5a058d9140 RCX: 0000000000000100 [ 1910.734695] RDX: 0000000000000000 RSI: 00007f5a058d9120 RDI: 00000000ffffff9c [ 1910.735714] RBP: 00007ffc28967920 R08: 00007f5a058d3f60 R09: 00007ffc28967560 [ 1910.736760] R10: 000000000000001e R11: 0000000000000246 R12: 00007f5a058d9120 [ 1910.737740] R13: 0000000000000000 R14: 0000000000000000 R15: 00007f5a05911080 [ 1910.738683] [ 1910.739058] Out of memory (oom_kill_allocating_task): Killed process 10658 (systemd-udevd) total-vm:35752kB, anon-rss:10240kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:0 [ 1910.745810] oom_reaper: reaped process 10658 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1910.757641] in:imklog invoked oom-killer: gfp_mask=0x1140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 1910.759235] CPU: 1 PID: 187 Comm: in:imklog Tainted: G W 5.16.0-rc6-next-20211222 #1 [ 1910.760431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1910.761986] Call Trace: [ 1910.762335] [ 1910.762633] dump_stack_lvl+0x8b/0xb3 [ 1910.763128] dump_header+0x106/0x60f [ 1910.763602] oom_kill_process.cold+0x10/0x15 [ 1910.764180] out_of_memory+0x1198/0x1460 [ 1910.764697] ? oom_killer_disable+0x270/0x270 [ 1910.765260] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 [ 1910.766034] ? warn_alloc+0x120/0x120 [ 1910.766516] ? lock_is_held_type+0xd7/0x130 [ 1910.767047] ? prepare_alloc_pages+0x371/0x500 [ 1910.767621] __alloc_pages+0x403/0x4e0 [ 1910.768153] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1910.768901] ? lock_is_held_type+0xd7/0x130 [ 1910.769442] ? __filemap_get_folio+0x2d1/0xfd0 [ 1910.770030] ? lock_downgrade+0x6d0/0x6d0 [ 1910.770564] ? lock_is_held_type+0xd7/0x130 [ 1910.771107] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1910.771861] alloc_pages+0x1a0/0x2f0 [ 1910.772364] __filemap_get_folio+0x65c/0xfd0 [ 1910.772943] ? filemap_read+0xbb0/0xbb0 [ 1910.773450] filemap_fault+0x155a/0x2130 [ 1910.773955] ? read_cache_page_gfp+0x230/0x230 [ 1910.774508] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1910.775154] __do_fault+0x113/0x5a0 [ 1910.775662] __handle_mm_fault+0x1325/0x3570 [ 1910.776316] ? lock_is_held_type+0xd7/0x130 [ 1910.776952] ? __pmd_alloc+0x680/0x680 [ 1910.777620] handle_mm_fault+0x2e6/0xa20 [ 1910.778315] do_user_addr_fault+0x54a/0x12a0 [ 1910.778939] exc_page_fault+0xa2/0x1a0 [ 1910.779439] ? asm_exc_page_fault+0x8/0x30 [ 1910.784112] asm_exc_page_fault+0x1e/0x30 [ 1910.784573] RIP: 0033:0x7efc57fd108c [ 1910.784970] Code: Unable to access opcode bytes at RIP 0x7efc57fd1062. [ 1910.785660] RSP: 002b:00007efc5756d4d0 EFLAGS: 00010246 [ 1910.786212] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007efc57fd108c [ 1910.786960] RDX: 0000000000001fa0 RSI: 00007efc5756dd00 RDI: 0000000000000005 [ 1910.787920] RBP: 00007efc596354c0 R08: 0000000000000000 R09: 00007efc59631e88 [ 1910.788695] R10: a3d70a3d70a3d70b R11: 0000000000000246 R12: 00007efc5756dd00 [ 1910.789452] R13: 0000000000001fa0 R14: 00007efc5756dd00 R15: 00007efc5756dd69 [ 1910.790200] [ 1910.791444] Mem-Info: [ 1910.791718] active_anon:10560 inactive_anon:32168 isolated_anon:0 [ 1910.791718] active_file:20 inactive_file:1 isolated_file:0 [ 1910.791718] unevictable:0 dirty:0 writeback:0 [ 1910.791718] slab_reclaimable:8842 slab_unreclaimable:60178 [ 1910.791718] mapped:69664 shmem:124 pagetables:2074 bounce:0 [ 1910.791718] kernel_misc_reclaimable:0 [ 1910.791718] free:2511 free_pcp:197 free_cma:0 [ 1910.795780] Node 0 active_anon:42240kB inactive_anon:128672kB active_file:80kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278656kB dirty:0kB writeback:0kB shmem:496kB writeback_tmp:0kB kernel_stack:5280kB pagetables:8296kB all_unreclaimable? yes [ 1910.798405] Node 0 DMA free:6488kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1910.801510] lowmem_reserve[]: 0 1617 1617 1617 [ 1910.802166] Node 0 DMA32 free:3556kB boost:2048kB min:7168kB low:8824kB high:10480kB reserved_highatomic:0KB active_anon:42240kB inactive_anon:128652kB active_file:40kB inactive_file:4kB unevictable:0kB writepending:0kB present:2080640kB managed:1660844kB mlocked:0kB bounce:0kB free_pcp:788kB local_pcp:536kB free_cma:0kB [ 1910.806161] lowmem_reserve[]: 0 0 0 0 [ 1910.806720] Node 0 DMA: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (U) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6488kB [ 1910.808981] Node 0 DMA32: 482*4kB (ME) 102*8kB (M) 30*16kB (UM) 16*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3736kB [ 1910.810945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1910.812162] 157 total pagecache pages [ 1910.812678] 0 pages in swap cache [ 1910.813172] Swap cache stats: add 0, delete 0, find 0/0 [ 1910.813935] Free swap = 0kB [ 1910.814344] Total swap = 0kB [ 1910.814760] 524158 pages RAM [ 1910.815188] 0 pages HighMem/MovableOnly [ 1910.815758] 105107 pages reserved [ 1910.816340] Unreclaimable slab info: [ 1910.816877] Name Used Total [ 1910.817641] pid_3 7KB 7KB [ 1910.818407] pid_2 56KB 56KB [ 1910.819179] IEEE-802.15.4-MAC 63KB 63KB [ 1910.819977] IEEE-802.15.4-RAW 63KB 63KB [ 1910.820707] fib6_nodes 28KB 28KB [ 1910.821498] ip6_dst_cache 39KB 48KB [ 1910.822232] PINGv6 63KB 63KB [ 1910.823004] RAWv6 157KB 157KB [ 1910.823780] UDPLITEv6 62KB 62KB [ 1910.824668] UDPv6 62KB 62KB [ 1910.825443] TCPv6 62KB 62KB [ 1910.826253] scsi_sense_cache 8KB 8KB [ 1910.827051] sd_ext_cdb 3KB 3KB [ 1910.827848] virtio_scsi_cmd 16KB 16KB [ 1910.828618] bio-96 7KB 7KB [ 1910.829432] sgpool-128 352KB 535KB [ 1910.830295] sgpool-64 63KB 63KB [ 1910.831120] sgpool-32 78KB 78KB [ 1910.831977] sgpool-16 83KB 127KB [ 1910.832728] sgpool-8 45KB 45KB [ 1910.833560] bio-224 3KB 3KB [ 1910.834322] mqueue_inode_cache 60KB 60KB [ 1910.835072] nfs_commit_data 15KB 15KB [ 1910.835874] nfs_write_data 47KB 47KB [ 1910.836582] jbd2_inode 7KB 7KB [ 1910.837326] ext4_system_zone 7KB 7KB [ 1910.838083] ext4_io_end_vec 7KB 7KB [ 1910.838842] ext4_bio_post_read_ctx 15KB 15KB [ 1910.839626] io_kiocb 56KB 75KB [ 1910.840415] kioctx 31KB 31KB [ 1910.841192] aio_kiocb 7KB 7KB [ 1910.841936] fasync_cache 7KB 7KB [ 1910.842668] pid_namespace 7KB 7KB [ 1910.843415] posix_timers_cache 7KB 7KB [ 1910.844200] rpc_buffers 31KB 31KB [ 1910.844942] rpc_tasks 3KB 3KB [ 1910.845682] UNIX-STREAM 170KB 279KB [ 1910.846447] UNIX 170KB 310KB [ 1910.847198] UDP-Lite 31KB 31KB [ 1910.848016] tcp_bind_bucket 8KB 8KB [ 1910.848745] inet_peer_cache 4KB 4KB [ 1910.849534] ip_fib_trie 8KB 8KB [ 1910.850286] ip_fib_alias 15KB 15KB [ 1910.851027] ip_dst_cache 8KB 8KB [ 1910.851762] RAW 125KB 125KB [ 1910.852607] UDP 220KB 220KB [ 1910.853375] request_sock_TCP 7KB 7KB [ 1910.854140] TCP 58KB 58KB [ 1910.854890] hugetlbfs_inode_cache 31KB 31KB [ 1910.855653] bio-216 11KB 11KB [ 1910.856498] ep_head 8KB 8KB [ 1910.857238] eventpoll_pwq 19KB 19KB [ 1910.857980] eventpoll_epi 43KB 43KB [ 1910.858711] inotify_inode_mark 46KB 46KB [ 1910.859480] request_queue 62KB 62KB [ 1910.860262] blkdev_ioc 8KB 8KB [ 1910.860999] bio-160 36KB 36KB [ 1910.861726] biovec-max 884KB 1011KB [ 1910.862486] biovec-64 157KB 157KB [ 1910.863226] biovec-16 30KB 30KB [ 1910.864017] user_namespace 30KB 30KB [ 1910.864738] uid_cache 7KB 7KB [ 1910.865481] dmaengine-unmap-2 4KB 4KB [ 1910.866224] audit_buffer 7KB 7KB [ 1910.866978] skbuff_fclone_cache 67KB 67KB [ 1910.867764] skbuff_head_cache 390KB 555KB [ 1910.868713] file_lock_cache 43KB 43KB [ 1910.869583] file_lock_ctx 7KB 7KB [ 1910.870358] fsnotify_mark_connector 18KB 36KB [ 1910.871216] net_namespace 93KB 93KB [ 1910.872103] taskstats 30KB 30KB [ 1910.872991] proc_dir_entry 345KB 345KB [ 1910.873790] pde_opener 27KB 27KB [ 1910.874594] seq_file 48KB 48KB [ 1910.875396] sigqueue 47KB 47KB [ 1910.876246] shmem_inode_cache 1442KB 1559KB [ 1910.877084] kernfs_iattrs_cache 231KB 231KB [ 1910.877916] kernfs_node_cache 5268KB 5319KB [ 1910.878695] mnt_cache 212KB 212KB [ 1910.879520] filp 1518KB 1635KB [ 1910.880385] names_cache 12320KB 12775KB [ 1910.881149] hashtab_node 278KB 278KB [ 1910.881933] ebitmap_node 1149KB 1149KB [ 1910.882713] avtab_node 4976KB 4976KB [ 1910.883503] avc_node 31KB 31KB [ 1910.884434] lsm_inode_cache 3278KB 3324KB [ 1910.885307] lsm_file_cache 85KB 128KB [ 1910.886067] key_jar 39KB 39KB [ 1910.886796] uts_namespace 15KB 15KB [ 1910.887621] nsproxy 11KB 11KB [ 1910.888453] vm_area_struct 1111KB 1276KB [ 1910.889221] mm_struct 210KB 409KB [ 1910.890059] fs_cache 48KB 48KB [ 1910.890799] files_cache 147KB 191KB [ 1910.891543] signal_cache 356KB 425KB [ 1910.892339] sighand_cache 390KB 390KB [ 1910.893259] task_struct 1304KB 1578KB [ 1910.894020] cred_jar 132KB 160KB [ 1910.894777] anon_vma_chain 249KB 307KB [ 1910.895556] anon_vma 340KB 340KB [ 1910.896334] pid 58KB 63KB [ 1910.897075] Acpi-Operand 91KB 146KB [ 1910.897982] Acpi-ParseExt 31KB 31KB [ 1910.898712] Acpi-Parse 31KB 47KB [ 1910.899475] Acpi-State 47KB 63KB [ 1910.900303] Acpi-Namespace 28KB 28KB [ 1910.901051] numa_policy 3KB 3KB [ 1910.901815] perf_event 63KB 63KB [ 1910.902564] trace_event_file 171KB 171KB [ 1910.903336] ftrace_event_field 296KB 296KB [ 1910.904131] pool_workqueue 48KB 48KB [ 1910.904878] task_group 16KB 16KB [ 1910.905599] vmap_area 47KB 51KB [ 1910.906340] page->ptl 211KB 252KB [ 1910.907100] kmemleak_scan_area 23KB 23KB [ 1910.908494] kmemleak_object 139999KB 149445KB [ 1910.909278] dma-kmalloc-512 16KB 16KB [ 1910.910057] kmalloc-cg-8k 64KB 64KB [ 1910.910784] kmalloc-cg-4k 680KB 768KB [ 1910.911523] kmalloc-cg-2k 756KB 800KB [ 1910.912324] kmalloc-cg-1k 230KB 256KB [ 1910.913060] kmalloc-cg-512 280KB 304KB [ 1910.913778] kmalloc-cg-256 16KB 16KB [ 1910.914516] kmalloc-cg-192 28KB 28KB [ 1910.915290] kmalloc-cg-128 12KB 12KB [ 1910.916066] kmalloc-cg-96 36KB 36KB [ 1910.916798] kmalloc-cg-64 20KB 20KB [ 1910.917553] kmalloc-cg-32 47KB 72KB [ 1910.918299] kmalloc-cg-16 8KB 8KB [ 1910.919041] kmalloc-cg-8 15KB 15KB [ 1910.919770] kmalloc-8k 5056KB 5216KB [ 1910.920573] kmalloc-4k 6328KB 6656KB [ 1910.921358] kmalloc-2k 4012KB 4352KB [ 1910.922129] kmalloc-1k 3692KB 4640KB [ 1910.922912] kmalloc-512 2601KB 4032KB [ 1910.923674] kmalloc-256 954KB 1048KB [ 1910.924457] kmalloc-192 469KB 508KB [ 1910.925234] kmalloc-128 454KB 600KB [ 1910.925976] kmalloc-96 322KB 544KB [ 1910.926786] kmalloc-64 997KB 1244KB [ 1910.927591] kmalloc-32 724KB 780KB [ 1910.928394] kmalloc-16 319KB 328KB [ 1910.929117] kmalloc-8 265KB 270KB [ 1910.929864] kmem_cache_node 51KB 51KB [ 1910.930578] kmem_cache 78KB 78KB [ 1910.931313] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=187,uid=0 [ 1910.933572] Out of memory (oom_kill_allocating_task): Killed process 182 (rsyslogd) total-vm:220876kB, anon-rss:476kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:0 [ 1910.936861] syz-executor.3: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 1910.938099] oom_reaper: reaped process 182 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1910.938459] CPU: 0 PID: 10665 Comm: syz-executor.3 Tainted: G W 5.16.0-rc6-next-20211222 #1 [ 1910.941026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1910.942712] Call Trace: [ 1910.943146] [ 1910.943490] dump_stack_lvl+0x8b/0xb3 [ 1910.944055] warn_alloc.cold+0x87/0x18d [ 1910.944592] ? zone_watermark_ok_safe+0x240/0x240 [ 1910.945238] ? schedule_timeout+0x1ce/0x480 [ 1910.945783] ? usleep_range_state+0x1b0/0x1b0 [ 1910.946507] ? trace_raw_output_tick_stop+0x130/0x130 [ 1910.947237] ? sky2_probe.cold+0xd9e/0x10e3 [ 1910.947900] ? del_timer_sync+0x1cd/0x260 [ 1910.948462] __alloc_pages_slowpath.constprop.0+0x1a21/0x1f10 [ 1910.949326] ? warn_alloc+0x120/0x120 [ 1910.949873] ? lock_is_held_type+0xd7/0x130 [ 1910.950431] ? prepare_alloc_pages+0x371/0x500 [ 1910.951063] ? lock_is_held_type+0xd7/0x130 [ 1910.951638] __alloc_pages+0x403/0x4e0 [ 1910.952189] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1910.952953] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1910.953754] ? __sanitizer_cov_trace_pc+0x7/0x60 [ 1910.954433] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1910.955125] alloc_pages+0x1a0/0x2f0 [ 1910.955637] relay_open_buf.part.0+0x2a4/0xc00 [ 1910.956109] systemd-journal invoked oom-killer: gfp_mask=0x1140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=-250 [ 1910.956299] relay_open+0x4ec/0x970 [ 1910.958328] do_blk_trace_setup+0x4c3/0xc80 [ 1910.958873] ? _copy_from_user+0x139/0x170 [ 1910.959448] __blk_trace_setup+0xca/0x180 [ 1910.959986] ? do_blk_trace_setup+0xc80/0xc80 [ 1910.960533] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1910.961282] blk_trace_setup+0x43/0x60 [ 1910.961848] sg_ioctl+0x6b1/0x2830 [ 1910.962308] ? selinux_file_ioctl+0x418/0x5d0 [ 1910.962921] ? selinux_file_ioctl+0x10f/0x5d0 [ 1910.963533] ? lock_downgrade+0x6d0/0x6d0 [ 1910.964124] ? sg_write+0x110/0x110 [ 1910.964652] ? __fget_files+0x28d/0x470 [ 1910.965168] ? __x64_sys_ioctl+0x97/0x210 [ 1910.965723] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1910.966450] ? sg_write+0x110/0x110 [ 1910.966941] __x64_sys_ioctl+0x196/0x210 [ 1910.967487] do_syscall_64+0x3b/0x90 [ 1910.968029] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1910.968704] RIP: 0033:0x7fa35deb5b19 [ 1910.969195] Code: Unable to access opcode bytes at RIP 0x7fa35deb5aef. [ 1910.970055] RSP: 002b:00007fa35b3e9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1910.971059] RAX: ffffffffffffffda RBX: 00007fa35dfc90e0 RCX: 00007fa35deb5b19 [ 1910.972037] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000007 [ 1910.973002] RBP: 00007fa35df0ff6d R08: 0000000000000000 R09: 0000000000000000 [ 1910.973965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1910.974920] R13: 00007fff26ce91ef R14: 00007fa35b3e9300 R15: 0000000000022000 [ 1910.975881] [ 1910.976186] CPU: 1 PID: 111 Comm: systemd-journal Tainted: G W 5.16.0-rc6-next-20211222 #1 [ 1910.976262] Mem-Info: [ 1910.977601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1910.977618] Call Trace: [ 1910.978192] active_anon:10560 inactive_anon:31916 isolated_anon:0 [ 1910.978192] active_file:20 inactive_file:1 isolated_file:0 [ 1910.978192] unevictable:0 dirty:0 writeback:0 [ 1910.978192] slab_reclaimable:8842 slab_unreclaimable:60178 [ 1910.978192] mapped:69664 shmem:124 pagetables:2074 bounce:0 [ 1910.978192] kernel_misc_reclaimable:0 [ 1910.978192] free:2511 free_pcp:468 free_cma:0 [ 1910.979442] [ 1910.979452] dump_stack_lvl+0x8b/0xb3 [ 1910.979482] dump_header+0x106/0x60f [ 1910.979503] oom_kill_process.cold+0x10/0x15 [ 1910.979911] Node 0 active_anon:42240kB inactive_anon:127664kB active_file:80kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278656kB dirty:0kB writeback:0kB shmem:496kB writeback_tmp:0kB kernel_stack:5216kB pagetables:8296kB all_unreclaimable? yes [ 1910.984626] out_of_memory+0x1198/0x1460 [ 1910.984667] ? oom_killer_disable+0x270/0x270 [ 1910.985005] Node 0 [ 1910.985509] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 [ 1910.985986] DMA free:6488kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1910.986612] ? warn_alloc+0x120/0x120 [ 1910.989817] lowmem_reserve[]: [ 1910.990469] ? lock_is_held_type+0xd7/0x130 [ 1910.991087] 0 [ 1910.991416] ? prepare_alloc_pages+0x371/0x500 [ 1910.992230] 1617 [ 1910.995932] __alloc_pages+0x403/0x4e0 [ 1910.996621] 1617 [ 1910.997083] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1910.997659] 1617 [ 1910.997922] ? lock_is_held_type+0xd7/0x130 [ 1910.998531] [ 1910.998869] ? __filemap_get_folio+0x2d1/0xfd0 [ 1910.999379] Node 0 [ 1910.999680] ? lock_downgrade+0x6d0/0x6d0 [ 1911.000484] DMA32 free:3556kB boost:2048kB min:7168kB low:8824kB high:10480kB reserved_highatomic:0KB active_anon:42240kB inactive_anon:127644kB active_file:40kB inactive_file:4kB unevictable:0kB writepending:0kB present:2080640kB managed:1660844kB mlocked:0kB bounce:0kB free_pcp:1872kB local_pcp:316kB free_cma:0kB [ 1911.000774] ? lock_is_held_type+0xd7/0x130 [ 1911.001431] lowmem_reserve[]: [ 1911.001692] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1911.002293] 0 [ 1911.002604] alloc_pages+0x1a0/0x2f0 [ 1911.003158] 0 [ 1911.007092] __filemap_get_folio+0x65c/0xfd0 [ 1911.007132] ? filemap_read+0xbb0/0xbb0 [ 1911.007745] 0 [ 1911.008317] filemap_fault+0x155a/0x2130 [ 1911.009109] 0 [ 1911.009353] ? read_cache_page_gfp+0x230/0x230 [ 1911.009865] [ 1911.010136] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1911.010713] Node 0 [ 1911.011295] __do_fault+0x113/0x5a0 [ 1911.011324] __handle_mm_fault+0x1325/0x3570 [ 1911.011586] DMA: [ 1911.012197] ? lock_is_held_type+0xd7/0x130 [ 1911.012460] 2*4kB [ 1911.013070] ? __pmd_alloc+0x680/0x680 [ 1911.013326] (UM) [ 1911.014030] handle_mm_fault+0x2e6/0xa20 [ 1911.014326] 2*8kB [ 1911.014835] do_user_addr_fault+0x54a/0x12a0 [ 1911.015457] (UM) [ 1911.015748] exc_page_fault+0xa2/0x1a0 [ 1911.016399] 2*16kB [ 1911.016671] ? asm_exc_page_fault+0x8/0x30 [ 1911.017163] (UM) [ 1911.017422] asm_exc_page_fault+0x1e/0x30 [ 1911.017977] 1*32kB [ 1911.018256] RIP: 0033:0x7f616cd9d116 [ 1911.018783] (U) [ 1911.019069] Code: Unable to access opcode bytes at RIP 0x7f616cd9d0ec. [ 1911.019077] RSP: 002b:00007ffdb556fd90 EFLAGS: 00010293 [ 1911.019608] 2*64kB [ 1911.019954] [ 1911.019960] RAX: 0000000000000001 RBX: 00007f616e3a5360 RCX: 00007f616cd9d116 [ 1911.019971] RDX: 0000000000000014 RSI: 00007f616e3abb70 RDI: 0000000000000008 [ 1911.020534] (UM) [ 1911.020804] RBP: ffffffffffffffff R08: 0000000000000000 R09: 00007ffdb55ea080 [ 1911.021322] 1*128kB [ 1911.021614] R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001 [ 1911.022123] (M) [ 1911.022371] R13: 0000000000000014 R14: 0000000000000000 R15: 0000000000000000 [ 1911.023339] 2*256kB [ 1911.024119] [ 1911.025343] Mem-Info: [ 1911.025660] (UM) [ 1911.026811] active_anon:10560 inactive_anon:31916 isolated_anon:0 [ 1911.026811] active_file:20 inactive_file:1 isolated_file:0 [ 1911.026811] unevictable:0 dirty:0 writeback:0 [ 1911.026811] slab_reclaimable:8842 slab_unreclaimable:60178 [ 1911.026811] mapped:69664 shmem:124 pagetables:2074 bounce:0 [ 1911.026811] kernel_misc_reclaimable:0 [ 1911.026811] free:2511 free_pcp:468 free_cma:0 [ 1911.027002] 1*512kB [ 1911.028102] Node 0 active_anon:42240kB inactive_anon:127664kB active_file:80kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278656kB dirty:0kB writeback:0kB shmem:496kB writeback_tmp:0kB kernel_stack:5216kB pagetables:8296kB all_unreclaimable? yes [ 1911.028396] (M) 1*1024kB [ 1911.029679] Node 0 [ 1911.029962] (M) [ 1911.031008] DMA free:6488kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1911.031288] 0*2048kB [ 1911.031607] lowmem_reserve[]: [ 1911.031958] 1*4096kB [ 1911.032271] 0 [ 1911.037057] (M) = 6488kB [ 1911.037464] 1617 [ 1911.040716] Node 0 DMA32: 482*4kB (ME) 102*8kB [ 1911.041223] 1617 [ 1911.041517] (M) [ 1911.041793] 1617 [ 1911.045114] 30*16kB [ 1911.045527] [ 1911.045975] (UM) [ 1911.046314] Node 0 [ 1911.046537] 16*32kB [ 1911.046965] DMA32 free:3556kB boost:2048kB min:7168kB low:8824kB high:10480kB reserved_highatomic:0KB active_anon:42240kB inactive_anon:127644kB active_file:40kB inactive_file:4kB unevictable:0kB writepending:0kB present:2080640kB managed:1660844kB mlocked:0kB bounce:0kB free_pcp:1872kB local_pcp:1556kB free_cma:0kB [ 1911.047268] (UM) [ 1911.047999] lowmem_reserve[]: 0 [ 1911.048284] 0*64kB [ 1911.048568] 0 [ 1911.048854] 0*128kB 0*256kB [ 1911.049224] 0 [ 1911.049438] 0*512kB [ 1911.049734] 0 [ 1911.050075] 0*1024kB 0*2048kB [ 1911.050399] [ 1911.054067] 0*4096kB = 3736kB [ 1911.054084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1911.054100] 157 total pagecache pages [ 1911.054106] 0 pages in swap cache [ 1911.054110] Swap cache stats: add 0, delete 0, find 0/0 [ 1911.054446] Node 0 [ 1911.054879] Free swap = 0kB [ 1911.054886] Total swap = 0kB [ 1911.055190] DMA: [ 1911.055423] 524158 pages RAM [ 1911.055933] 2*4kB [ 1911.056194] 0 pages HighMem/MovableOnly [ 1911.056537] (UM) [ 1911.056779] 105107 pages reserved [ 1911.057268] 2*8kB (UM) 2*16kB (UM) 1*32kB (U) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6488kB [ 1911.066458] Node 0 DMA32: 517*4kB (UME) 119*8kB (UM) 49*16kB (UM) 32*32kB (UM) 10*64kB (U) 12*128kB (U) 16*256kB (U) 14*512kB (U) 7*1024kB (U) 2*2048kB (U) 13*4096kB (U) = 82780kB [ 1911.068816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1911.069989] 157 total pagecache pages [ 1911.070523] 0 pages in swap cache [ 1911.071009] Swap cache stats: add 0, delete 0, find 0/0 [ 1911.071715] Free swap = 0kB [ 1911.072163] Total swap = 0kB [ 1911.072566] 524158 pages RAM [ 1911.072972] 0 pages HighMem/MovableOnly [ 1911.073479] 105107 pages reserved [ 1911.073945] Unreclaimable slab info: [ 1911.074429] Name Used Total [ 1911.075162] pid_3 7KB 7KB [ 1911.075928] pid_2 56KB 56KB [ 1911.076651] IEEE-802.15.4-MAC 63KB 63KB [ 1911.077350] IEEE-802.15.4-RAW 63KB 63KB [ 1911.078074] fib6_nodes 28KB 28KB [ 1911.078776] ip6_dst_cache 39KB 48KB [ 1911.079499] PINGv6 63KB 63KB [ 1911.080242] RAWv6 157KB 157KB [ 1911.080976] UDPLITEv6 62KB 62KB [ 1911.081745] UDPv6 62KB 62KB [ 1911.082503] TCPv6 62KB 62KB [ 1911.083460] scsi_sense_cache 8KB 8KB [ 1911.084405] sd_ext_cdb 3KB 3KB [ 1911.085157] virtio_scsi_cmd 16KB 16KB [ 1911.085907] bio-96 7KB 7KB [ 1911.086653] sgpool-128 352KB 535KB [ 1911.087470] sgpool-64 63KB 63KB [ 1911.088263] sgpool-32 78KB 78KB [ 1911.088980] sgpool-16 83KB 127KB [ 1911.089642] sgpool-8 45KB 45KB [ 1911.090353] bio-224 3KB 3KB [ 1911.091081] mqueue_inode_cache 60KB 60KB [ 1911.091902] nfs_commit_data 15KB 15KB [ 1911.092656] nfs_write_data 47KB 47KB [ 1911.093583] jbd2_inode 7KB 7KB [ 1911.094407] ext4_system_zone 7KB 7KB [ 1911.095137] ext4_io_end_vec 7KB 7KB [ 1911.095940] ext4_bio_post_read_ctx 15KB 15KB [ 1911.096698] io_kiocb 56KB 75KB [ 1911.097459] kioctx 31KB 31KB [ 1911.098247] aio_kiocb 7KB 7KB [ 1911.099001] fasync_cache 7KB 7KB [ 1911.099718] pid_namespace 7KB 7KB [ 1911.100486] posix_timers_cache 7KB 7KB [ 1911.101219] rpc_buffers 31KB 31KB [ 1911.101956] rpc_tasks 3KB 3KB [ 1911.102709] UNIX-STREAM 170KB 279KB [ 1911.103444] UNIX 170KB 310KB [ 1911.104284] UDP-Lite 31KB 31KB [ 1911.105034] tcp_bind_bucket 8KB 8KB [ 1911.105798] inet_peer_cache 4KB 4KB [ 1911.106617] ip_fib_trie 8KB 8KB [ 1911.107420] ip_fib_alias 15KB 15KB [ 1911.108273] ip_dst_cache 8KB 8KB [ 1911.109024] RAW 125KB 125KB [ 1911.109750] UDP 220KB 220KB [ 1911.110551] request_sock_TCP 7KB 7KB [ 1911.111304] TCP 58KB 58KB [ 1911.112084] hugetlbfs_inode_cache 31KB 31KB [ 1911.112935] bio-216 11KB 11KB [ 1911.113698] ep_head 8KB 8KB [ 1911.114492] eventpoll_pwq 19KB 19KB [ 1911.115323] eventpoll_epi 43KB 43KB [ 1911.116149] inotify_inode_mark 46KB 46KB [ 1911.116933] request_queue 62KB 62KB [ 1911.117692] blkdev_ioc 8KB 8KB [ 1911.118462] bio-160 36KB 36KB [ 1911.119233] biovec-max 884KB 1011KB [ 1911.120022] biovec-64 157KB 157KB [ 1911.120771] biovec-16 30KB 30KB [ 1911.121540] user_namespace 30KB 30KB [ 1911.122291] uid_cache 7KB 7KB [ 1911.123028] dmaengine-unmap-2 4KB 4KB [ 1911.123772] audit_buffer 7KB 7KB [ 1911.124538] skbuff_fclone_cache 67KB 67KB [ 1911.125315] skbuff_head_cache 407KB 555KB [ 1911.126069] file_lock_cache 43KB 43KB [ 1911.126822] file_lock_ctx 7KB 7KB [ 1911.127569] fsnotify_mark_connector 18KB 36KB [ 1911.128450] net_namespace 93KB 93KB [ 1911.129219] taskstats 30KB 30KB [ 1911.129959] proc_dir_entry 345KB 345KB [ 1911.130682] pde_opener 27KB 27KB [ 1911.131446] seq_file 48KB 48KB [ 1911.132224] sigqueue 47KB 47KB [ 1911.132971] shmem_inode_cache 1442KB 1559KB [ 1911.133709] kernfs_iattrs_cache 231KB 231KB [ 1911.134511] kernfs_node_cache 5268KB 5319KB [ 1911.135271] mnt_cache 212KB 212KB [ 1911.136106] filp 1518KB 1635KB [ 1911.136888] names_cache 12320KB 12775KB [ 1911.137616] hashtab_node 278KB 278KB [ 1911.138372] ebitmap_node 1149KB 1149KB [ 1911.139129] avtab_node 4976KB 4976KB [ 1911.139926] avc_node 31KB 31KB [ 1911.140669] lsm_inode_cache 3278KB 3324KB [ 1911.141431] lsm_file_cache 85KB 128KB [ 1911.142176] key_jar 39KB 39KB [ 1911.142913] uts_namespace 15KB 15KB [ 1911.143637] nsproxy 11KB 11KB [ 1911.144438] vm_area_struct 1111KB 1276KB [ 1911.145169] mm_struct 210KB 409KB [ 1911.145901] fs_cache 48KB 48KB [ 1911.146631] files_cache 147KB 191KB [ 1911.147389] signal_cache 356KB 425KB [ 1911.148166] sighand_cache 390KB 390KB [ 1911.148900] task_struct 1304KB 1578KB [ 1911.149675] cred_jar 132KB 160KB [ 1911.150411] anon_vma_chain 249KB 307KB [ 1911.151146] anon_vma 340KB 340KB [ 1911.151938] pid 58KB 63KB [ 1911.152672] Acpi-Operand 91KB 146KB [ 1911.153466] Acpi-ParseExt 31KB 31KB [ 1911.154256] Acpi-Parse 31KB 47KB [ 1911.155040] Acpi-State 47KB 63KB [ 1911.155790] Acpi-Namespace 28KB 28KB [ 1911.156612] numa_policy 3KB 3KB [ 1911.157407] perf_event 63KB 63KB [ 1911.158175] trace_event_file 171KB 171KB [ 1911.158961] ftrace_event_field 296KB 296KB [ 1911.159744] pool_workqueue 48KB 48KB [ 1911.160596] task_group 16KB 16KB [ 1911.161404] vmap_area 47KB 51KB [ 1911.162192] page->ptl 211KB 252KB [ 1911.163058] kmemleak_scan_area 23KB 23KB [ 1911.164765] kmemleak_object 140059KB 149445KB [ 1911.165560] dma-kmalloc-512 16KB 16KB [ 1911.166343] kmalloc-cg-8k 64KB 64KB [ 1911.167106] kmalloc-cg-4k 680KB 768KB [ 1911.167916] kmalloc-cg-2k 756KB 800KB [ 1911.168688] kmalloc-cg-1k 230KB 256KB [ 1911.169471] kmalloc-cg-512 280KB 304KB [ 1911.170586] kmalloc-cg-256 16KB 16KB [ 1911.171451] kmalloc-cg-192 28KB 28KB [ 1911.172909] kmalloc-cg-128 12KB 12KB [ 1911.174251] kmalloc-cg-96 36KB 36KB [ 1911.175125] kmalloc-cg-64 20KB 20KB [ 1911.176088] kmalloc-cg-32 47KB 72KB [ 1911.177055] kmalloc-cg-16 8KB 8KB [ 1911.178016] kmalloc-cg-8 15KB 15KB [ 1911.178865] kmalloc-8k 5056KB 5216KB [ 1911.179614] kmalloc-4k 6328KB 6656KB [ 1911.180582] kmalloc-2k 4012KB 4352KB [ 1911.181553] kmalloc-1k 3692KB 4640KB [ 1911.182374] kmalloc-512 2680KB 4032KB [ 1911.183142] kmalloc-256 954KB 1048KB [ 1911.184022] kmalloc-192 469KB 508KB [ 1911.184815] kmalloc-128 454KB 600KB [ 1911.185632] kmalloc-96 322KB 544KB [ 1911.186541] kmalloc-64 997KB 1244KB [ 1911.187456] kmalloc-32 724KB 780KB [ 1911.188383] kmalloc-16 319KB 328KB [ 1911.189121] kmalloc-8 265KB 270KB [ 1911.189909] kmem_cache_node 51KB 51KB [ 1911.190669] kmem_cache 78KB 78KB [ 1911.191426] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=111,uid=0 [ 1911.193912] Out of memory (oom_kill_allocating_task): Killed process 111 (systemd-journal) total-vm:31880kB, anon-rss:940kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:72kB oom_score_adj:-250 [ 1911.199966] oom_reaper: reaped process 111 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:4kB [ 1911.246799] systemd[1]: rsyslog.service: A process of this unit has been killed by the OOM killer. [ 1911.249447] systemd[1]: systemd-udevd.service: A process of this unit has been killed by the OOM killer. [ 1911.257077] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1911.260412] systemd[1]: rsyslog.service: Failed with result 'oom-kill'. [ 1911.281493] systemd[1]: rsyslog.service: Consumed 1.274s CPU time. [ 1911.289377] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1911.294868] systemd[1]: systemd-journald.service: Failed with result 'oom-kill'. [ 1911.307537] systemd[1]: systemd-journald.service: Consumed 4.234s CPU time. [ 1911.318955] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [ 1911.342113] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1911.425757] systemd[1]: systemd-udevd.service: Failed with result 'oom-kill'. [ 1911.440256] systemd[1]: systemd-udevd.service: Consumed 1min 21.604s CPU time. [ 1911.445302] systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 1. [ 1911.447246] systemd[1]: systemd-udevd.service: Scheduled restart job, restart counter is at 1. [ 1911.448769] systemd[1]: Stopped System Logging Service. [ 1911.449798] systemd[1]: rsyslog.service: Consumed 1.274s CPU time. [ 1911.480509] systemd[1]: Starting System Logging Service... [ 1911.481490] systemd[1]: Stopped Rule-based Manager for Device Events and Files. [ 1911.483193] systemd[1]: systemd-udevd.service: Consumed 1min 21.604s CPU time. [ 1911.509147] systemd[1]: Starting Rule-based Manager for Device Events and Files... [ 1911.522225] systemd[1]: systemd-journal-flush.service: Succeeded. [ 1911.532983] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1911.534921] systemd[1]: Stopped Journal Service. [ 1911.536082] systemd[1]: systemd-journald.service: Consumed 4.234s CPU time. [ 1911.562247] systemd[1]: Starting Journal Service... [ 1911.591125] systemd[1]: Started System Logging Service. [ 1911.795369] systemd-journald[10721]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1911.859202] systemd[1]: Started Rule-based Manager for Device Events and Files. [ 1912.175428] systemd[1]: Started Journal Service. [ 1912.266629] systemd-journald[10721]: Received client request to flush runtime journal. VM DIAGNOSIS: 09:00:22 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88806ce38800 RCX=1ffffffff09df514 RDX=1ffff1100d9c7104 RSI=0000000000000002 RDI=ffff88806ce38820 RBP=0000000000000000 RSP=ffff88801705f158 R8 =0000000000000000 R9 =ffffffff858beb57 R10=fffffbfff0b17d6a R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=ffffffff85201cc0 R15=0000000000000000 RIP=ffffffff812fc7ee RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa35b3e9700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000004666e0 CR3=000000003f822000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000200030000 000000005fc7099f YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0041ed00009bc900 0000000000000000 YMM06=0000000000000000 0000000000000000 c7099f5fc7099f5f c7099f0000040000 YMM07=0000000000000000 0000000000000000 0800000000000200 030000000000005f YMM08=0000000000000000 0000000000000000 7ac65e0a50637b9e ba99428585190688 YMM09=0000000000000000 0000000000000000 bd7a5bd306ebecbb 2ba7d33218630b08 YMM10=0000000000000000 0000000000000000 d7db9975911fbf0e c19fabf600feee38 YMM11=0000000000000000 0000000000000000 09f1c9be09c72527 fc8b2b8340d68683 YMM12=0000000000000000 0000000000000000 5375be7c04d0cefb 2e8f3e060d1832f6 YMM13=0000000000000000 0000000000000000 000000c003558510 000000c0035584e0 YMM14=0000000000000000 0000000000000000 000000c003558570 000000c003558540 YMM15=0000000000000000 0000000000000000 000000c0035585d0 000000c0035585a0 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8236c5ec RDI=ffffffff87389b40 RBP=ffffffff87389b00 RSP=ffff88803f50ef68 R8 =0000000000000083 R9 =0000000000000065 R10=ffffffff823533ab R11=000000000000000a R12=0000000000000020 R13=fffffbfff0e713b3 R14=fffffbfff0e7136a R15=dffffc0000000000 RIP=ffffffff8236c640 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5a03e308c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5a042e4af6 CR3=00000000372d6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4172a29a00000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000