004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:50:27 executing program 0: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0x0, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:50:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) 14:50:27 executing program 1: syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:50:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:50:27 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x0, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:50:27 executing program 4: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0x0, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1167.780428] loop1: detected capacity change from 0 to 32256 [ 1167.789738] loop2: detected capacity change from 0 to 262144 [ 1167.797857] loop7: detected capacity change from 0 to 262144 [ 1167.807621] udc-core: couldn't find an available UDC or it's busy [ 1167.809092] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1167.830357] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1167.832284] EXT4-fs (loop7): group descriptors corrupted! 14:50:27 executing program 1: syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:50:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:50:27 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:50:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) [ 1167.936383] loop1: detected capacity change from 0 to 32256 14:50:27 executing program 0: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0x0, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:50:27 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x0, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1167.971383] loop7: detected capacity change from 0 to 262144 [ 1167.975823] loop2: detected capacity change from 0 to 16896 [ 1167.998220] loop5: detected capacity change from 0 to 262144 [ 1168.012808] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (8 blocks) [ 1168.016995] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1168.018923] EXT4-fs (loop7): group descriptors corrupted! [ 1168.038131] EXT4-fs (loop5): unsupported inode size: 0 [ 1168.039383] EXT4-fs (loop5): blocksize: 2048 14:50:41 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) io_uring_enter(r1, 0x47ae, 0x82aa, 0x3, &(0x7f0000000140), 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) stat(0x0, &(0x7f0000000180)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:50:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) 14:50:41 executing program 0: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0x0, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:50:41 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:50:41 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:50:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:50:41 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x0, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:50:41 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1182.121591] udc-core: couldn't find an available UDC or it's busy [ 1182.122618] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1182.147569] loop2: detected capacity change from 0 to 16896 [ 1182.153695] loop5: detected capacity change from 0 to 262144 [ 1182.159672] loop1: detected capacity change from 0 to 32256 [ 1182.165406] loop7: detected capacity change from 0 to 262144 [ 1182.171032] EXT4-fs (loop5): unsupported inode size: 0 [ 1182.171983] EXT4-fs (loop5): blocksize: 2048 14:50:41 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:50:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) [ 1182.197982] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (8 blocks) [ 1182.216470] loop5: detected capacity change from 0 to 262144 [ 1182.222999] EXT4-fs (loop5): unsupported inode size: 0 [ 1182.223072] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1182.223797] EXT4-fs (loop5): blocksize: 2048 [ 1182.227333] EXT4-fs (loop7): group descriptors corrupted! 14:50:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) 14:50:58 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:50:58 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) tee(0xffffffffffffffff, r0, 0x1, 0x6) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072000000000000000028a97dfeb6c046df6f28f96b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffffffffffff00000500"/256]) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @empty}, &(0x7f0000000200)=0xc) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000038c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x541b, 0x0) close_range(r3, r4, 0x2) fallocate(r2, 0x0, 0x0, 0x1000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x2) sendfile(r5, r6, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) 14:50:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:50:58 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:50:58 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0x0, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:50:58 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 14:50:58 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1198.892481] loop5: detected capacity change from 0 to 262144 [ 1198.899258] EXT4-fs (loop5): unsupported inode size: 0 [ 1198.900523] EXT4-fs (loop5): blocksize: 2048 [ 1198.902292] udc-core: couldn't find an available UDC or it's busy [ 1198.903837] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1198.931117] loop1: detected capacity change from 0 to 32256 14:50:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) [ 1198.963713] loop7: detected capacity change from 0 to 262144 [ 1198.977105] loop2: detected capacity change from 0 to 16896 14:50:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000002880), 0x4) ftruncate(r0, 0x1000004) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = dup2(r3, r3) write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12d) openat(r4, &(0x7f0000000040)='./file0\x00', 0x282c00, 0x80) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xbc, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1410, 0x10000000038, 0xa, 0x5, 0x111, 0xffff, 0x0, 0x0, 0x1f, 0x0, 0x9}, 0x0, 0xb, r2, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0)) [ 1199.006097] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (8 blocks) [ 1199.033592] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1199.036030] EXT4-fs (loop7): group descriptors corrupted! 14:50:58 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1199.067679] loop5: detected capacity change from 0 to 262144 [ 1199.100102] EXT4-fs (loop5): unsupported inode size: 0 [ 1199.101625] EXT4-fs (loop5): blocksize: 2048 14:50:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000080)) 14:50:58 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0x0, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1199.155011] loop1: detected capacity change from 0 to 32256 14:50:58 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:50:58 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:50:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) 14:50:58 executing program 1: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:50:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fcntl$dupfd(r0, 0x0, r0) recvmmsg(r0, &(0x7f00000031c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f00000000c0)=""/152, 0x98}, {&(0x7f0000000180)=""/26, 0x1a}, {&(0x7f00000001c0)=""/228, 0xe4}, {&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000003c0)=""/128, 0x80}], 0x6, &(0x7f00000004c0)=""/5, 0x5}, 0x519}, {{&(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/157, 0x9d}, {&(0x7f0000001640)=""/16, 0x10}, {&(0x7f0000001680)=""/127, 0x7f}], 0x4, &(0x7f0000001740)=""/195, 0xc3}, 0x9}, {{&(0x7f0000001840)=@ax25={{0x3, @netrom}, [@null, @rose, @null, @remote, @rose, @remote, @netrom, @default]}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000018c0)=""/130, 0x82}, {&(0x7f0000001980)=""/128, 0x80}, {&(0x7f0000001a00)=""/238, 0xee}, {&(0x7f0000001b00)=""/97, 0x61}], 0x4}, 0x31e}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/119, 0x77}, {&(0x7f0000001c40)=""/73, 0x49}], 0x2, &(0x7f0000001d00)=""/34, 0x22}, 0x77a}, {{&(0x7f0000001e00)=@phonet, 0x80, &(0x7f0000003100)=[{&(0x7f0000001e80)=""/186, 0xba}, {&(0x7f0000001f40)=""/89, 0x59}, {&(0x7f0000001fc0)=""/111, 0x6f}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/158, 0x9e}, {&(0x7f0000001d40)=""/44, 0x2c}], 0x6, &(0x7f0000003180)=""/28, 0x1c}, 0x8000}], 0x5, 0x2103, &(0x7f0000003300)={0x77359400}) unshare(0x28020600) r1 = semget$private(0x0, 0x4, 0x100) unshare(0x10000000) r2 = fork() tkill(r2, 0x26) semctl$IPC_RMID(r1, 0x0, 0x0) getpgrp(r2) semtimedop(0xffffffffffffffff, &(0x7f0000003340)=[{0x3, 0x9e7, 0x1800}], 0x1, &(0x7f0000003380)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x48020200) [ 1199.320864] loop1: detected capacity change from 0 to 32256 [ 1199.363098] loop7: detected capacity change from 0 to 262144 [ 1199.414807] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1199.416875] EXT4-fs (loop7): group descriptors corrupted! 14:51:11 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000008c0)}, 0x840, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) sendmsg$inet(r0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r3, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000240)='./file0/../file0\x00', 0x200, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_cache\x00') syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) unshare(0x48020200) 14:51:11 executing program 4: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x53f2, &(0x7f0000000480)={0x0, 0xdb06, 0x8, 0x9, 0x3d7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r3, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x3, &(0x7f0000000580)="dfe60d6717524a47c4140ed851cbfbdb0b12a35e5bf6989b29d4332b2e1801ea3737131459d4f886ffef934d2c37ae08eb84429ba2db8029c7a65ca2b1b51a32838c333ed21a2c1dd2db26f881ca009f5f2f400a382e1385714d9191134b41c5dbc8e24e7c8e07bce1d3e6635db34c379b60f0653745b75a5962c61f0ac7c92d696da4cce9bdb8daa100b43fa47e04ecd023fbc4c89bd245a3cdcffb7e403b043f0875efcd3f2c939092f57acde2b1e4b8f6eedbe7b4a8d55aedfc7429315b9304615391ae6e7d37d722fb67c613f7c3a3a220ff224bd32adc619ecc32149f8feb", 0xffffff01, 0x0, 0x0, {0x3}}, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4000, @fd, 0x8000, 0x3cf, 0x7, 0x2, 0xd204549ccea66f9e}, 0x81) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x50, r5, 0x8000000) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000240)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:51:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) 14:51:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000080)) 14:51:11 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r2, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r5}) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{r3, r4+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:51:11 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0x0, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:51:11 executing program 1: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:51:11 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1212.139159] loop1: detected capacity change from 0 to 32256 [ 1212.148719] loop5: detected capacity change from 0 to 262144 [ 1212.151869] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1212.162485] loop7: detected capacity change from 0 to 262144 14:51:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000080)) 14:51:11 executing program 1: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1212.191649] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1212.193811] EXT4-fs (loop7): group descriptors corrupted! 14:51:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) [ 1212.221326] loop5: detected capacity change from 0 to 262144 [ 1212.263169] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 14:51:11 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1212.317404] loop7: detected capacity change from 0 to 262144 14:51:11 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0x0, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:51:11 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r2, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r5}) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{r3, r4+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:51:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000080)) 14:51:11 executing program 4: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x53f2, &(0x7f0000000480)={0x0, 0xdb06, 0x8, 0x9, 0x3d7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r3, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x3, &(0x7f0000000580)="dfe60d6717524a47c4140ed851cbfbdb0b12a35e5bf6989b29d4332b2e1801ea3737131459d4f886ffef934d2c37ae08eb84429ba2db8029c7a65ca2b1b51a32838c333ed21a2c1dd2db26f881ca009f5f2f400a382e1385714d9191134b41c5dbc8e24e7c8e07bce1d3e6635db34c379b60f0653745b75a5962c61f0ac7c92d696da4cce9bdb8daa100b43fa47e04ecd023fbc4c89bd245a3cdcffb7e403b043f0875efcd3f2c939092f57acde2b1e4b8f6eedbe7b4a8d55aedfc7429315b9304615391ae6e7d37d722fb67c613f7c3a3a220ff224bd32adc619ecc32149f8feb", 0xffffff01, 0x0, 0x0, {0x3}}, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4000, @fd, 0x8000, 0x3cf, 0x7, 0x2, 0xd204549ccea66f9e}, 0x81) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x50, r5, 0x8000000) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000240)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1212.372765] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1212.373949] EXT4-fs (loop7): group descriptors corrupted! [ 1212.376063] loop1: detected capacity change from 0 to 32256 [ 1212.380106] loop2: detected capacity change from 0 to 262144 14:51:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) [ 1212.433293] loop5: detected capacity change from 0 to 262144 [ 1212.443121] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 14:51:11 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r2, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r5}) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{r3, r4+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:51:11 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1212.456083] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1212.460510] EXT4-fs (loop2): get root inode failed [ 1212.461664] EXT4-fs (loop2): mount failed 14:51:11 executing program 0: unshare(0x2a040600) unshare(0x60020000) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x8010, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)="e8925e209cddad5b77e884ac9be608a17a97aa351d34da49e2823dbcdd8c04381c5376fece45836ee749dbc82cc1a5668342823a4d70d740bdb6f3dc00050e8b50d5424fb2623936b0b5f21cb5fa6f94317465919da856b29bf2b8aebf079fb4fa5b440b4e6473d8bdcc35f18993eeff67532054b83f94d90a24", 0x7a, 0x880, 0x0, {0x0, r4}}, 0x81) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2002400, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x10, r1, 0x10000000) r6 = syz_open_dev$loop(&(0x7f0000000180), 0x9f9, 0x400) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1, {0x0, r7}}, 0x4) 14:51:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, 0x0) 14:51:11 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:51:11 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0x0, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:51:11 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1212.614221] loop5: detected capacity change from 0 to 262144 14:51:11 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:51:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000080)) [ 1212.660673] loop7: detected capacity change from 0 to 262144 [ 1212.694103] loop2: detected capacity change from 0 to 262144 [ 1212.703640] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1212.706250] EXT4-fs (loop7): group descriptors corrupted! [ 1212.743288] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1212.747004] EXT4-fs (loop2): get root inode failed [ 1212.748130] EXT4-fs (loop2): mount failed 14:51:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, 0x0) 14:51:12 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:51:12 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1212.866866] loop1: detected capacity change from 0 to 32256 [ 1212.899211] loop5: detected capacity change from 0 to 262144 [ 1212.937813] udc-core: couldn't find an available UDC or it's busy [ 1212.939502] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 14:51:25 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000080)=ANY=[@ANYBLOB="2cd241cdcd31edba0e98268bb2aecd61211d19f59f99c98000d5175da5f869c6783f745dc3627e2da4e420ca7045737312d7539a4cb501dbf005d9f3e4d9e48c2dba18d86c3f70ebf744d0dce1fea3ff16a3786beade99ad14ae43fdb632f33565f692d4011502e2fe83b089774f0feb13a31cb508269ca46ac7d3d15ae2c40900"]) 14:51:25 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0x0, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:51:25 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:51:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, 0x0) 14:51:25 executing program 0: perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7fffffff}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r2 = getpid() r3 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, 0x4}, &(0x7f0000000500)=[{}, {}, {}, {}]) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x2, 0x8c, 0x9f, 0x0, 0x7, 0x845bc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x48308, 0x0, 0x7, 0x5, 0x0, 0x725, 0x2, 0x0, 0x0, 0x0, 0x1ff}, 0xffffffffffffffff, 0xc, r5, 0x13) kcmp(r1, r2, 0x4, r4, r5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYRESDEC], 0x98}}, 0x0) perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0x6, 0xff, 0x4, 0xe0, 0x0, 0x8001, 0x846a0, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x9e, 0x1}, 0x10, 0x2d8334d6, 0x5, 0x8, 0x1200000000, 0xd4, 0x7fff, 0x0, 0xffff0001}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000cc4b362be5929e32f3c1a13ba0d4f5e0c5e9487992a1c141f4225e06678e0ed9266dffe2c41d"], 0x31) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000100)=0x8000) 14:51:25 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:51:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000080)) 14:51:25 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1226.030283] loop5: detected capacity change from 0 to 262144 [ 1226.037576] udc-core: couldn't find an available UDC or it's busy [ 1226.038479] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1226.057072] loop7: detected capacity change from 0 to 262144 [ 1226.064745] EXT4-fs (sda): Unrecognized mount option "ÒAÍÍ1íº˜&‹²®Ía!õŸ™É€" or missing value [ 1226.068127] loop1: detected capacity change from 0 to 32256 [ 1226.085579] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1226.086722] EXT4-fs (loop7): group descriptors corrupted! [ 1226.099175] EXT4-fs (sda): Unrecognized mount option "ÒAÍÍ1íº˜&‹²®Ía!õŸ™É€" or missing value [ 1226.100330] loop2: detected capacity change from 0 to 262144 [ 1226.130714] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1226.134133] EXT4-fs (loop2): get root inode failed [ 1226.135457] EXT4-fs (loop2): mount failed 14:51:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000018c0)={0x2, 0x5}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x6e2, 0x189) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fcntl$dupfd(r2, 0x0, r2) sendmsg$inet6(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0xa, 0x4e20, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000200)="49ef895af3e6f5165ab5214ddb8409852e129fd2c737e3cdafba5b8365167381c1cd149546190bf03ce997e09954561408728ce26ad83b7a374ea1cf48d528", 0x3f}, {&(0x7f0000000240)="9ccbfee8852e9a9dcc01e8159923381b35b7bf1a7e10969afdd7f21459ef13e573ce1baf85f12d425cd53059c6ffa70a5d919f3fc97b4799ca5f5eecb40474a8f1d933f290642fa03d2c9944ea0945b6926b0042edad0231b80fd694ead1fbd7df1a63a148378528c3c70dcee04c1c18ed7b7ff2cfac07a6db1b1514020a402e7a466210ad85a26d70fd9eee62d4560496b20e31ebd92890f5df012fd33e43e2ca6dc7a818b04ac3b3098bc6e7c72315ac1575d1bf95", 0xb6}, {&(0x7f0000000300)="8fd1efacc9a9f79fc18dc0128a799bb4665bdfd188361c8bc41289f93e287cedc5ded9ab357886564bdf6074cf5801598d3e8d783927dee2b263b9a0c7d5cfc95c7aa939755710ed4bb1713fa5adf9b49dae225436cd950ffbb49b2cf740aa45c45b00757db293140267f1fac618e3a119677a8ab56256ef9229a8e683a9a2bb689c69e447dcba86c9cb1f8e2cc88c289da863373ee09a5c52318d508ad7299227d6fb8f283931701f357524957dce4da9e674aa414d092221aea8aee302a87d9f68bc0828aa90eb2ddb1bb040", 0xcd}, {&(0x7f0000000400)="864c8e047118779ecbcc69bd8474314297b595813c9fddfc4fb7ca39e2ef9191a9e0b3912f0b7d0fdd9f71ae054d740754f5c85f9921761902e6900f66ec3a69388e9c4736da225d9c28bb89ede7f376", 0x50}, {&(0x7f0000000580)="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", 0xfd}, {&(0x7f0000000680)="a788645569c0add5412b5a57f0148f10d17deaacec68b7480925157e6f4c5aaa357c7f7012db630712ccca8ee6eb88d7a1dbe799e57892a534915992f9a51ccd9c980fecc71c50d214e93154a6e8cc6a4f98bab11b028cdbe8d9049928d7fbf499fd2ae59e443bae1a17abda01a594a813232a65294fef4cfc6ef2379dfdfef668d5fda8b44d62e1ab47bf2f070a93c707467305781af567affd956c68867bb2ecd15b58715021347a9e9ed1940dba48f5c614165301e6b8b8437ee0c81a18dd769769b8d1eda9fbd15f8302128f11aa407413765c835f0fe7a615b7d934d76cc8d8f763517d71b53af60a615187dce80cd296290d461c2ccbacdcabb0a5d02bfdbf0b9d3ccdb4a5f6e79f5d4da30d5102bf000320352a6a59b65d9defa6a9104d715be6fba333f12bf9b7a6275000ecd940f98f4db14d120c6040d1e2dbb3e870c352009ccb09a20c21ccc2cb8741640377bb6c88efd8dabffbdca8f655e5f35065d2143778338960706a4fc4fece33913fa13da18ca6bdb5f5f40b9df1804c7a00f32d2710eed1c9c2d7c664bfd0ed0eb5db8c3874d7d1774b884c1b9fd1f5662c9d63085ac4a7ef5b608e8eb1eb00567c24c133ac9ce0defb1305d8c4e7b694783e014d00377fdb25840135850c96ca310006aa73f343c14cc9df73865f8b8835f179d0973a1cfa0e49403216a4f6350d47e0938b31f7706a71b1a20fc740a633936e67df7bb608f00b5a5aa9d48cdb30c72e28a9724b9dd05c860cc1a4a1ca1cc951d5de92f8567e68bc79cc4648d73fa3a3e38d48ab2d3fa1590f651c8579e02b9102cc9af7453a717de606b1c96322d14498908145ba1ae822411718e9ec68cc242c36c519061953cdbd8666b6713b12be7cefc13caf75eeda9c1fa903b011b0b3180594b9897f83dbf625c82228619ad8a5bab623622255d06c808d6d861da1a2a98946ecbba9a02f34e809218d20deb8669536ac81f4f5886589a685fe8062c2066f5ab7f78ad615ab6c6dfbdabede68513c4c34edce5c22fe337c746bc7d9b5530c549f8b817bd0e9064e67d1fb3a6994c6ffe91a8f7bb2c7aec891c89065b931b4c0ac950e3c06be5d57bc07bb4ae76f4d9733f986d1d47472874b2445e8981bd2a443aa21d36f151e6be415dd9226d535ed799e6c3541f151380f21cfa3f521554283a238a1f2e1eb4e2858100939d81ef965a321e62122b732af896fc00e124c36772c597736c64f681ba8ec6ced5a56a01ecf64b743746796b328cc220d62b0e0ed35671b162b9c0b8343a9a0fd656617a01aca5165b7aa0e39e57b6136a4ae5dc3442ee52057aee591e5418a2a91816405e8975296841adc5a875f341630991e961dec43ba8733bd37c5a0be034fad2d10acec9573062bb9e7fbcdeb06783f0e15f6c495c0e1cf218b2a475412292bdeccea14cd9770bbfbb4946e5f43c4596def457a1d0963b2af1e0dec529965cd949fa7a91414caa514eb3545bd97e7a7cd73597e8707598108517c254b930b0f16668f740146f575a9f41a065763bd0f51e788e8ad675796476e1c68af3681524cb3ed13e94402a82cf45bec7e711853d50156af7c40cbf6440ddf509de8b78598d34889df83f76af03337713e41cbed4ff79d3721310fbaaf6ef3cc70059aaa5b0e2cd7c02b7c472284636f3ba2caff5d5ddb8b47386c6974715cb7c0fac725f417dd2d5127387097d1fab166b760579a6b1f3b640f1cead04d95991eb105f2d5ce0b0cc6e0d930366d487554d709e367b6902fc88b99cf4de14996a691c02f6371384c9501416e3da7a8cbe9fd9b6f1899768a43027f79dc88d47227c5d8fb06efe33b0383920938ad9f6fae5809c0848c297dbec08037a1eeaa13ae0ed334dbbb41b5a0863ad6f6741955da9f9f60aea1e80b45ea4c44dc7aef5570eb29bdf96c77039a751620270fff8222e1ea42fee2c22919a7a2596434b0a6d4eebeaf86ce882883f0b352416853c8e8b9ba5cc942f51cf8f4a2634f0610ca971376b967ee64d279128248cad13d96c1915bdd2efe46cecaa116ca707b946da813c1c365007fc1ad6af09f18fde11cc5d247fd9d217054631776a18b3fbe669ec00d00766acfd67ed876b39df91ab8a78062e6df0b352723f27ce4b37a16e873b93d20838180e2957f36a709335dabcc4a401df2a7a01d6cecaf260022e932f67b7f00740031c821c71c5bd463e80988575ef79123db27f58ab65041fd4d5d73fd0636d03179bef1c4eb391f9dbb9619264de14ad27fd67681555c6120bb6d6803ca7e2c99b6b6a2b5a648f870e94f98354597ad3fe7950dfe28c53e35fc511c87ae7fe1a68bd73de44db645997a6d3dbc958c23df4d102fdd71bba4be8d9e5bf4c8d0c358b7f662ee694b57690d682e5523c8a0efd6113ad0a8c9b6e739edcc43e4a7911b113013cc4a43bfcc6813dec06696c4bbb0fb01786034adf84d7e057c58dfd1e5aa4fd85a8267d4c2b1fca76aad5df813a1f0078e93262191c58abd422bbef40ce2f6529f3a9f6917e9528b3db99a7d5e0dc81a02e8aa1965ea1da6936f3435cfd4f144a45c46f8fad44fe956d21a6b943b96d73eb2eda969fd07bb8e4a34c59d30a207cfbbedbd8973a1347ce06ded6160414a8a94391b69336127da55b152821e15d8b8f0930309eba56b0373e218a224f9b8212f82d0cde2101471304b87907aea18a0076072dda4abaa2648330c0a244a97be1beea4efad287c10f071476595ed9669b36830bd13683dfb547772ab64fce1af3246c647be7d5457131d3518f3718750f1d0d9b56a5cceb785e38a53452bd8b526af776f723c019d70ed654de333ecb4cba29d00c03637bfd92122c601a3447abed16de48d490f1e23154b5ce51b038ad65ef75f27871b192059bc3bdbac986969aa1bfe8592654d011f9afc20ba320ba101a7fa82aff0ee910c56a5243809bb45e886b7607310f75748843b6aba6e4df150e6c321a4871d742940fbc5539484b46f67d472e65b719c64ef6e43f5c080329d6c7914ffac67f74858f3a08b0287dff0b5ed3ce120eb04e8e3496a45c1d57d03e6b9d66b687369c26e62b77075cff0495ec03a18a8b05c196485c9150e82f83b8b6086c64fc9f23b43c73c0c6fecc61488eb2b7b6b087a8110296106b287f72bb6b09657b399efc15c1cad016faf152f05d60686e47d376789162a830f266b6b48f1ddaff8972a93cdb25d13105e706f602b9e1c2b00909c7adabc6492aec6153b7a4dbb9f33e7c404226e20ecac548c46314cf3cbffc1b175cd6cee79e2ad287783116353cce4c5db4af8223393404ef9f578872c48cd62f200f5fd938b2219ab38b308ddbe554f5b262c7248027413e1ac4ddfe7b3db683623f218f2cf231e875126fe24150b1ac3fc365ef7a92a4b025696bb931b9c2c182de4e52f5fced7ea893c2638f3056f7c1fe0428374c2266de4c092f9b3a72f5f9e04bf4030bcaed2d1626f94891e4a7ac5c613a0a3bc14a4bfc2ada1a57a45bd62dc14c45f7fc91e7390977fdfeb922334221a28e10ac8f899c1abc9e3e47651d707c6a1770f880da981b1ad2cb14371ad60c1422b15105bf61959c0e80871f863a0f37dc3c6a02d7493dc177f770348ded69d13c4f48d5cfaf8a113b3501cdcf893f570dd7c2e42b08d1bab50e24b04bbf944a39f912498e9bf1301c3ba4a12be7ee4d7ff35de4eba2cb0460569f029f4a43978515d8ffe3882c32600d3a1ab41412ffc1e616b73093468f9070c97a411cf8a815b793e1c0ce48c4c2534a617e3b7696999abd245840686a92528f2d23c66eea07547558f4bfc4c1e903b89abe7d94e9075c4a9ea8e8848af6edde82a24f29943f4a0248245b7bee031ee0db8bdbb8794d240288db8be6e1599edd3385eeddf9ca35034b75a55b18284c7cedc8e79e4efa6e4f181cf05291e32a552d909487c9592c06d4947c22a62094516c83bc36f443a66a170e1bd6823b3234c38346f0fe043d84e8c58f0ffe49200872caae588250aefaa3df351ab3a0274ac388af903a4860c810449377198e2b76c622f3f096a0f0ada157699b7aa2b5787fd70d28e42476e9509edd757b1d7a2e4cae65836e73e6798094cf421f70ec5d8c319612ddc50aba79dc0fdff68bab882651000496d2e84f1c12e70375830eb0ff10f05ebfcaae7a5c8be0c32cf76881bf3c739f979c38ff28d4353d90b73df97b0d75a21510489a656376e6ffb8bd7130b1c3ce46866122776a944dcd4ec4cb109ef1cb331bf1e437f2373528ab1c505011d431d3e6a7b3bbef3818ea487f443edbcd0fd58b2cd51d54161ffdcc66205f1ddc888ad5240933facb656b48054c0db8f4f6412004e0a60328f5e0d9ef8e1af1549336f600df6c21cef70ded02424bb4fc40d6a2fd2e844fe9e1b8f1e79c6843f519b7ab40f192b86fae49e4925291ac2f08134801f66d02fd059a0b39d50ea9d644f5208e89c099cc9efd728dbeac2a1836cfbdbcbc49201ed07d5472aa2d0570ed20a587eed582bdba84f4a05bd3d5e54a3e8fe531dda804271fb127afece6ff4dcea31883660f46f53383967b1109701b24bd7528e2b0f077adade148bd9f1075640b370fdaf8aa0677708237b25dba7be40e2a52f345a35900109926395c058864cdc9163c885aa1c78b2a49841670be49285c00a86ba409f1ee0119f2bc70b61731d5cb7e05e8a116db9ae8d2ae3770c7d4d77c2d9f76a9788a28d0c7e9716e3365329dcc31fa0a4f7fb7231409cf4e5d6c095c45118ce72f4a59e01b33533b4b34e2054b74928bc4e357152cfccbce72d3b225861edb05ceee45fee64dd3234bb9b2190478d98f40cc4ffd58559ad44922a5674f4f99bae81d7b00794a729a877ea8609b7e4ad270a49f4632cca5ab35817da83368f9c748a07b668ec7c68bfb2f3d969937338ec9d529a786ea1fe362459c79124374c202ada1d319769cde9f0b26f5cda1f31fe88a0b6d8a43b1fe3a7ec5a0ebdac8908212f8a888b252414edc4d3665ea4918dc0ed1984739bac543034815a22d4b87a9300ce97607b6185a721784d4dda944b12fd77c17685e95d65fdc3b2ee4fce859d44cdb9aa67c8df729075ed6b1dd33f83d45496fb9a4a47a35496a9ff37712a56bd00744f83b9325052fb53b7d2a672f9e8e98cbe84338b6781a0f59619480583b03a6330985569396dce6104184465dc42a43b7db44244350aa681c2d7eca69305a6afebce8d1da59f211991e46a797ea5fc6c5759b593d849d3ca0755ff3c46840f78a37e65d5686731060931743bbdb031d12adcfe9c40d259a99963cdd9a03aa38515d2f0513f0cf5d02eee26234906c5e0d31bd5c8c5bc76015ec7270645b3428730b30d293c26dab3399855d95327ecc8e7e0c80c1341e1aee7a0168ca03bebe8f367789786b96be14e9127f0b3fbb2de2f612dac5cfaafa35d54546f2a278951b27ddc2910d6fa733c8fb7458ec0c0f295512608c218bfa947a1add5481638ea575320972334b85f2faa54e9ddfb5542db5a684cb8105c820ef871c5520b871453c9e5a7a8c3388054202bb5bf323d6546a7a4d2b7b030a8586fb0cd07694f22d2949778985fe669a0637be3a10536e64be0b464dd3a6372315f565e1f1da7b0a18a0e69e2f89d8b132f124d72b7d7df45606593118ac093f4ba8e631f1d9f96ae5d11b9386162a1373158d99da01028dfc317827c9680eacac99da7fbf90d5a88fcc44cb34cc52de50bef32503a166f518a67664117aa1143d60cdfe10a90d9454fa07b00ecaa752120", 0x1000}, {&(0x7f0000001680)="3ab35989f29e9df04d4a8f189ab252cbd02d4947fd4b1e5ecc5689c28f52dc0fe0002d8cd26184166be4b71fc697d97519494c17b96613cd967f1e4ed92e6ec2619aab8603a850cca58edb34e724e7eaac92b6be3de00f6d305daa5ca34484c3caccfe993c274aa46c7527d022a5c8fa8cebe7cc0f8717622d9e9cc52cae33a15c004bbc1ddc3acd2e08e6a0128ed2a0a179866a051304b6d98e1b44d7d2504708aa6534d51675ea82ee33a55c3496fdad1b07789ac99f01dfecc5ab391f6aa6c4581c4af0a247c4dee3257823d7ebdf434ffbf76ce0bc229daf12cf34431b", 0xdf}, {&(0x7f0000000480)="64b43d909c968716cd83e54835b660b3baedb660cfce721db342b711ca9012dbbbb643ece04e5a9643d9eef92ded82bfc92c7944dda9e61d797e3ebefb5890b100651dc610dad5cdb451e995988f526830e199fc9daaf01e1d50749feb0061e1312de0c679", 0x65}, {&(0x7f0000001e00)="67be6465cfa9ad498e13ff9a2e093786dd6c5bd8d7e39c8ac218ebe93d0a1dd3bbfeb0126eac4c1b7f7c756638219fdfb1b687673489ba7f8039f2174a2f21d7e53d7201f649d947589fddb4006f868e3790f5fc6bcdf6e455e1d251cb14125b9c13b59d245bcf1cfd2f197cbf3823034254d011f4c83b1262af1d6d8150318844345b0627d4f5e62bb1e2693aa6aa488488f40778f0162a9bdcabd0bdf6850fe07126936239f4a807efc2a7739434122afc9632baed8d40f81a5349715a8e05126dd01a31e82fa88a18c7fd2542b1fbce7531c897cdfeaa9e8c43fbc0732ad1e8421be6b9f466ea39fd2969795ca002b3c0401be6d2a6c1b9bb48003db5540161f35d5480f5913b2781cd5cc665ff2465874c1845095d07d280b29c8b7b54c79f781faea4a810e6d2bf630a480960a7964a518d224eac7aa751ddf97da30557ff774e60dc4dd207973a9f06e5e0ae4025be6ce0c358e385cd5c472e80a5fe61c21fb5dde71760aca292c1e2bffc72bcb73f573a60ee28cdb63a5664202bae4ad364fa990c80b322de713634cfafeece4d70e28fa784d540a3488d1c3769ae91e89717c6a71a6a9c94a0efaf869784a154b84376da6be35adcdc053891f58368b786312c2f680894b893e4f24a514653b14b8d3bc0f5414cf27bba0fc10325d674f14c1da7db1dfaa10b6c001d5e233ca01d863733b15acb9f768dc50001736d86990976d2468560af701b18ceb0d20844190528e492d04cf16b6daeab20fc43fe54817906c7c926344bc58f467299cd45de371a07345a104bef8573e51ed715f980e0ea1d74b6dc5b414d7ba46dc223a7741739613e2f03347800195b942415fe8a243b8a71a17199ccf77637b82cdcce1ef78dc083a222c48e7cfeecddd02ebb6852c5e6ac0aa74a2ca18e85c00b60005acc2e23c600345cd1898064f186d30cbf72d9d981cb2ddf80fd8d8cbdf7e622dd9482949efec07d66f2bbc499f221b5095568d2a988e18af558c570b4f9c5bc889825f46a7a6a43d60066437cd98b880d51b410b6dc6cfdd4e5f4b56c4ba95f68f9c50dbe05b8d64ddb2af7a36e03aec6b0e870285a61ba611d015a34139e6a1ccbc4645f867e7b02ba8d725db5e57615343610143a5b64b96893f15c1ccab82f1d1847047268b3784786037044821061c4f00f6d1f930d7559ffd085208bd53a9cc6bcc3357097a4418a31f96f231605c9982ef279568402d5c77f5ab98a9d4aa26945e87974f24b6982f18c7fcb54edcc9b36d06a74e12798c5084d8566780df574149226b2f828261e328b170bd74ebaa87bf6cd976efbd76e601331ac9278a03632bc07998927ae7e338b1fb905d7ba7b9af44aa0523f49b2b73756aa610c44b557fa773e1be05a79f11ffecc2ab622a4a6a88d59dc7a0bcf15314b26fb6b9cf938e5f77fb58bf11c5d64fd3441762fa0df785a9a58c6fc62c27c44c2bbf23d8a545482363dc099aff6dd9dcb259c48fb2c6cf43f115ff505deb8b067300350f52b51602dd61ec82997163290bc054dc5f464fe1473207865e426ade49f9698f7a26a38be0a9b3a5a0044f3a724deb06e0d4124e5e0b3bc103a0402b43d1b2dae2aff3e6ac1f2b180e77b9db7de1ec4a8310f0faec0b7dbaff58b5ac5aa8b08d4d090e0b664679b7de3df627ee658f712e8cb6f82f345a3ca8cf4aebe80ef871be7aafa020f6f14320385293037b6b42ba7d32ea066809de6375f67edd8fc647bff3d160f2ecf3d358f88651212b3d22a6261a1c16bbd6fe039fd7fff27f6e5456ba6dce92a65fb6fc19c0557e66e44757a0412d600b3197eda544a1f12d5f9c33fde38d7004b81c1fcb49df9cc115a1033dc350c2c95850a64f0a35954bdc23c66a6d7381512c53882b843387481b860ab07be5d01bb127e95e2c091f9b5ca5a83f91cd5614f4b6f08522a5cab4f7f091ffccbf320289c948e14e25ec3efa214ce93c09fe79b402e6df0e978c971523dc2655ba2242a86a2dc044656e7fb370cada377c226073dde20390d6a266e7c1841f023ee2bbe666c03046a37b8831fb3d61e3c072635d0d5c4fb18c5c44987b60d60017f04e436938dbc0fc67ad920fa13214820eccf028f73b72bbcdba5989b4b69b2f837c695458314eedd1f0828e7bd88139ae991dba26b5008574ee19f603b393d4be501d35c83f24997cf87a47632829e9bfeaf314c09fa0e4ff6cd5093b8897f8b164afd39f8525ffe0610c6b10baa1a51ed870e772963bdcd10766268e4f3ffb3b320e2db69cdde3fa3117af146a28773e9f3d870e3931702072956aad3dd94759b5eb20deb4d15e64ee9d9d35da23309b4bad793722be007fa0ceace81c2d3d1ffdca01fe61d58197c1a667d8f239231c1ec531db90f94025b34c12b71abb8ebe39e6c2205ce1eac01be661f837aaf2e89651867b0f7ab8e1669f12cf5fb041dbae2450bd9c6af55e1f1f8b2b64bcbc271b5651e0f2a74ede53f82510922cf08d8c77ef81acd7cd548e479692b2c1f165fd3447825e593d536161b10b32c0a07df8d5c67961a0f8846d5fd860b353b4dbbfa33d6e1ac22804e84b24c4a6023041b9b9569ac70e7e74c5b484fd1cf99ad5b54808dc15d6472b2d93a2913ac6c850e5d674774a862e4c4f5bccd0fc1dd2919ae90a3776f24c5ade887f5f5587987270271b3c52db22ad700ed95880bb595c11d1faec28846e1f7a9fa0db092af609e3ac43c83158534c5bd48517559fbe9e4c41522d72a56cd9a357b12854d8194edd36ae9007aa08eb8268f44258e80193a2e0d75752f2acafb81c7861c4e6ecf5625faa77b93556f7eb97ec0c0b59bebb8fb10b2fbc23f79c6332fba1711eeefecf857412255815ce91c4b2ff581e5f50f16a59f312738a344c4fdba594f1a4ad5c63f487d8f1d4b5855caf22fef34303daf622063afe0d3d2ce8c0be70cb44032f28ec093f0729d596e7ec56d92810fd41e2a0920d82dc38ce5f793b983c8d074f09a03a2b03b847adac1f8b127465517e9ffd3987cffb0c66456f8074d0dc32bec0a1396c107f44c515fb97894f37736594e7aadd47da8f72794a51f0797ccdfbe56170122874df1be5a05b8cae39ce7adb1ee9f40e395ab28252d45740dae09c6a07fefb669fade1526c1b50cc16a87c5444d7c177ca8b70fd06322b9031c77ed3cf9c28a1578b3d5552528505722892eb86cd35b9b507b6988008293879ac8581af7d054dbbc932db1bfddaa42afdc40151051b758dc91ab48bcdbad6cc8947c38ab6d50d43962aae48035087da3b0ed2df03f291e33b44a82c0ed330cef1382bb3be71304c1c4ca804256b3cf26f597109eeb08de57dddcbf87e83d9a5ad6531744d69dae75a7054e22c0d89a28a3b969c0e83586719b96eb7424bc2f26e2735196eea7054686c3eb612d439ac8be5ec3ecbfb9415578ff9daa1a9b980f13ccc2fbeb95bbca0440776575b8b5f2215f4c187566943a262ce76eb12450f2fa4ef525970125a78b67f535ee229e265d9a6a18ee137b16e2660a1c192e94e86cf878097b2f4253a9a4a5596ed84ec539979bff82096b0c22ade305b8d8b0f65c4e6a3c825890600dc4bafd597e7c6c5fdd7bf221272176f10e3f360c5e3f3083472a158bf245110221ef6e4b5cc6a7f7a2f2addb971acfbb2a3001cea4d8d4c9ab95a98394989ced320a4276881fc5ea2435b7fd278ccbf5f485985345a3bc1f4dd833f36d64c874290bb409cd33aa717cf2486c0f40f23aa4c0a772da236feee301e64f0681dfc765881b6459ed6cd64494b545ce7ad81412cfd26ee283ccba4c1f57dc31579bc4f6c50b3c9caa6c2d3dd5e2d3185847affbd430e93d892ae2bc63efc8b0ea0f14e7249995f87968dcfa218ea197b2eb0ce15ffd82fbe6c91368ad00d9f507c868422082b00da6cb41ba7326ddf9d73a7b3e4ac46106a52e8490af9c210a575dcb7db39bd09b7497a40e3c097d65ee3b8832f1ff72672d8632ff5c6aa88a21008b17d0f543cec9c6f5c795a72d079afd20d38412284e783e94339bb438f110cea5104f595126c76103821868041ee4130575328dd6fe23e81d051b060bd9e320f8a6b3634396f480fd345e2aeb4c49f673bce6e6617595c727a9275f994049a29d1e25f6b0f07ed45d1cd3400f6e3a36294925764e714801ef91807cc84a8f3fa3955525863e097863cbea0b5fbb893477837ead49d7f781c04482ac7f818d004cfd1e940983652ce34c7c4c254e2185a5ff5c4955c51f5cdb2d901035a7dd39aff7438d401cc4a428d7546cb91a4b80c706ec3b1e491cba9704b65ebb99c3dc7af2a3bf7d16f8c78ed0a82403b5447d8ab2eb64c0218e6fe59a33d40ba20d79a27e67e022108e8a209c184b7e23a104669633e923d8b735bf6ed111d6705a44a1c52cf3ea7613b1d630321dbea4fe327c88150731011d24b06dbe9ac0947ff1d7c0738c0c536a82c598f73c2d2c4fd42f38ddc0c282c677c7274ae91c315d4c17632a3142281d8c6a195703f7b31004cdce1ff49a88c54780f2c557d5a80b2768348c9cff6e36332525487da355168434282da96b2afa28c63cffde78c483fd5d8338877a7c8268fdb28defbbc074c7a50da4906e2cf3540fe533cc52a62ee9eb2d1ac0a24331f5a16fe3d6deaf7ff24c7ecab170c3e97ef1472e319e10b60f768c1229d8c9b54af86de6897713e072d84e238dfc0641db83f1c070d4edc45865ae4b815d3a896a690728d56bbe8e195b027ceadc08d9a2f2cd9df14086eb0a468719e4f6caa3f9f03394af0aaeaad682eb8a8ef990a5974185cd53281501c9af2f24e5a3a698c232ed773b00afd00824c9bfe5f439da9c8222039fc74f2ddbebff2d218f8b49bc3f5ccf78f0b62e7e209c755280bb67b2c005cd8ff40882b5141c28701b61e9c8c9985aca76babb109d9bc2639a22565339402b545786760e2be78c70405faaf75d2466ea2bc2baf7ba43699afd1044a91225122730056311e6ca035481ed015070e325433a8cdc583211a46932eb44208721ebac216def2387a1a450ef793c4d4adc538dec28452d93f43a5b01cf4a768e7a19660b04142d70f6e22d1062332427003de5bff6736a58c1f8a1467d966498fa175d7c49f73e109e8fbc06a0ad0279463a570c8c06b31133c2372d13843afda6914f48cd8b24c926ab08a5f1573368eaa9d0096c938b7b9b94e40731167e5d65c183de0d2873878ca9e1f582c3fa399a6d81c3695394711fe951f946c1092b106ea5e84bfbcf434c8f60c9946d3de2f2238c33f23bfe3e2a245a723885993587331b5ff5ac93d11028ceb604a51cec307d5880a65aa54708a84ff307d7711fa70d821b880fd25ae474acc31a9caec369280ada400930df06be9ddd46348142363afbeb45b3458cbfada3d7681e6946d09e8f0137f2234cb54b0f7beaa2028a49bbcb517025a2b0cc7cb4d8843848281c6ad5267fccb93a1587515903b642095bcc8f8ceedf5e9872829ae4777237d47bd1f60dfc3b43bcda50007ff01e9e49a778d968c29b7d40235d9a00e35d7ca7e430086329406372ecb3a70ee6cdda24285b7ebecec4f83ac61cf11e909c7f85853a2d416c268475037685eacf24b6c8d78cae08af739a1b8b03df1c9c40b13cbfc0785492227dbbcedb88f06e2cafc2b0464ba235bbeb2d6210c8000afbb787acc333ca2ffed05c90f51c0891a1283fefd045a7ae8146a5752937da3dc316ceef1ffe3949072f6ecf37f4672acd5cb491f91d125cf61e4d0776d9fec60efe199d00b0b5a75650", 0x1000}], 0x9}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) recvfrom$inet6(r0, &(0x7f00000000c0)=""/73, 0x49, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffc, @local, 0x9}, 0x1c) 14:51:25 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x0, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:51:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 1) 14:51:41 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0xfe, 0x0, 0x0, 0x0, 0x9f2b, 0x40040, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0x0, 0x0, 0x0, 0x3, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000440), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000000c0)) 14:51:41 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:51:41 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:51:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000080)) 14:51:41 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1242.583598] FAULT_INJECTION: forcing a failure. [ 1242.583598] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.586186] CPU: 0 PID: 8718 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1242.587732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1242.589621] Call Trace: [ 1242.590222] dump_stack+0x107/0x167 [ 1242.591056] should_fail.cold+0x5/0xa [ 1242.591922] ? __do_sys_memfd_create+0xfb/0x450 [ 1242.592978] should_failslab+0x5/0x20 [ 1242.593836] __kmalloc+0x72/0x390 [ 1242.594631] __do_sys_memfd_create+0xfb/0x450 [ 1242.595651] ? ksys_write+0x1a9/0x260 [ 1242.596540] ? memfd_file_seals_ptr+0x170/0x170 [ 1242.597602] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1242.598800] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1242.599970] do_syscall_64+0x33/0x40 [ 1242.600842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1242.601998] RIP: 0033:0x7f2882533b19 [ 1242.602836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1242.607005] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1242.608760] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2882533b19 [ 1242.610392] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f288258d0fb [ 1242.612042] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1242.613663] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1242.615276] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 14:51:41 executing program 4: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r1, 0x5451) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) io_uring_enter(r0, 0x7e35, 0xb800, 0x0, &(0x7f0000000100)={[0x3]}, 0x8) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000640)={0x0, 0x0, "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", "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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB=')\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r5, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x8054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000001640)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1000465113808d88a4ffd7d23963dd8397024055f2afdfb70f63e9da99d1bbe76016e1d930ef1543ec44cd4034a444a2769c9306af53cd95361d43998c0944bd49ba232c9b", @ANYRES32=r5, @ANYBLOB="0c009900000000002e0000000600b300000000000600b400740600000600b400690d00000600b400fdff00000600b30003000000"], 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 14:51:41 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x0, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1242.634611] loop7: detected capacity change from 0 to 262144 [ 1242.643775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1242.646401] loop2: detected capacity change from 0 to 262144 [ 1242.650572] udc-core: couldn't find an available UDC or it's busy [ 1242.651640] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1242.677314] loop1: detected capacity change from 0 to 32256 [ 1242.683249] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1242.684586] EXT4-fs (loop7): group descriptors corrupted! [ 1242.709254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.711031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.712760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1242.717542] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1242.721130] EXT4-fs (loop2): get root inode failed [ 1242.721819] EXT4-fs (loop2): mount failed 14:51:42 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x0, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:51:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 2) 14:51:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x2317}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x4, 0x40000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) waitid(0x0, r0, &(0x7f0000000100), 0x4, &(0x7f0000000500)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x1, 0x0, 0x4, 0x0, 0x5, 0x400, 0xd, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_config_ext={0x0, 0x7fffffff}, 0x6002, 0x5, 0x3, 0x0, 0x6, 0x4af, 0x49, 0x0, 0x5108, 0x0, 0x3}, r0, 0xb, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f00000000c0)) 14:51:42 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1242.775629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1242.782769] FAULT_INJECTION: forcing a failure. [ 1242.782769] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.784367] CPU: 1 PID: 8741 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1242.785291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1242.786418] Call Trace: [ 1242.786778] dump_stack+0x107/0x167 [ 1242.787280] should_fail.cold+0x5/0xa [ 1242.787800] ? create_object.isra.0+0x3a/0xa20 [ 1242.788428] should_failslab+0x5/0x20 [ 1242.788955] kmem_cache_alloc+0x5b/0x310 [ 1242.789510] create_object.isra.0+0x3a/0xa20 [ 1242.790108] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1242.790793] __kmalloc+0x16e/0x390 [ 1242.791282] __do_sys_memfd_create+0xfb/0x450 [ 1242.791891] ? ksys_write+0x1a9/0x260 [ 1242.792417] ? memfd_file_seals_ptr+0x170/0x170 [ 1242.793039] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1242.793740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1242.794432] do_syscall_64+0x33/0x40 [ 1242.794931] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1242.795616] RIP: 0033:0x7f2882533b19 [ 1242.796126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1242.798592] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1242.799602] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2882533b19 [ 1242.800567] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f288258d0fb [ 1242.801529] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1242.802494] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1242.803473] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 14:51:42 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:51:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000080)) [ 1242.848710] loop7: detected capacity change from 0 to 262144 [ 1242.855085] loop5: detected capacity change from 0 to 262144 [ 1242.870300] loop1: detected capacity change from 0 to 32256 [ 1242.881395] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1242.882635] EXT4-fs (loop7): group descriptors corrupted! [ 1242.890131] loop2: detected capacity change from 0 to 262144 [ 1242.900951] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1242.902801] EXT4-fs (loop5): get root inode failed [ 1242.903563] EXT4-fs (loop5): mount failed [ 1242.918464] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1242.920139] EXT4-fs (loop2): get root inode failed [ 1242.920760] EXT4-fs (loop2): mount failed 14:51:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:51:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 3) 14:51:56 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:51:56 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:51:56 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:51:56 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:51:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000080)) [ 1257.418169] FAULT_INJECTION: forcing a failure. [ 1257.418169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.419696] CPU: 0 PID: 8772 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1257.420520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1257.421512] Call Trace: [ 1257.421837] dump_stack+0x107/0x167 [ 1257.422276] should_fail.cold+0x5/0xa [ 1257.422741] _copy_from_user+0x2e/0x1b0 [ 1257.423224] __do_sys_memfd_create+0x16d/0x450 [ 1257.423774] ? memfd_file_seals_ptr+0x170/0x170 [ 1257.424351] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1257.424988] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1257.425608] do_syscall_64+0x33/0x40 [ 1257.426064] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1257.426688] RIP: 0033:0x7f2882533b19 [ 1257.427140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1257.429373] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1257.430297] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2882533b19 [ 1257.431164] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f288258d0fb [ 1257.432028] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1257.432893] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1257.433762] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 14:51:56 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x1000, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0xc00) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open_by_handle_at(r1, &(0x7f0000000580)=ANY=[@ANYRES64], 0x400) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_macvtap\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x9, 0x0, 0x1, 0x8, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'veth1_virt_wifi\x00'}) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x30004001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00'}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 1257.444434] loop1: detected capacity change from 0 to 32256 14:51:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 4) [ 1257.471485] FAULT_INJECTION: forcing a failure. [ 1257.471485] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.472896] CPU: 0 PID: 8782 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1257.473747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1257.474753] Call Trace: [ 1257.475078] dump_stack+0x107/0x167 [ 1257.475520] should_fail.cold+0x5/0xa [ 1257.475985] ? shmem_alloc_inode+0x18/0x40 [ 1257.476505] should_failslab+0x5/0x20 [ 1257.476971] kmem_cache_alloc+0x5b/0x310 [ 1257.477475] ? shmem_destroy_inode+0x70/0x70 [ 1257.478009] shmem_alloc_inode+0x18/0x40 [ 1257.478501] ? shmem_destroy_inode+0x70/0x70 [ 1257.479030] alloc_inode+0x63/0x240 [ 1257.479467] new_inode+0x23/0x250 [ 1257.479888] shmem_get_inode+0x15e/0xbc0 [ 1257.480389] __shmem_file_setup+0xb8/0x320 [ 1257.480901] ? _copy_from_user+0xfb/0x1b0 [ 1257.481404] __do_sys_memfd_create+0x275/0x450 [ 1257.481953] ? memfd_file_seals_ptr+0x170/0x170 [ 1257.482522] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1257.483154] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1257.483776] do_syscall_64+0x33/0x40 [ 1257.484236] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1257.484869] RIP: 0033:0x7f2882533b19 [ 1257.485324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1257.485774] udc-core: couldn't find an available UDC or it's busy [ 1257.487550] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1257.487563] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2882533b19 [ 1257.487569] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f288258d0fb [ 1257.487575] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1257.487581] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1257.487587] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 [ 1257.499120] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1257.501774] loop7: detected capacity change from 0 to 262144 [ 1257.511143] loop2: detected capacity change from 0 to 262144 14:51:56 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), 0x0, 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1257.548972] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1257.550936] EXT4-fs (loop7): group descriptors corrupted! 14:51:56 executing program 0: r0 = syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f0000001340)=[{0x0}], 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000440), 0x4) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r3], 0x98}}, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) [ 1257.575649] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1257.579139] EXT4-fs (loop2): get root inode failed [ 1257.580465] EXT4-fs (loop2): mount failed [ 1257.584546] loop1: detected capacity change from 0 to 32256 [ 1272.810392] FAULT_INJECTION: forcing a failure. [ 1272.810392] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.813108] CPU: 0 PID: 8809 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1272.814652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1272.816534] Call Trace: [ 1272.817129] dump_stack+0x107/0x167 [ 1272.817951] should_fail.cold+0x5/0xa [ 1272.818813] ? create_object.isra.0+0x3a/0xa20 [ 1272.820154] should_failslab+0x5/0x20 [ 1272.821025] kmem_cache_alloc+0x5b/0x310 [ 1272.821950] create_object.isra.0+0x3a/0xa20 [ 1272.822950] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1272.824114] kmem_cache_alloc+0x159/0x310 [ 1272.825060] ? shmem_destroy_inode+0x70/0x70 [ 1272.826048] shmem_alloc_inode+0x18/0x40 [ 1272.826954] ? shmem_destroy_inode+0x70/0x70 [ 1272.827944] alloc_inode+0x63/0x240 [ 1272.828770] new_inode+0x23/0x250 [ 1272.829564] shmem_get_inode+0x15e/0xbc0 [ 1272.830498] __shmem_file_setup+0xb8/0x320 [ 1272.831468] ? _copy_from_user+0xfb/0x1b0 [ 1272.832419] __do_sys_memfd_create+0x275/0x450 [ 1272.833447] ? memfd_file_seals_ptr+0x170/0x170 [ 1272.834500] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1272.835680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1272.836974] do_syscall_64+0x33/0x40 [ 1272.837810] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1272.838952] RIP: 0033:0x7f2882533b19 [ 1272.839785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1272.843915] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1272.845628] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2882533b19 [ 1272.847236] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f288258d0fb [ 1272.848840] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1272.850454] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1272.852068] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 14:52:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 5) 14:52:12 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:52:12 executing program 0: perf_event_open(&(0x7f00000017c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x662, 0x0, 0x0, 0x0, 0x0, 0x0, 0x994}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x5) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/202, 0xca}], 0x6, 0x8001, 0xfffffff8) memfd_create(&(0x7f0000000140)='(%(!+-#&\\\x00', 0x3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000000)={[0x1]}, 0x8) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(r3, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000300)={{0x9b9, 0xeb}, {0x7, 0x1}, 0xffff}) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r0, 0x0) finit_module(r0, 0x0, 0x0) 14:52:12 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:52:12 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:52:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280), 0x0, 0x2100}], 0x0, &(0x7f0000000080)) 14:52:12 executing program 4: rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 14:52:12 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), 0x0, 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:52:12 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1272.862671] udc-core: couldn't find an available UDC or it's busy [ 1272.864290] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1272.874555] loop7: detected capacity change from 0 to 262144 [ 1272.885166] audit: type=1400 audit(1754319132.177:195): avc: denied { module_load } for pid=8810 comm="syz-executor.0" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=31722 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=system permissive=1 [ 1272.893153] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1272.895145] EXT4-fs (loop7): group descriptors corrupted! [ 1272.925734] loop2: detected capacity change from 0 to 262144 [ 1272.937723] loop1: detected capacity change from 0 to 32256 [ 1272.940232] Module has invalid ELF structures 14:52:12 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1272.992451] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1272.995470] EXT4-fs (loop2): get root inode failed [ 1272.996598] EXT4-fs (loop2): mount failed [ 1273.010614] loop5: detected capacity change from 0 to 262144 14:52:12 executing program 4: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, {[@lsrr={0x83, 0x27, 0xf8, [@multicast2, @multicast1, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 14:52:12 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), 0x0, 0x7fff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1273.063203] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1273.067676] EXT4-fs (loop5): get root inode failed [ 1273.068939] EXT4-fs (loop5): mount failed [ 1273.083536] loop7: detected capacity change from 0 to 262144 14:52:12 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0x0, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1273.103687] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1273.105745] EXT4-fs (loop7): group descriptors corrupted! 14:52:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280), 0x0, 0x2100}], 0x0, &(0x7f0000000080)) 14:52:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 6) [ 1273.154621] FAULT_INJECTION: forcing a failure. [ 1273.154621] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.157063] CPU: 1 PID: 8844 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1273.158491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1273.160229] Call Trace: [ 1273.160797] dump_stack+0x107/0x167 [ 1273.161566] should_fail.cold+0x5/0xa [ 1273.162373] ? security_inode_alloc+0x34/0x160 [ 1273.163333] should_failslab+0x5/0x20 [ 1273.164134] kmem_cache_alloc+0x5b/0x310 [ 1273.165032] security_inode_alloc+0x34/0x160 [ 1273.165958] inode_init_always+0xa4e/0xd10 [ 1273.166850] ? shmem_destroy_inode+0x70/0x70 [ 1273.167777] alloc_inode+0x84/0x240 [ 1273.168549] new_inode+0x23/0x250 [ 1273.169290] shmem_get_inode+0x15e/0xbc0 [ 1273.170160] __shmem_file_setup+0xb8/0x320 [ 1273.171051] ? _copy_from_user+0xfb/0x1b0 [ 1273.171929] __do_sys_memfd_create+0x275/0x450 [ 1273.172897] ? memfd_file_seals_ptr+0x170/0x170 [ 1273.173891] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1273.174992] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1273.176073] do_syscall_64+0x33/0x40 [ 1273.176868] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1273.177958] RIP: 0033:0x7f2882533b19 [ 1273.178741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1273.182638] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1273.184248] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2882533b19 [ 1273.185757] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f288258d0fb [ 1273.187267] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1273.188781] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1273.190284] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 14:52:12 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x78}, "e77672d8bac270bc6d739964a8148adeaebc6b64b0a28a83eaa4478288a4264c7af188b3f1797fa8dd73d50b5e52ec66560acab3fbf41d33819760cdf5ad9b162e3ab67b97ad4fc1372e6876a15145db77d48dfbf185aa9b922557204f1c05c8d80681908e2ab32dff7343186af7e78f3e14509aee158100"}, 0x7c) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1a}, "d8cf0850ac526f9f48ca626993a4d95caf0a1c0129ea66baf33f"}, 0x1e) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x3f, 0xc9}}}, 0x6) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96363f", 0x38, 0x2c, 0x0, @private2, @mcast2, {[@dstopts={0x32}], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "001000", 0x0, 0x0, 0x0, @private0, @private2}}}}}}}, 0x0) syz_emit_ethernet(0x3a5, &(0x7f0000000340)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{}], @ipv6=@gre_packet={0x6, 0x6, "51dc9a", 0x36b, 0x2f, 0xff, @private0, @mcast1, {[@fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x2, 0x63}, @routing={0x4e, 0x14, 0x1, 0x8, 0x0, [@mcast2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, @remote, @mcast1, @mcast1, @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00']}, @srh={0x2e, 0x6, 0x4, 0x3, 0xac, 0x30, 0x3, [@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}, @fragment={0xfa, 0x0, 0x2c, 0x1, 0x0, 0x3, 0x68}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xf7, 0x0, [0x6], "05e966cab8cac802bdc269f1a172d814ebab9588e562ff9aa8a209eceb3200f65da4e408b9a4c99c3e5c80026e13b0ff91c67a06613a9fe1038863d4304ad481c698c0e2dc86d5d49e290ba7f4ec0a45792e8cff4d69e74fa4da7ae44db311019255ef610b7e6d65685370df697e0435440fe3ae285a3d6d48560a1ef4ba70344d3c28d9a473e28c30605c1f9256103b861dae0311159c1db60d74c8b3c42e2ddefbe95fcc971bcc557ee8e08cbc21d7ec70b579dcc359f07c2b37f8db6b17398812ddd5a231bd61b1b832357024028034af76ece4f112ac957c39d7969e44d5f75ffd6803052a64381ae1a4534ecb43c1910b0071dee3"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x800, 0x4], "ab9463cab985842a0c5e05d9fe707d93b929a5341d982610e10b225a042d7d91ff49e78d0debd2dc18"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x800, 0xf0cb, 0x200], "9442e05129034cc43eba3b159dfa3283863f383c8d2a04d9083473229dd03ccfc611af861f43dc5fd7da06efb27e3eadeb1b38c75002b44e3bde275dd31d0cb980135f277444af711437376f112b880acf82305cc9df246e6e99f8895d5e7212a41410f14f"}, {0x8, 0x88be, 0x2, {{0x6, 0x1, 0x81, 0x0, 0x0, 0x2}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x1, {{0x3, 0x2, 0x20, 0x3, 0x0, 0x3, 0x2, 0x3d}, 0x2, {0x81, 0x200, 0x1, 0x9, 0x1}}}, {0x8, 0x6558, 0x4, "371d24716c860397e8014dba6db43992e3e290a910a91d91d35150b99bae4cfb1c284350c3acefce2aa66d159458d7678ff8dc06296961590aa286d29d620349cd73e925004765c2ab0b51c33445d76ecef7be9c25a1de59e2d2146819963b467f61c90fc3e98aebf885eb8013bdddf9308daeca2f4877de4d02778e93a282f5533c6b2ebc2a4ee477077400b7cea7910cb21ec456eee330b72c81a5dd2dc1be0aa1a968a3b9"}}}}}}}}, &(0x7f0000000000)={0x0, 0x2, [0xe90, 0xaef, 0x5de, 0x816]}) [ 1273.215818] loop1: detected capacity change from 0 to 32256 [ 1273.271824] loop2: detected capacity change from 0 to 262144 [ 1273.309424] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1273.312679] EXT4-fs (loop2): get root inode failed [ 1273.313933] EXT4-fs (loop2): mount failed 14:52:12 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:52:12 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1273.390117] loop7: detected capacity change from 0 to 262144 [ 1273.398055] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1273.399996] EXT4-fs (loop7): group descriptors corrupted! 14:52:12 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}, {&(0x7f0000000180)="13e066f586cfbfa0f556", 0xa, 0x7}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:52:12 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0x0, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1273.467286] udc-core: couldn't find an available UDC or it's busy [ 1273.469129] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1279.402053] Bluetooth: hci0: command 0x0406 tx timeout 14:52:28 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:52:28 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:52:28 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0x0, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:52:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280), 0x0, 0x2100}], 0x0, &(0x7f0000000080)) 14:52:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 7) 14:52:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@version_9p2000}]}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000140)=ANY=[]}, @devid=r5}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000003080)={r5, "1f97da2d965551153358c180300791a3"}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000280)={r5, "2cd18e64bdb78ccd0bfaa4f7928b4747"}) 14:52:28 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:52:28 executing program 0: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0x0, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1289.052382] loop7: detected capacity change from 0 to 262144 [ 1289.060824] FAULT_INJECTION: forcing a failure. [ 1289.060824] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.063730] CPU: 0 PID: 8888 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1289.065425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.067467] Call Trace: [ 1289.068122] dump_stack+0x107/0x167 [ 1289.069033] should_fail.cold+0x5/0xa [ 1289.070019] ? create_object.isra.0+0x3a/0xa20 [ 1289.071227] should_failslab+0x5/0x20 [ 1289.072169] kmem_cache_alloc+0x5b/0x310 [ 1289.073194] create_object.isra.0+0x3a/0xa20 [ 1289.074277] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1289.075541] kmem_cache_alloc+0x159/0x310 [ 1289.076586] security_inode_alloc+0x34/0x160 [ 1289.077676] inode_init_always+0xa4e/0xd10 [ 1289.078723] ? shmem_destroy_inode+0x70/0x70 [ 1289.079803] alloc_inode+0x84/0x240 [ 1289.080708] new_inode+0x23/0x250 [ 1289.081572] shmem_get_inode+0x15e/0xbc0 [ 1289.082585] __shmem_file_setup+0xb8/0x320 [ 1289.083619] ? _copy_from_user+0xfb/0x1b0 [ 1289.084646] __do_sys_memfd_create+0x275/0x450 [ 1289.085769] ? memfd_file_seals_ptr+0x170/0x170 [ 1289.086914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1289.088194] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1289.089442] do_syscall_64+0x33/0x40 [ 1289.090336] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.091556] RIP: 0033:0x7f2882533b19 [ 1289.092452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1289.096860] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1289.098689] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2882533b19 [ 1289.100387] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f288258d0fb [ 1289.102085] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1289.103767] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1289.105466] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 [ 1289.112471] udc-core: couldn't find an available UDC or it's busy [ 1289.113556] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1289.114542] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1289.115759] EXT4-fs (loop7): group descriptors corrupted! [ 1289.116807] loop2: detected capacity change from 0 to 262144 14:52:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xffffff81) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0xfffffffffffffde1}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f00000008c0)="071e9f7358ec922343d9786f3a5ffc4951d0a6a9f38dda8a9bae8f6f3734e082993d557367e24150405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7b69b7185e6784ba4ef00"/105, 0x69) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000000840), 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="01007fe8ff000067873a8b58", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c65302f66696c653200"]) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x6, 0x0, 0xcb, 0x1f, 0x0, 0x0, 0x80, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x5}, 0x2060, 0x1, 0x999, 0x2, 0x3, 0x3, 0x7, 0x0, 0x1, 0x0, 0x1}, r4, 0x7, r3, 0x4) r5 = getpid() syz_open_procfs(r5, &(0x7f0000000040)='schedstat\x00') mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) [ 1289.130554] loop5: detected capacity change from 0 to 262144 [ 1289.150529] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1289.153133] EXT4-fs (loop2): get root inode failed [ 1289.153752] EXT4-fs (loop2): mount failed 14:52:28 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1289.185469] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1289.190628] EXT4-fs (loop5): get root inode failed [ 1289.191845] EXT4-fs (loop5): mount failed 14:52:28 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:52:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77", 0x35, 0x2100}], 0x0, &(0x7f0000000080)) 14:52:28 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x42000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x448, 0x36, 0x100, 0x70bd29, 0x25dfdbfd, {0x1e}, [@generic="885b6b3326e7e172258f8db6e07730710feab6330b7d1f2015359f6411fa16b45ef351f527ac32e3d6dad47c70e591cf3236d2423cf3ad3e93786d82b0ecf522f795901170668579a8c57a09b5d69a97502d0a84ba86a88c85c9d8e8be6ec6fc4233faccfcbbdb30f8c10dd7566fbf4ff131abc7d27c4c764b12ea318a81d3ea1eec73f43a59f80a110e84885c93b70b0e9d2286809871af4d89f09213e2d0345dc240480b265643e855cc2b20eced9b2823af61372554596a2e1464552db790990f92e9df0406998da889e2911a973d76a18de87b8f5cf2df46e6b9ec1e40ae842261b8524e0c7b36ad73055f42dc6f805658077e2cae", @typed={0xc, 0x25, 0x0, 0x0, @u64=0x7}, @generic="08eb0bbe4db403c1895f1103f7ae3a6727e4bd6f5151a42a4f221084e5c64078d78fe54674c68fb558e804a04efeac22bc59ffcc00940261018ed59152f5e177e53a8228a4ab26b16a4b5670535dac03ea9a35044f82c5c90bd74ea73ffca28acbd977b8e4b5877cbfbf30bd43acedaedf7e714c0642783dd5e0f82f0a99ca7bf902ebf5ae66d193018d979823e8", @nested={0x1ab, 0x5b, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @u32=0xb5f9}, @typed={0x8, 0x61, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x57, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@remote}, @generic="d1a1d37895210041f4de32a7163e2081f7fe1d58c9adc0b4514fe392b75131f1baaa472a48442f0e43c67d2f94167c2972ceede47648935bc64001fdcfde9da089ddd26e33dd9e364bb6c9ce92613f52d04ebeb466925eb2809920f30ccc141c25a4daacf08b05d0cdb4ff5f95d87dd0a65313d5b4ed20a8797011860107ba8fe7121061e1", @generic="e3ec605ceae58133b1b397edbba44c83d56c0c6bad6c60b3b233f2b02aaf", @typed={0xc, 0x6a, 0x0, 0x0, @u64=0x25}, @typed={0xd7, 0x34, 0x0, 0x0, @binary="f235595a7233db67a897474f07b4f933186e1e0844888968fb197a560d191665456d4934813b93eacd28425fbf26a5c1bac4f7af8d394fd8e39f04592b764e2b0a4df0f4c02e0199d2df4642f1e04c1dace6a2827e228abd0af5f0931cd0a8af3448c61185727fd3d7b29cfa1820372a92d95fa8c485a4ce258be20ef027671536e990a4bb46687899b97e9259b5184bfc6456cabef1cf66a7d8650393b1dda7532e043d9e6ac91d2f894bbf714ada9084afa1b94383972d7dcab3537ee5a0eaa88f40bd6227f02ba449a2ac96d66107c4bf98"}, @generic]}, @nested={0xc2, 0x6b, 0x0, 0x1, [@typed={0x8, 0x90, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="a555781e453904ae84d7a839453aeebd698beba5e536ea0433109cc7f32fb53bae558fe3f9accd418303abe94a3d4528a7c58bdf1c3f1067f49d020ec11b21d30428acc614d0fb5d9c72ae3b328564626bb095a42ce858494e3817a65863430bf5452bbcf71ec3e3a689623bd1373a898bd7c948daa96e32210b07a79df7cbb789e1dfe509e5e1abf740af4b9a9f3f7e012c9af538d9d7b69211e499073c65e0d0b80464fa8990e01e6498be9c23767ce6f9e6fb92cf"]}, @nested={0x30, 0x7, 0x0, 0x1, [@typed={0x14, 0x66, 0x0, 0x0, @ipv6=@private1}, @typed={0x4, 0x51}, @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x100000001}, @typed={0x4, 0x25}, @typed={0x4, 0x65}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x4004000}, 0x24008000) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2074, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1289.230484] loop7: detected capacity change from 0 to 262144 [ 1289.256811] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1289.257976] EXT4-fs (loop7): group descriptors corrupted! [ 1289.262267] loop2: detected capacity change from 0 to 262144 14:52:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 8) 14:52:28 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1289.305980] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) [ 1289.316927] FAULT_INJECTION: forcing a failure. [ 1289.316927] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.318307] CPU: 1 PID: 8912 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1289.319104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.320059] Call Trace: [ 1289.320368] dump_stack+0x107/0x167 [ 1289.320800] should_fail.cold+0x5/0xa [ 1289.321242] ? __d_alloc+0x2a/0x990 [ 1289.321661] should_failslab+0x5/0x20 [ 1289.322100] kmem_cache_alloc+0x5b/0x310 [ 1289.322569] ? trace_hardirqs_on+0x5b/0x180 [ 1289.323067] __d_alloc+0x2a/0x990 [ 1289.323469] d_alloc_pseudo+0x19/0x70 [ 1289.323911] alloc_file_pseudo+0xce/0x250 [ 1289.324392] ? alloc_file+0x5a0/0x5a0 [ 1289.324843] ? shmem_get_inode+0x55c/0xbc0 [ 1289.325339] __shmem_file_setup+0x144/0x320 [ 1289.325836] ? _copy_from_user+0xfb/0x1b0 [ 1289.326315] __do_sys_memfd_create+0x275/0x450 [ 1289.326839] ? memfd_file_seals_ptr+0x170/0x170 [ 1289.327379] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1289.327982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1289.328585] do_syscall_64+0x33/0x40 [ 1289.329019] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.329611] RIP: 0033:0x7f2882533b19 [ 1289.330042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1289.332166] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1289.333046] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2882533b19 [ 1289.333864] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f288258d0fb [ 1289.334684] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1289.335497] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1289.336312] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 [ 1289.342615] EXT4-fs (loop2): get root inode failed [ 1289.343274] EXT4-fs (loop2): mount failed [ 1289.398133] udc-core: couldn't find an available UDC or it's busy [ 1289.399076] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 14:52:41 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:52:41 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:52:41 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:52:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 9) 14:52:41 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:52:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77", 0x35, 0x2100}], 0x0, &(0x7f0000000080)) 14:52:41 executing program 0: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x116f, &(0x7f0000000180)={0x0, 0x2008001, 0x10, 0x0, 0x59}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd4c", 0x17}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x101, 0xffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000580)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x4000, @fd, 0x8, 0x0, 0x0, 0x10}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001b00)={&(0x7f0000000780)=@un=@abs, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/241, 0xf1}, {&(0x7f0000000600)=""/45, 0x2d}, {&(0x7f0000001900)=""/68, 0x44}, {&(0x7f0000001980)=""/91, 0x5b}, {&(0x7f0000001a00)=""/70, 0x46}], 0x6}, 0x0, 0x40010000, 0x0, {0x2}}, 0x3) io_uring_enter(r1, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r1, 0x4, 0x1) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7, 0x0, 0x0, 0x36a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)) r6 = creat(&(0x7f0000000640)='./file0\x00', 0x13b) r7 = syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r7, {r0}}, './file0\x00'}) syz_io_uring_submit(r5, r8, &(0x7f0000000500)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x80000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x10, r7, 0x10000000) syz_io_uring_submit(r2, r9, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index=0x2, 0x2, 0x4, 0xaf, 0x1c, 0x1, {0x1}}, 0x0) 14:52:41 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17, 0x60000}, {0x0, 0x0, 0x1000000a00}], 0x88044c, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x40000, 0x115) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) ioctl$FITRIM(0xffffffffffffffff, 0xc020662a, &(0x7f0000000100)={0xfffffffeffd, 0x4}) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x482800, 0x4) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x10000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, 0xfffffffffffffffc, 0x355, 0x0, 0x12345}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000001a00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000019c0)={&(0x7f0000000440)=@l2, 0x80, &(0x7f0000000900)=[{&(0x7f0000000640)=""/102, 0x66}, {&(0x7f00000006c0)=""/71, 0x47}, {&(0x7f0000000400)=""/26, 0x1a}, {&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/234, 0xea}], 0x5, &(0x7f0000000500)=""/70, 0x46}, 0x0, 0x3, 0x1, {0x2}}, 0x4156) openat(0xffffffffffffffff, &(0x7f0000001a40)='./file2/file0\x00', 0x400, 0x112) chdir(&(0x7f0000000300)='./file2\x00') futimesat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) openat(r1, &(0x7f00000002c0)='./file2\x00', 0x280, 0x40) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') openat(r0, &(0x7f0000000580)='./file0\x00', 0x20080, 0x4) [ 1302.454167] loop2: detected capacity change from 0 to 262144 [ 1302.480745] FAULT_INJECTION: forcing a failure. [ 1302.480745] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.482920] CPU: 0 PID: 8942 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1302.484172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1302.485688] Call Trace: [ 1302.486166] dump_stack+0x107/0x167 [ 1302.486830] should_fail.cold+0x5/0xa [ 1302.487524] ? create_object.isra.0+0x3a/0xa20 [ 1302.488346] should_failslab+0x5/0x20 [ 1302.489038] kmem_cache_alloc+0x5b/0x310 [ 1302.489770] create_object.isra.0+0x3a/0xa20 [ 1302.490579] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1302.491498] kmem_cache_alloc+0x159/0x310 [ 1302.492049] udc-core: couldn't find an available UDC or it's busy [ 1302.492282] __d_alloc+0x2a/0x990 [ 1302.492301] d_alloc_pseudo+0x19/0x70 [ 1302.493100] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1302.493657] alloc_file_pseudo+0xce/0x250 [ 1302.496027] ? alloc_file+0x5a0/0x5a0 [ 1302.496718] ? shmem_get_inode+0x55c/0xbc0 [ 1302.497498] __shmem_file_setup+0x144/0x320 [ 1302.498282] ? _copy_from_user+0xfb/0x1b0 [ 1302.499034] __do_sys_memfd_create+0x275/0x450 [ 1302.499867] ? memfd_file_seals_ptr+0x170/0x170 [ 1302.500718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1302.501697] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1302.502637] do_syscall_64+0x33/0x40 [ 1302.503320] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1302.504251] RIP: 0033:0x7f2882533b19 [ 1302.504935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1302.508226] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1302.509614] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2882533b19 [ 1302.510917] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f288258d0fb [ 1302.512229] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1302.513549] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1302.514842] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 [ 1302.517165] loop7: detected capacity change from 0 to 262144 14:52:41 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:52:41 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1302.529280] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) [ 1302.533335] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1302.534383] EXT4-fs (loop7): group descriptors corrupted! [ 1302.535485] EXT4-fs (loop2): get root inode failed [ 1302.536075] EXT4-fs (loop2): mount failed [ 1302.551991] loop5: detected capacity change from 0 to 262144 [ 1302.578173] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1302.580164] EXT4-fs (loop5): get root inode failed [ 1302.580762] EXT4-fs (loop5): mount failed [ 1302.624299] FAULT_INJECTION: forcing a failure. [ 1302.624299] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.625718] CPU: 1 PID: 8959 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1302.626497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1302.627442] Call Trace: [ 1302.627747] dump_stack+0x107/0x167 [ 1302.628167] should_fail.cold+0x5/0xa [ 1302.628602] ? __alloc_file+0x21/0x320 [ 1302.629055] should_failslab+0x5/0x20 [ 1302.629494] kmem_cache_alloc+0x5b/0x310 [ 1302.629957] __alloc_file+0x21/0x320 [ 1302.630389] alloc_empty_file+0x6d/0x170 [ 1302.630852] alloc_file+0x5e/0x5a0 [ 1302.631261] alloc_file_pseudo+0x16a/0x250 [ 1302.631739] ? alloc_file+0x5a0/0x5a0 [ 1302.632177] ? shmem_get_inode+0x55c/0xbc0 [ 1302.632663] __shmem_file_setup+0x144/0x320 [ 1302.633167] ? _copy_from_user+0xfb/0x1b0 [ 1302.633642] __do_sys_memfd_create+0x275/0x450 [ 1302.634163] ? memfd_file_seals_ptr+0x170/0x170 [ 1302.634700] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1302.635300] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1302.635882] do_syscall_64+0x33/0x40 [ 1302.636314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1302.636906] RIP: 0033:0x7f2882533b19 [ 1302.637326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1302.639403] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1302.640272] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2882533b19 [ 1302.641089] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f288258d0fb [ 1302.641897] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1302.642707] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1302.643516] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 14:52:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 10) 14:52:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77", 0x35, 0x2100}], 0x0, &(0x7f0000000080)) 14:52:41 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1302.667797] loop2: detected capacity change from 0 to 262144 14:52:41 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}, {&(0x7f0000000100)="9db2c9288fec54831e2afd51589a81c37b8e016b0710f31c60e7b125eb4042fcd721dc4b5940683d225484f901253d98dd912ee20f384893f1207bf8236cac82b25a83b217f26dca479c236cfd1c14e96bad0210978ee4739151c086e8f0013b36da304adcddded8641574cea0a66816eb27b4e2ea83b2e9d1f4e4a477", 0x7d, 0x8}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1302.676474] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) [ 1302.678842] EXT4-fs (loop2): get root inode failed [ 1302.679631] EXT4-fs (loop2): mount failed 14:52:41 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:52:41 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1302.737250] loop7: detected capacity change from 0 to 262144 [ 1302.748518] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1302.768319] udc-core: couldn't find an available UDC or it's busy [ 1302.769759] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 14:52:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 11) 14:52:54 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:52:54 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:52:54 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x6}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0xff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) gettid() sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0xee01, 0xffffffffffffffff}}, './file1\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x44024}, 0x800) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="20ae26bd7000fddb17dd4fdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x40000000) r7 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r7, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 14:52:54 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1315.297851] FAULT_INJECTION: forcing a failure. [ 1315.297851] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.300336] CPU: 1 PID: 8994 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1315.301787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1315.303539] Call Trace: [ 1315.304101] dump_stack+0x107/0x167 [ 1315.304871] should_fail.cold+0x5/0xa [ 1315.305691] ? create_object.isra.0+0x3a/0xa20 [ 1315.306651] should_failslab+0x5/0x20 [ 1315.307457] kmem_cache_alloc+0x5b/0x310 [ 1315.308328] create_object.isra.0+0x3a/0xa20 [ 1315.309265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1315.310348] kmem_cache_alloc+0x159/0x310 [ 1315.311234] __alloc_file+0x21/0x320 [ 1315.312018] alloc_empty_file+0x6d/0x170 [ 1315.312867] alloc_file+0x5e/0x5a0 [ 1315.313631] alloc_file_pseudo+0x16a/0x250 [ 1315.314521] ? alloc_file+0x5a0/0x5a0 [ 1315.315337] ? shmem_get_inode+0x55c/0xbc0 [ 1315.316248] __shmem_file_setup+0x144/0x320 [ 1315.317167] ? _copy_from_user+0xfb/0x1b0 [ 1315.318044] __do_sys_memfd_create+0x275/0x450 [ 1315.319000] ? memfd_file_seals_ptr+0x170/0x170 14:52:54 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="4616f283a69f9262ee37c73edacf77a3b26f8252d5ef384a73cb6062611ef1c38e4a42b387040cec05bdd69cedbc48b5edd63cdfd36173c14b5e945e867316026c6cdf81409f2f911da431344607e0ea8df8a74a2cb3a7d7c58cf90e0b362acd181aacf4fe4a40c5e3cd600fc218e85bb8c15f72ec4cc10a0252ec25d68be0ce122cca2b107b7c5707d2d97b972c9fcf60afc31aa0cbe90cf4ef21629eb9c7341b43baf70154497fac52301865d7a3ca33c75544b9a76a5d23c8a2806c1153392ca85db5ee1f55470e0bf166cbf263b1c8efaaddff231ae9bd427c096fd3e997d9b6058ad0542a8b2c14", 0xea}], 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:52:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26", 0x4f, 0x2100}], 0x0, &(0x7f0000000080)) 14:52:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x8000000) r3 = syz_open_procfs(0x0, 0x0) writev(r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x88b02, 0x0) syz_io_uring_setup(0x33c4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20d315) [ 1315.319993] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1315.321343] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1315.322438] do_syscall_64+0x33/0x40 [ 1315.323232] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1315.324309] RIP: 0033:0x7f2882533b19 [ 1315.325104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1315.329190] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1315.330807] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2882533b19 [ 1315.331465] udc-core: couldn't find an available UDC or it's busy [ 1315.332324] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f288258d0fb [ 1315.332337] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1315.332347] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1315.332358] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 [ 1315.337502] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 14:52:54 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1315.360638] loop7: detected capacity change from 0 to 262144 [ 1315.375675] loop2: detected capacity change from 0 to 262144 14:52:54 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1315.386788] loop5: detected capacity change from 0 to 262144 [ 1315.399709] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1315.409620] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) [ 1315.417331] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1315.422333] EXT4-fs (loop5): get root inode failed [ 1315.423093] EXT4-fs (loop5): mount failed [ 1315.424438] EXT4-fs (loop2): get root inode failed [ 1315.425690] EXT4-fs (loop2): mount failed 14:52:54 executing program 0: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:52:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26", 0x4f, 0x2100}], 0x0, &(0x7f0000000080)) 14:52:54 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1315.523314] loop2: detected capacity change from 0 to 262144 14:52:54 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0x0, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:52:54 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:52:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 12) [ 1315.580421] loop7: detected capacity change from 0 to 262144 [ 1315.585845] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1315.587732] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) 14:52:54 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1315.591849] EXT4-fs (loop2): get root inode failed [ 1315.593073] EXT4-fs (loop2): mount failed [ 1315.642824] FAULT_INJECTION: forcing a failure. [ 1315.642824] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.645258] CPU: 1 PID: 9032 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1315.646695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1315.648435] Call Trace: [ 1315.649011] dump_stack+0x107/0x167 [ 1315.649778] should_fail.cold+0x5/0xa [ 1315.650578] ? security_file_alloc+0x34/0x170 [ 1315.651524] should_failslab+0x5/0x20 [ 1315.652321] kmem_cache_alloc+0x5b/0x310 [ 1315.653192] security_file_alloc+0x34/0x170 [ 1315.654115] __alloc_file+0xb7/0x320 [ 1315.654903] alloc_empty_file+0x6d/0x170 [ 1315.655754] alloc_file+0x5e/0x5a0 [ 1315.656502] alloc_file_pseudo+0x16a/0x250 [ 1315.657404] ? alloc_file+0x5a0/0x5a0 [ 1315.658220] ? shmem_get_inode+0x55c/0xbc0 [ 1315.659117] __shmem_file_setup+0x144/0x320 [ 1315.660019] ? _copy_from_user+0xfb/0x1b0 [ 1315.660900] __do_sys_memfd_create+0x275/0x450 [ 1315.661865] ? memfd_file_seals_ptr+0x170/0x170 [ 1315.662848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1315.663973] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1315.665068] do_syscall_64+0x33/0x40 [ 1315.665849] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1315.666923] RIP: 0033:0x7f2882533b19 [ 1315.667703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1315.671543] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1315.673144] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2882533b19 [ 1315.674625] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f288258d0fb [ 1315.676105] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1315.677600] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1315.679079] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 [ 1315.767214] udc-core: couldn't find an available UDC or it's busy [ 1315.768147] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 14:53:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x10000) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80010, r1, 0x8000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x30, 0x80, 0x23456, {0x0, r6}}, 0x714) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r4}}, 0x101) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) 14:53:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26", 0x4f, 0x2100}], 0x0, &(0x7f0000000080)) 14:53:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = openat(r0, &(0x7f0000000780)='./file0\x00', 0x2c0000, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x10001, 0x81}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {0x0}, {0x0}, {0x0}], 0x4) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000007c0)={{}, {}, [{0x2, 0x2, 0xee01}], {0x4, 0x4}, [{}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x2, 0xffffffffffffffff}, {}, {}], {}, {0x20, 0x6}}, 0x5c, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r5 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x1, 0x0, 0x0, 0x880000, &(0x7f00000006c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c633d3078303030303030303030303030303030392c736d61636b66736861743d285e9e4040232d2c00"]) openat$incfs(r5, 0x0, 0x501200, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4002) fallocate(0xffffffffffffffff, 0x1, 0x6, 0x0) fallocate(r3, 0x0, 0x0, 0x8000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) 14:53:14 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1334.826277] loop2: detected capacity change from 0 to 262144 [ 1334.846213] udc-core: couldn't find an available UDC or it's busy [ 1334.847931] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1334.858349] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) [ 1334.864110] EXT4-fs (loop2): get root inode failed [ 1334.865343] EXT4-fs (loop2): mount failed [ 1334.869470] nfs: Unknown parameter '!%//-Ð]*![]&-%}{' [ 1334.919527] cgroup2: Unknown parameter './file0' 14:53:14 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:53:14 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0x0, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:53:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 13) 14:53:14 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:53:14 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:53:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db1", 0x5c, 0x2100}], 0x0, &(0x7f0000000080)) [ 1335.016651] nfs: Unknown parameter '!%//-Ð]*![]&-%}{' [ 1335.020138] FAULT_INJECTION: forcing a failure. [ 1335.020138] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.022722] CPU: 0 PID: 9076 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1335.024262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1335.026125] Call Trace: [ 1335.026727] dump_stack+0x107/0x167 [ 1335.027544] should_fail.cold+0x5/0xa [ 1335.028405] ? create_object.isra.0+0x3a/0xa20 [ 1335.029437] should_failslab+0x5/0x20 [ 1335.030290] kmem_cache_alloc+0x5b/0x310 [ 1335.031217] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1335.032454] create_object.isra.0+0x3a/0xa20 [ 1335.033454] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1335.034597] kmem_cache_alloc+0x159/0x310 [ 1335.035533] security_file_alloc+0x34/0x170 [ 1335.036518] __alloc_file+0xb7/0x320 [ 1335.037360] alloc_empty_file+0x6d/0x170 [ 1335.038272] alloc_file+0x5e/0x5a0 [ 1335.039071] alloc_file_pseudo+0x16a/0x250 [ 1335.040010] ? alloc_file+0x5a0/0x5a0 [ 1335.040865] ? shmem_get_inode+0x55c/0xbc0 [ 1335.041835] __shmem_file_setup+0x144/0x320 [ 1335.042841] ? _copy_from_user+0xfb/0x1b0 [ 1335.043776] __do_sys_memfd_create+0x275/0x450 [ 1335.044795] ? memfd_file_seals_ptr+0x170/0x170 [ 1335.045858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1335.047027] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1335.048173] do_syscall_64+0x33/0x40 [ 1335.049005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1335.050150] RIP: 0033:0x7f2882533b19 [ 1335.050975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1335.055073] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1335.056780] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2882533b19 [ 1335.058404] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f288258d0fb [ 1335.059989] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1335.061587] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1335.063179] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 [ 1335.075559] loop7: detected capacity change from 0 to 262144 14:53:14 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0x0, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:53:14 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="a3", 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x30, r1, 0x310c6000) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="95a572c0baee91aff5fe3e5c450f650e0a7b9be7983669ea473a9a001890cf7a8e58bce6e03d0fecb25d59ad9468ed90cf0cf60d419ba9", 0x37, 0x2adc2187, 0x0, 0x4, r4}, &(0x7f0000000180)) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r5, r2) 14:53:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x1a240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xd}, 0x4a02, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3a0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x5, 0x0, 0x1, {0x0, r5}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x8000000) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x77359400}}) io_uring_enter(r2, 0x58a7, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000003c0)='!!$.-]$:/\x00') sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000017020007002e2f66696c6530ffa389a16c4467127b58d56db4ed91d242418fdb660a611cc0643d88b733b2f26a0d491e5ba52d739709bceca5a05fc4c3418639d06be5cdd766568461f38c9233a45c294923fbc2c008b667caf5eb1d8f18fa8ffacf35e0de936172aeab677a26f30a140f6367ef2b30c774f42af581cd58bfc186dd2c749f7edc4b22c7d5c83375da90b3055d4287a0c36844722ccb8571590afc7375407c2b713df56067b3709e687d7eb9ef18318990a8c3aa48224b1a440ea764a29e288181aa507eb6cd096c94e9056b13b57ebccf626a117631069733714ebc77b495ca951c763b212ab2b35c"], 0x10) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) creat(&(0x7f0000000300)='./file0\x00', 0x3) [ 1335.100957] loop2: detected capacity change from 0 to 262144 [ 1335.108694] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1335.140050] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) [ 1335.153171] EXT4-fs (loop2): get root inode failed [ 1335.154322] EXT4-fs (loop2): mount failed 14:53:14 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}, {'\\.,/'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:53:14 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:53:14 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1335.239030] loop5: detected capacity change from 0 to 262144 [ 1335.279015] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1335.285821] EXT4-fs (loop5): get root inode failed [ 1335.287029] EXT4-fs (loop5): mount failed [ 1335.298597] loop7: detected capacity change from 0 to 262144 [ 1335.313128] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1335.331328] udc-core: couldn't find an available UDC or it's busy [ 1335.333151] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1335.364123] nfs: Unknown parameter '!%//-Ð]*![]&-%}{' 14:53:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 14) 14:53:29 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:53:29 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:53:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1ec, 0x1a, 0x100, 0x70bd2d, 0x25dfdbfd, {0x5}, [@generic="8963af720a1fff1779a979fe8432e1b08eb61a00b2ec1bee7e63932b4c61801661ed018340086236db1c73e3fe415864fa02a482346bbbef85e9c7a194470c21cbf17033af0d348dc5838451e1c99f1b312079601d305eb94accea2bcfbd42f7a7007a7c5199b05a2e1544d13e2eba33e20d55e25d2df72c3f6746af6b3d7255c6223b6943b96c2fa6e54e1f6035671f0655a6573c235d61e27d1cb89e38e2ed047c301ccdc4ee0386765bb267363b7cec260bd90ee717cd7ad12fd884cd9ca0bc42fedb2a433022e4533c612f91cceb7372b1514ae1046d3710868fe98d4bea288f132b202689", @generic="f42f5900056f530c01071df63487ccaac24a98350946a33ee01c8837b22d7cb2d89b6da804ec51104f51b07e8f60cd7a048e3a583e630564269b2f049c3b1fb2a5225343069df6bb45ae46c7b64c6aa3754ccaa4f21ecf2443c5ae6ba230e316012896f8de64e1be7dc3945e8a5f51117e1970d18a62c38f28bf97a61c8935f0ce5d3a90129ae730dc65932cb6c1cf27d5c2334cc7a4ad86e08086adb523e29e645750843e54268d1c055b58de8a559343e59233d73e4aec9623f74fad04dfe614c2c5ce9086a0135362147cf7fd9cb8079b295fd4824b5cb5a12f2bf2b4172f854285d25e4bf7f61ce24f9ecf1e31"]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4010}, 0x44000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) fstat(r2, &(0x7f0000000180)) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) [ 1350.630759] udc-core: couldn't find an available UDC or it's busy [ 1350.631831] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1350.639796] FAULT_INJECTION: forcing a failure. [ 1350.639796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1350.642584] CPU: 1 PID: 9119 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1350.643968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.645668] Call Trace: [ 1350.646207] dump_stack+0x107/0x167 [ 1350.646956] should_fail.cold+0x5/0xa 14:53:29 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:53:29 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x24}}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000840)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESHEX=r1]) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000380)=""/45, 0x2d}], 0x1, 0xffff57e9, 0x4) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000087", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="58fc202359e7b138063d30b74137f05100", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c08761f045797b00c000300fdffffffffffffff0c000400000001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x30004840) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/116, 0x74}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 14:53:29 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, 0x0) 14:53:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db1", 0x5c, 0x2100}], 0x0, &(0x7f0000000080)) [ 1350.647893] __alloc_pages_nodemask+0x182/0x600 [ 1350.648920] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1350.650158] ? lock_downgrade+0x6d0/0x6d0 [ 1350.650994] ? lock_acquire+0x197/0x470 [ 1350.651827] alloc_pages_vma+0xbb/0x410 [ 1350.652640] shmem_alloc_page+0x10f/0x1e0 [ 1350.653494] ? shmem_init_inode+0x20/0x20 [ 1350.654364] ? percpu_counter_add_batch+0x8b/0x140 [ 1350.655361] ? __vm_enough_memory+0x184/0x360 [ 1350.656280] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1350.657426] ? shmem_unuse_inode+0xf60/0xf60 [ 1350.658318] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 1350.659358] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1350.660402] shmem_write_begin+0xf7/0x1d0 [ 1350.661258] generic_perform_write+0x20a/0x4f0 [ 1350.662199] ? page_cache_prev_miss+0x310/0x310 [ 1350.663150] ? evict_inodes+0x470/0x470 [ 1350.663956] ? generic_write_checks+0x2ad/0x390 [ 1350.664914] __generic_file_write_iter+0x39d/0x5d0 [ 1350.665930] generic_file_write_iter+0xdb/0x230 [ 1350.666880] ? iov_iter_init+0x3c/0x130 [ 1350.667689] new_sync_write+0x42c/0x660 [ 1350.668506] ? new_sync_read+0x6f0/0x6f0 [ 1350.669349] ? __x64_sys_pwrite64+0x201/0x260 [ 1350.670262] ? lock_release+0x680/0x680 [ 1350.671082] ? selinux_file_permission+0x92/0x520 [ 1350.672057] ? security_file_permission+0xb1/0xe0 [ 1350.673044] vfs_write+0x7c0/0xb10 [ 1350.673791] __x64_sys_pwrite64+0x201/0x260 [ 1350.674664] ? ksys_pwrite64+0x1b0/0x1b0 [ 1350.675523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1350.676583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.677641] do_syscall_64+0x33/0x40 [ 1350.678391] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1350.679419] RIP: 0033:0x7f28824e6ab7 [ 1350.680173] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1350.683934] RSP: 002b:00007f287faa8f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1350.685478] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28824e6ab7 [ 1350.686923] RDX: 000000000000005a RSI: 0000000020010000 RDI: 0000000000000004 [ 1350.688373] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1350.689814] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 1350.691261] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1350.708883] loop7: detected capacity change from 0 to 262144 14:53:30 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:53:30 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1350.744136] loop5: detected capacity change from 0 to 262144 [ 1350.748955] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1350.758612] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1350.760115] loop2: detected capacity change from 0 to 262144 [ 1350.765833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1350.767409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1350.767428] udc-core: couldn't find an available UDC or it's busy [ 1350.769051] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1350.769732] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1350.786954] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) [ 1350.795326] EXT4-fs (loop2): get root inode failed [ 1350.796108] EXT4-fs (loop2): mount failed 14:53:30 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, 0x0) 14:53:30 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:53:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db1", 0x5c, 0x2100}], 0x0, &(0x7f0000000080)) 14:53:30 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}]}}) pipe2(&(0x7f0000000080), 0x0) [ 1350.896337] loop2: detected capacity change from 0 to 262144 [ 1350.902268] loop7: detected capacity change from 0 to 262144 14:53:30 executing program 4: fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001e00)=ANY=[@ANYBLOB="01c292fa0c590e4ab46c4d12902cb973100997ecc8160e43545f5bb80e116b1797bcfd709223dfc710fc1eccd613778ee7028125c54e560aa9e866f92a80e03eab489b79d783b33b21f4b86c2cdf62ff093af3a8e3b28b3830211d5f079540147c11d3d07b75892f82c70896e7e12a1a93f82cff5be5f9bc944e460d56897a2305e1e0eb416885d16dcf97bcc1500ee6dfe341aebb7d5b6d0e8d44f04b7b8ee661f8b245f9cf6cca013747791fc7c0d8bc11350928d7fe53cb7088dd639b1785f4ecc34894cbf006abcd34b524b238b0bff3c995e0cf04d87e19b0c114b65734e82b10b9c85457232deef44cb76a436e5ae523ffa560e38e18bf3576b02e6ca584c62a57f792f17ad85997e716d53d7f69c73c0e9d0556d6f821c1125d03e3a9f3e3bf2441c281da4103b44909cbe1c0417efecd287e1efc5a7d44ddeff9711ed11783f8942cb376f99a2817dda361cb32c9aaf20585065357c2e1673ddeab0c772b44962871ff6157402aae6a355a54eef63533700c0b1894344bc008124051da135557b8bd578641a2040036b1506be39089a96b551e8ed44aee9773ce00c8c4fa2ce58b6cd3e219cef952ef6a8d2448dd1334c671f99422d4b7002f3c0e85282d1ed04a7905cef5a4552a8a01a5956b7508a7c3fcaa987b49ae8b1ce1692405d610f9e2a6ad176b2ccad113b22487ee7aaad5584e78b65cd71125803371ce8cb1bb3cdc042dfffe789080d488521b616ab28168f0547104020c3c47fa7b41a392f10e1e722d94ff22bd20d597438c1f70bb30ed152b629a8cb474f48228330902a673a86b90e05360c4a233f6d60bc8fe7375cb30a7ec78bc2c2223abb2a4fd9e16bd83313f7a64605ace2f53ecee61d787fda53adc17f9133d9b408d142165ea1402098384990097b5708657684bfac37a4e81399d96318a3d7dd8ba658c8cd748f5d64ab71d970f3d977a255a39f9e6188cec21ade85e2ba1cace64f3bca70fe6a91ca79c14281b01b65b1535cb1977732c27d4f328d3d784406cf38777033a0ceeb501b064bc12066fdb2ac748074684cc763d13bba4af1c154da199857fa0bfa3a4c51979eda45131ed400c2de0c2bbe314da58f8708655f41beb0e470725b2474d58f6003f38b731ee7faa3b346c27d2de234aacaeb0e3d1d72ccc2bb82f2a84844438585197d96cdf37f183192c024bd48bfaa89f88d775d09f9b5ad1f3556a07bcab80450fa442f7612a1c6b39adb4c2d908379c2573b8d113fce0d121fbc8bf26141d1bad5d4766214e569f63b73d80277fde174474a469f7763a627ebb0f7b35af96305aa18e213203975537ca4d7bdd9e0fe079777a752632d1653d7c41fdec82042889d90cff28b9e2b3dc4256b628c0304873db0ac99c6610de6fcf2ce97e5a35cad8d8bbf2bd5e6a078de47844d49085aeaaa9793ddcf38c43342c10394a1f2c8a9e020c80dac6e16392d585149d5a3c4ea5a4806dfcc6345bff93065d1aa94e9dc5b1e0f6c1817abd10cc7644f7f17149edc3d41258a4af11456609788b3ab6d87881f783fbb4bba5620583d2fcfa952f62bc5aa050067d35d469de50018bf8203009abfe22bafdc48475bd5a5c2eaf82524cec3d72a3cdae5c48cc26f06e075a5945485014a01c518c51e9ddea89afaacf2252c98f55575846d760a91008d23fdbe6a79b3f033e38d6f3863f222228535d7cc53ad4d600366cf44d7fba5802703b47a6ce621493a9ec3a217bda037c186525199a14491fccc8df4bd93ac1c0c7fde4616131e861d359bd506587158cbf0856b0765749eb424f82bac3fcf22795eb41249e9816ed725bc01831e7327e582c68d07173976df0493cf22db0b183574f5b0095a3c7e0abcf2bbada51437c2522061ed37d3885b5c9ff8277f45bad844f5c9effdaa0abf69512dc468c47df65f58ecf981c81335c6405a949ec76e8398194aa9bac7ee740f1b87db9a8fafb7f762524970c69c22277cbc216515c6ee73a833a6be7add73ad62e26f0719c1db73d2a1d751c40584b7b10d62d1642db46843c018aba126f835b91aceba3b9a75b1751b746369ad5328d40fb43eba26737f7a0742664f0413ae421b72688f1f427e3f319bacb42e5b4a5b4fa4890f72b2975ad8b3be86be983840560735819d9053ca24d59d76c4bdf8f683886151e45e6619777e27aef9f220c9dfd98610bd2a10c66b64ad06a7b2bef9dbe05b4ec5b08313868f82a564a4a339ff31aede1f9f63359249dfcb3a64f7afb153835870d55fdddf8db32e83f1299424356087a0a572dc99a7bf267e4e022a64c2766b9d17d68010eaa5ffee4c631ea1a46a328c48dde0101a661e1d9e6d3f8159863f797c131561be5198727d3eeed0fba08c2a65bab0e96921097bf1da0dfa7b22b2775953935ae1829d8e6ba50ffe3d228ab723e03dedd5290384843ec39e2ae769cd9d864c24fda01335e59a74b9b57729a25ba84e3dde7c9329f9e82b047a7958f4c4d6d2c432e5ae79372068e92e4d23fa2ee4bc8761a913fc32f5ae4ae717b2b59b5ebe33d8d5c16a421d316a85ba83d71a26326d14cb87b260b16591cb7f0637b0ee8b334195e64136765111898083004c02d4ad27c424922122a7f782ddcaea9f6db95ba56855d86ff0dcb619c4dc14716abad5450241d2a8e9554053f482f0ff69952673291e0da40a13bd73359e411fde538728241cdee2e032317cbf8267f14e9de97a56e428ca8a0032417dbdf1cb9c74f29991e9e3cf0d271650415b646f6b8490d7033bb8d552f7d2634f90a8d6b2409cdcb9a5d344bbffa48cf4911e5f3d2ad7a89d078793afb6af38ba8721b4ffd885a5b44c356d5256a62ecb4e0825f3dbe4fc495a16c75cda9a0b944b2478a788aa2606eb2330f83dcbca827ad86262b4d52312d00c31ec107d0522a23867006a229732732483161ce5993fe0f756842d84d353dfab50a2ccd80a5a9e58b5e01026dff5c4419b81c6059a990275a7a6db986bbe72bcca7188af2d147b5b3e59828ef92c2d03d1568465176ba93a8a8ad2390ce40c33f372c92ec664b1bd11b5c509d389c0c0bc9dd5f408b1fb4ec42364d319dd88c1722cdf63e05acf21db26d0e7c9458159107a427c608ede9351997c02a5b815db1d63316c76d7e200d74bf52c500d8189cb0fb7ba48cedca87f56d33b32dc97e236635d940ecf80d9fc3f5d454dc6aaa5e4d32110256823f334ca5196e73e36b9745c234246aaf5a3c2d6ed3515f5c54be0d55745bcbe0ba4881bf26a3cb38546c830f66afe55499eb890408a0e36a7644b058a3b546ee03fceb33557c2ba7868bf07dfd26cc2e24caf94c20bf1667dc9938bb74751635f632f98b4430c7e6f0b61f47ae442be93215a642e4d317fbab5a278bc6fb6efda06a9fc8d6b64ca867f1102b10a1fab42c360cce7e6f494967cf5590494addc9c629bace9169fc9db07471daf6f849bc24751a8d09ca73e7fb9e41a146241ab456e9f848286502f1df149fd205c414ca34ffe0c7eb114f78acec462a3856109d8d16a7c7278556e0b2593decd2affe71fec86d2ee0b6f5fab8ac278a4da53913772189a28d79c31ef75370da0677dd369ef9fa9ccfb28c121f5c69b628393a20f651f4777b44851beaa9ee8b7ba954d56d266c8a8df13d296d9f2c7e5836f8f7398cbe377e92715be4b0401a4c2e5db90a53f9748eb1c0effd5bb05adfeadaadb08407b89be555b8d45266e15b2dbac87c80ab842da59e7a190039fc04576bd96f5840f395160117beca1b2f5b19269284117042f24add7ef09953df85a4a00a2a9479e41bb4ac44ff72fc2311eef4c255252bbc3b90c640b66891d1349f8870169ee3d313c4b29fb4a2b6cc93186ccf683c822137ba28d22ef57de5247c7fa873dcac0358ba5113b7e318d8179ea12c6ea973f765602263eb7c369c2d5eceb35e41febb607d8e8112da7a1ec852522b312a8f971e21d2d8b0fff798a10f65c66bb891bac62b34eac3f58f807e95b85b2e6b11473c7c1c9eb79aa5692f07961f5d63939f3ebabbbc4dd4d506bf442f0696fc82928c5bfd1bba31e3511da3b19dec57f913e202942c86421ee57f499a35eadef2db0afb41aa77e2a7db3d260e7410fe3fd127f9def3e79d0fa0abe9ab05c5f95d49947881785c6f23bfe4a2082a8e6f44c5be1ef16309e116510552d3c5d424e199a4321c88dd372d71992723eaf54eb070ec0377b6f7d6b03f156088ba86bce1c8a72bbf5ef9db2e7dc802150d3a070558d883638fc43f218e871e31abde7fab2b72a204b8e20d746123f56868552877046161fdd2d75c562d94761bf22978ce0786d3658a1f547bc143e307a8142a72b8fc2012b1ed4fd1fd5cb5d99ac64b807ccc16a4e0d60920c7d68e324671d53238cc935ccff7f48778192e7895e8cb92735533b57369745e22abf858a7281f9e0f0c5079f46e2b0ce9c9fbd95097e6f3c9c56f14b388eff9461fba6a9086de556e1f8f162b53656d228491fc7c9a7d89ccc365224b93131b67d7a4e0e4928331dcdb05d466289c896fee425b127d88e3d3767f0defbfba3cf53bdf008349dbdc7c7ef9ebf0db4319889e53f0a06aa0d2de158b7d90b631d2b4968139f813c7b076dfa9427e28150a8997ee94991eaa49f8a2b6015428181ea63227285c405864c7df1fe6032bdf31865018b7bd8d81e4b39427a2b33b692d8bcc1de731910d4be2cc3872192dd6200fd9afb26fe4964ca97225f341a66a34f67adb5d4d77734fd9371d295cc4efe2376677bba1efe4cc9898eef6484b2d91b4d6e7e1d7d7e686f2f1e4b4c74de4932775fd2489d1b8b7bd30de282af366c3adf82fc1450828a1baf4f95ad8a9176f77dcd71598fc972592ea3c2dcec6f9cf9d2a1ab15adf2e1cc7877e226f20691adaac06ab77e11416bd37d8218f970beea7129fe0476a779bc6d50aab9432dea0bc3fd614ea623cb6e777c0a362d3821f56afadc8009eaa72fad7f37e642ec6d27d9d4186fff1711144ef61219fee4cd4ef2b9f1823086370081694190b353f6a23f906edfc8021f208fafba8c33a5850caad7303ad0c3ef1d1b60bde9989eba843eb55d86eed72d6f30d8c966cf55b53e811eebdec77e9ef242dd6b4b881c7f9bb15ab873ccc239ec27b3bd60c693851062ccfdf11c967e92ef996c0cea4a25a262bf2da0b4fa6ee0cc6566fd41bc9a5d60a7ca638b34470b3de43901679c5632063d2c9889189a56ed098da31e2c9df46060e1d876e2fd0f125470c25c24d71e8cba3b0992571a272fa3cf28be47e8bc6d304add3968023230eb1cd8fbaa3f4b7a2ecef772e5d406135eabe34842b24bf76a9669bc8b7abd6768eebf7c740a5a3e8ab29627d2777365ffa3f12784a2ea9227e261883224dec49c4c7493b78bcc23187b295abeb36e6882483d9c57135a603f98936d85d9d7101e5ec830753e0ef1e9d136e4dde1c065c349c95cb5c9f3fc4254deb359ee9b59c500bbf8200e4ead6a688db97c0e191da2e23ddd0a06e2be33d07c79530ea7de1613e01eb9bbea11ee48c6d92ae1b7d559b4afb37d22d274312236b189b88bb4539709caa3cd87e86bdec8bcfffeee3d9d1853781aebcddfcc11f41fbe062dc8bf9f49e20c50145bec1af0d6c3bc769e01b8f5752540148d0ad7a8780ac649357ae03406f77a601c4f78d7f8b4d3d540236dbc1f57e51ece76431f89fd017345a8fc2674bf4a301978c426333ee499613a45cb1f096ddcfbe990608919aeefeb581695f7b9225dab0cdf5072c99e000000000000000e73df7c4e3bc52ebb4aebb1fa8f70a41c1661decb9eada06c66ceda77319692ec9b23b5d922c3b5a666d2bf5fa7a2b2d131e1b9d007abf200c820189f8c798c13384c463f25257a1339943b56099ea61df68c7903187e393760409ca10024b51821818de8fdbacb2959becc81b1bbebaa67387e9b41c6df56391dd430bd3"], 0xfdef) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 1350.912074] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1350.917765] 9p: Unknown uid 18446744073709551615 [ 1350.939531] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) 14:53:30 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, 0x0) 14:53:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 15) [ 1350.953240] EXT4-fs (loop2): get root inode failed [ 1350.953915] EXT4-fs (loop2): mount failed [ 1350.984706] audit: type=1400 audit(1754319210.276:196): avc: denied { associate } for pid=9154 comm="syz-executor.4" name="nvram" dev="devtmpfs" ino=99 scontext=system_u:object_r:syslogd_var_lib_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 1351.112094] FAULT_INJECTION: forcing a failure. [ 1351.112094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1351.114673] CPU: 1 PID: 9165 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1351.116063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1351.117766] Call Trace: [ 1351.118306] dump_stack+0x107/0x167 [ 1351.119049] should_fail.cold+0x5/0xa [ 1351.119844] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1351.120934] ? shmem_write_begin+0xf7/0x1d0 [ 1351.121822] ? shmem_write_begin+0x100/0x1d0 [ 1351.122721] generic_perform_write+0x279/0x4f0 [ 1351.123660] ? page_cache_prev_miss+0x310/0x310 [ 1351.124605] ? evict_inodes+0x470/0x470 [ 1351.125444] ? generic_write_checks+0x2ad/0x390 [ 1351.126411] __generic_file_write_iter+0x39d/0x5d0 [ 1351.127420] generic_file_write_iter+0xdb/0x230 [ 1351.128361] ? iov_iter_init+0x3c/0x130 [ 1351.129176] new_sync_write+0x42c/0x660 [ 1351.130004] ? new_sync_read+0x6f0/0x6f0 [ 1351.130831] ? __x64_sys_pwrite64+0x201/0x260 [ 1351.131751] ? lock_release+0x680/0x680 [ 1351.132570] ? selinux_file_permission+0x92/0x520 [ 1351.133582] ? security_file_permission+0xb1/0xe0 [ 1351.134581] vfs_write+0x7c0/0xb10 [ 1351.135322] __x64_sys_pwrite64+0x201/0x260 [ 1351.136200] ? ksys_pwrite64+0x1b0/0x1b0 [ 1351.137045] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1351.138111] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1351.139157] do_syscall_64+0x33/0x40 [ 1351.139915] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1351.140957] RIP: 0033:0x7f28824e6ab7 [ 1351.141723] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1351.145480] RSP: 002b:00007f287faa8f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1351.147023] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28824e6ab7 [ 1351.148541] RDX: 000000000000005a RSI: 0000000020010000 RDI: 0000000000000004 [ 1351.150412] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1351.152246] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 1351.154089] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1351.209717] loop5: detected capacity change from 0 to 262144 [ 1351.243191] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1351.246292] EXT4-fs (loop5): get root inode failed [ 1351.247436] EXT4-fs (loop5): mount failed [ 1363.901765] FAULT_INJECTION: forcing a failure. [ 1363.901765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.904308] CPU: 1 PID: 9179 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1363.905750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1363.907506] Call Trace: 14:53:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 16) 14:53:43 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:53:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db1", 0x5c, 0x2100}], 0x0, &(0x7f0000000080)) 14:53:43 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:53:43 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:53:43 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1363.908318] dump_stack+0x107/0x167 [ 1363.909305] should_fail.cold+0x5/0xa [ 1363.910127] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1363.911411] ? shmem_write_begin+0xf7/0x1d0 [ 1363.912515] ? shmem_write_begin+0x100/0x1d0 [ 1363.913664] generic_perform_write+0x279/0x4f0 [ 1363.914859] ? page_cache_prev_miss+0x310/0x310 [ 1363.916056] ? evict_inodes+0x470/0x470 [ 1363.917081] ? generic_write_checks+0x2ad/0x390 [ 1363.918298] __generic_file_write_iter+0x39d/0x5d0 [ 1363.919568] generic_file_write_iter+0xdb/0x230 [ 1363.920760] ? iov_iter_init+0x3c/0x130 [ 1363.921797] new_sync_write+0x42c/0x660 [ 1363.922824] ? new_sync_read+0x6f0/0x6f0 [ 1363.923873] ? __x64_sys_pwrite64+0x201/0x260 [ 1363.925038] ? lock_release+0x680/0x680 [ 1363.926070] ? selinux_file_permission+0x92/0x520 [ 1363.927314] ? security_file_permission+0xb1/0xe0 [ 1363.928566] vfs_write+0x7c0/0xb10 [ 1363.929496] __x64_sys_pwrite64+0x201/0x260 [ 1363.930894] ? ksys_pwrite64+0x1b0/0x1b0 [ 1363.931957] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1363.933282] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1363.934613] do_syscall_64+0x33/0x40 [ 1363.935552] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1363.936844] RIP: 0033:0x7f28824e6ab7 14:53:43 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/102, 0x66}], 0x3, 0x8, 0x6aa12b08) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) readv(r1, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x5652, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x10, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) write$binfmt_elf64(r0, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0xfffffffffffffe8a) r4 = gettid() perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0xff, 0x2, 0x2, 0x20, 0x0, 0x0, 0x801, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x81, 0x0, @perf_config_ext={0x7, 0x6}, 0x6004, 0x7ff, 0x5, 0x9, 0x2, 0x9, 0x3ff, 0x0, 0x5, 0x0, 0x1}, r4, 0x1, r0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001300274e0000000000000000000000000400"/44], 0x2c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000580)={0x40000000, 0x7, 0x0, 0x5cb7c17, 0xffffffff}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 14:53:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538f", 0x63, 0x2100}], 0x0, &(0x7f0000000080)) [ 1363.937803] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1363.942657] RSP: 002b:00007f287faa8f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1363.944577] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28824e6ab7 [ 1363.946387] RDX: 0000000000000009 RSI: 0000000020010400 RDI: 0000000000000004 [ 1363.948188] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1363.949999] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000004 [ 1363.951812] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1363.967706] loop2: detected capacity change from 0 to 262144 [ 1363.977813] udc-core: couldn't find an available UDC or it's busy [ 1363.979325] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1363.982669] loop7: detected capacity change from 0 to 262144 [ 1363.990742] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1363.996535] loop5: detected capacity change from 0 to 262144 [ 1364.006369] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) [ 1364.010679] EXT4-fs (loop2): get root inode failed [ 1364.011792] EXT4-fs (loop2): mount failed [ 1364.040492] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1364.073840] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:53:43 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1364.101823] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1364.105680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9202 comm=syz-executor.6 [ 1364.108953] EXT4-fs (loop5): get root inode failed [ 1364.110143] EXT4-fs (loop5): mount failed 14:53:43 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}, {'^\\\xbc\x01\x00'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1364.115319] udc-core: couldn't find an available UDC or it's busy [ 1364.117059] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 14:53:43 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0x0, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:53:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5a88acfefa75a1d30e990507d77b45dc312671b380dfd33100782f06fc40045922e7dced925639e0a2063bff484181"], 0x58) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xffffffffffffffff) r6 = getegid() keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r5}) keyctl$chown(0x4, r5, 0xee01, r6) write$bt_hci(r3, &(0x7f0000000040)={0x1, @le_add_to_accept_list={{0x2011, 0x7}, {0x5, @none}}}, 0xb) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) close(r4) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 14:53:43 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:53:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538f", 0x63, 0x2100}], 0x0, &(0x7f0000000080)) 14:53:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x754, 0x9, 0x2) r1 = shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) shmdt(r1) [ 1364.281855] loop2: detected capacity change from 0 to 262144 14:53:43 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1364.294575] loop7: detected capacity change from 0 to 262144 [ 1364.327834] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) 14:53:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 17) [ 1364.347627] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1364.353991] EXT4-fs (loop2): get root inode failed [ 1364.355164] EXT4-fs (loop2): mount failed [ 1364.388693] FAULT_INJECTION: forcing a failure. [ 1364.388693] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1364.391455] CPU: 0 PID: 9229 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1364.392997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1364.394880] Call Trace: [ 1364.395479] dump_stack+0x107/0x167 [ 1364.396303] should_fail.cold+0x5/0xa [ 1364.397172] __alloc_pages_nodemask+0x182/0x600 [ 1364.398236] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1364.399586] ? lock_downgrade+0x6d0/0x6d0 [ 1364.400516] ? lock_acquire+0x197/0x470 [ 1364.401426] alloc_pages_vma+0xbb/0x410 [ 1364.402338] shmem_alloc_page+0x10f/0x1e0 14:53:43 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}, {'\\'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1364.403272] ? shmem_init_inode+0x20/0x20 [ 1364.404415] ? percpu_counter_add_batch+0x8b/0x140 [ 1364.405536] ? __vm_enough_memory+0x184/0x360 [ 1364.406557] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1364.407777] ? shmem_unuse_inode+0xf60/0xf60 [ 1364.408768] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 1364.409939] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1364.411087] shmem_write_begin+0xf7/0x1d0 [ 1364.412026] generic_perform_write+0x20a/0x4f0 [ 1364.413069] ? page_cache_prev_miss+0x310/0x310 [ 1364.414125] ? evict_inodes+0x470/0x470 [ 1364.415020] ? generic_write_checks+0x2ad/0x390 [ 1364.416078] __generic_file_write_iter+0x39d/0x5d0 [ 1364.417188] generic_file_write_iter+0xdb/0x230 [ 1364.418236] ? iov_iter_init+0x3c/0x130 [ 1364.419133] new_sync_write+0x42c/0x660 [ 1364.420041] ? new_sync_read+0x6f0/0x6f0 [ 1364.420948] ? __x64_sys_pwrite64+0x201/0x260 [ 1364.421968] ? lock_release+0x680/0x680 [ 1364.422863] ? selinux_file_permission+0x92/0x520 [ 1364.423951] ? security_file_permission+0xb1/0xe0 [ 1364.425043] vfs_write+0x7c0/0xb10 [ 1364.425857] __x64_sys_pwrite64+0x201/0x260 [ 1364.426832] ? ksys_pwrite64+0x1b0/0x1b0 [ 1364.427753] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1364.428930] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1364.430097] do_syscall_64+0x33/0x40 [ 1364.430935] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1364.432087] RIP: 0033:0x7f28824e6ab7 [ 1364.432925] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1364.437068] RSP: 002b:00007f287faa8f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1364.438791] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28824e6ab7 [ 1364.440396] RDX: 0000000000000081 RSI: 0000000020000280 RDI: 0000000000000004 [ 1364.442020] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1364.443622] R10: 0000000000002100 R11: 0000000000000293 R12: 0000000000000004 [ 1364.445226] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002 14:53:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000003c0)=ANY=[@ANYBLOB="3b0400000000000000010004010901020000bb04fffffe01c91000000000000000000000000000000001040000000000000000000000b5d150ad5b9098434e0755c0a0af25c9f7fcb69a73fd21"], 0x30) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000002e2f66696c653000028363eed5dc9726783ab59a1645a51738b46038f37bbe8949f3c85a31449d203e20881d31064d10f6e55a8e1305546214a79e6b675223010d683fe53a18e78e76e91cb2a06e0e1076855cec8e67b956752be225641baa84abcf7549e531655f1820af10f06500d544e7a85f56f7899efc"]) getpeername$packet(r3, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000740)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x7, 0x8, 0x51, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x40, 0x7, 0xffffffff}}) sendmmsg$inet6(r5, &(0x7f0000004200)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x30}, 0x1c, &(0x7f00000002c0), 0x0, &(0x7f0000000840)=[@rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x4, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @remote]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r6}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r7}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x1, 0x3, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x7}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2f, 0x0, '\x00', [@pad1]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x21, 0x4, 0x0, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @empty]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x0, 0x4, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x81, 0x8, [0x4600]}}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1ff}}, @hopopts={{0x20, 0x29, 0x36, {0x87, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x6}]}}}], 0x180}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000009c0)="153b8095c646e5f67ac1a17733c6670fade284af6d5be24135792828d870783f4401ce612c144be169fd388b2ad2fcb4517173fe1193c8f506f2b8169581aed9f02c5deb88ef5d9814eb7ca956a8971ee6c3cd57bccf152771c5eea6803f9c5d5076d883a8850fdf711a9b35e5f420f714ee0fcfe2225386226a9b398f5202895a9dbe1c8f8fa9704d2793c0adce6d8d25f18f4b8cf4d39b9f36ffd6928ac61b57f21a3d17479b512453cf4c7facc0a2fdd8a4c630c112ae5f", 0xb9}], 0x1}}, {{&(0x7f0000000ac0)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c, &(0x7f0000002e80)=[{&(0x7f0000000b00)="8cb33ea30a6f4b23bc1f079294a686e4d082b8", 0x13}, {&(0x7f0000000b40)="08d50acbe2739773e57b9e56eb43b3a8788cd991f7b8fb856ea975b671159504a78b0a6cc938ecf0647cdfe704e9c79528195dbc0c59a6b0b700de90c596ab9cc72136838b388bfba8830fb4b1ba7262f824172464a9c16b072910cfb1c07a0c", 0x60}, {&(0x7f0000000bc0)="5cab18a85ea03101d85f323eac8fb359711afa5a8bca402920bd616262714179b84334b8dab32ddfc0718e135fd10de2e527b81382683ff4266021f872e4f2017b08e55b766f2bf20c0f38c9125c912f2910d798447f8c3833d07f57b742ac1b068f7f427f15f1a1f46f7c5c581350d0f32c9bbd1a62f85e876c6a70d71c643c142d84cfb72c8716b8a0485ac099c7017ad43ccbbcb9a73622143417844ea4f9db52594ee05083795ad49439b4a4b6d7aa4e4ed42fa70907db352e5d8959c01e85a48acefbf2efb41b9cebdac609424319919f05d3960134092170e00883042150a918edd231fcaeed163cad7cb05a5b766d5a48c468927cd148a90c6fec8a06b70f1beb78b2c66514b0c1795d9f650e8380652de3df35f748bd56ad004e06e620d82aa83c0f79ae8402fe97dc8b9a19e9308278b9a81559f40c53f810985c37b4e2db0a85f6665087ef5627ea2bfa87822ae1d587d35ab3e26aa74cb58f05e7d7c02ebd5c11d6480848f7f11ca5e92d5aa2ecd0b857989926044fed76f34935c41324b0ab2932da80dbf38cdb7256f48e16b7de6c764916a561109682535a75d0e76261bd4c05332bf6afd34d83243783a26eb041fa8e9bc1f525b98d83f136836bf14badd36d3ac9eee48e46b862f350bc2e13ad991314692ae800192ab3beb8c98cf903e623b572ad2ce02c2b3f2428e33dbe73b6017f6660d99db552ba253dea05ce2e3f06e96715fc5185fbc51cfe700aa15a22287cd72a45c521e8a9d1d8bc6d559260bf1dfc3185ebd61aacc3f2797eda603cee09731bae9b5efdc11ea522bc7d213db8c90baf7fb5f035af819c5da44712ae073602486a6263d5ae57339bd23f75b9d4331315a954dc68e97602d21ab9879c3af60669ab5a625e1fa1708e5ac684e637590bb417aebf84d52e5d7c27a719eb1e593ba1d36570cd74d1fc74722d4e98695626de2b23f213838385a780a6e149853804aa4e6716fa9f2ac603e4edc6329c820a3d527ecddd53e5621f280caea631f5a7335ebcaaabf47721d48be64034afccb4b285a89ae12c2d93f59448b3ab1d46caa6c4b02ed0251b7782321e0ff6305b53fa9a8d416c2964748cbf34753847e11f967285ab451a4bc0893e059349d64319c3040ccf632bc36378c240ec9494c83f6d128d6eda3bfc6c0b67510b5deadb20afc82a4bb858388b006b81e6b4b98912b4bbeea27b3c6790b7481cfad8131ce6c3c2c701c9e432d898c9b61fabb11cf169c2a9a3e34e094f2c7a57c9014abff9050087e5fd7809d2f307146f993f2b655ead27461cbb8a113987ad9d803ca54891c9be916b55f7fcde49fa00a94b4bc1ce2ae0b2f8fb5b44b365dcb8b7928d81fc9c6a0cff28faccb3d49d445eccc386592bc971161318f887d0d436e180b2d09abf3a2f009f838dd8b3f85c8a4b552ec54807fcf556fc14f5575295b8de483c797a12345207a9bde53273189e91f25179b3271132a2add066d76c07e27210d00424b93e0d396a08ee9cec9fa75e3f6e01c31d368222e48cef72c5260f4907756b4d3eb9aefe63e0aac9da080ddc513cfa4c7d7c05de962290ce99c1ec9e219e0f0541e968973ad79b58a33e2255eb462b89e3afaa9bbcee45ee5b16dec9ad4e775498c34fa64183ce06db93b70bbedba7a05f84a71b1d2b8f71295128634adae4149d5df69d58e7b580995ba4b63eeeb3f32c933fc28992cf1ebfb3d4dd5e606a2307499b6ffd2d5f6dec79f3ae99f72c56fec92ba19989277a58837bb7d8789e08ea4d47457095202ee9bf543abc54a4003008a4d29cf700050190c6e071335ae83b1b7f79dca4949c389b1af1e3f38ae1900cd37dceada1d2f8a6b5209b2fa4f78104641705ccf873861339d71a432fc0ce6432845a3e93d4dd204f7313f2f4aa5eff62afb5da21382570445514ae3a1c7c0fdec975e512c8d9d13869304cd6888eeaa66a5322e2c544d108cebdb71195b18603b358c416a1ecec14656eae4b375847da6efe35b085daf0aaa7091a6105c373fe4c134ceb1f11387e932b6ea3d2ec18dddfa71e961057dd0bb175ff96d2b618995e2d0f30d17a716fc09c02b07af4f677719a215c853d6b64f1cec72314c6eb97a5bf29a8b637edc4b3a89ef8b33cfc4134748c913ceaf1c2a71c3625c64e0609d256a91ccecb69fbf9834d1d62929b5d9bce7a41fa06abdc11a2405e3a9a3416dabd90097154f02ea872df8ff5ed9035cd4a81813e17577278a7f55b6d6997177d108d9ccca96793eba8b50369efcf03b61233f18c31676ca5a1d83afca753565fc4aa3173cdde4f8d928e284c50ce1788865a1885e177632abaa900fe99c08d533abafa4fcc2644199ec1dbcad3bec06ebb47610240934a54d47072686edb6abffbeda776acea3ab11d74689fbe7171622cbd16c5271e14d0d026bb214ff2f7740138ed30d1437b2c4f8404d7bc1eb0d335c968d3109dc65b07c78b94299f913460df10b79b1b351140461cbbd81692d9298e2f834aeef8828e4f3e5738e3185f6003feba8e12550d82014bc22345a461b90b2ab529701f39e836414af6d25de62e9d9801addb883a720c63668336a313081cfef6ea479ec79f9f358ebe1931ce5671fcd9c2930e4af045fd45bab1dc881231bb868cfda14f3f4cb5337193a1a0ad1239f31df748ded8fcc1761727cd320359476a0fe8cf32811c6fb959234ce535282d112c9698fe5a5ea18103fed8921f332d806206fe5e5ccd82aa2f06431bac4f1c3e2390075d46c81bd068d18a1f991c25cce6f13f4e605791e4af9d3be7483e86f0976087441ca6ae490bf55c4a96e4fd3101d91239e3611ab55ec0d208984c6a55c02503340952ffe4dc040d90691165eaa846c33e2ca14be02ed762a52614ad41bbc98224f131222b7015c2bf7df613559799c3ca0c18d401dbbca3d171eadda5269931bb3b98b035406e43f8088a23d56c11cc5702952129511bdb633db0d335e3aefa47669852728bff4ea65ae7aee6cb843a2b81150b4b4cc38332322fff87ef88f7249d5caf47cecf2f701aef0c3f9ef909ea1e37365caa2d028ac30cca9b5a3e90421110125c498ef19667b66744689e0e3ff3b5cc0b181b7be91fbc00d6e8f5f1a7136036717933bc564e9ddc4da68f35a93681c4c224be304fcacb90f3ab367ed2dc88a3e1b3c625c24160c46768fa8b42ee1ca5470a984897049133ca5846f2b0fabe2bed741f2e8e4ff94faae80b7ad7a57bbb6ebf46c3087d118711d4e2f8e0b394410951a03a8f633ddad560d099524aac53711d678ac4f76a26e49913c5134f11f090208b90d99ad9beee42edf43883c72dd9d5d2a2a4d71842bef1a1230d9d1f51f93fe3f505f16c341d24dc318996a5f08b55a35eaea959a23cf82092bd2dccd82e91f0243d3e5de429f70ec1df5bdea7a5192cb65d0eb2f0ba1a27347bf7819dba924e410aa7c102b4e3f90630e1479fd0767b5c4808639029d777e9ff84f0fb86bcf5a38e1adb438dd4894531f4c993a7051bd36a688891fa45ee6d0ea5f7f7dce9f2f133a81135a0db7a68ffee4b42fc04ffab5aeb6e72f0fe00f9e6a1909ea845e32b68cb321295d057a54f7d7c695bf3b83adade6b37723bf069c19fc04c233f4a665d25a3de6e02143058374478f0a78d8782ceea2d7136e814b6f9f8f55e6779b220a8f59b28beab4ca87469c74f51f2932825052f7e134522fe8b83ac09dee3620cb53d03ea05b4e04fafe9ff80d1a2891c199faeefe6a60122bab9d060a11862dca5bdae3ad5bceb9ed501ceb3ea35c295271b020bc329cafd780b14e7135d24bee832875dcce77f361018aaefd66eb17ebb7af6e663de406cc834ba2ad0c522b730b6495bae12a36b148f3c484a3f28d5bd1a623215cbaee28ea3116276348ced5975c82ff34ed98c45dc54a109eb7cb44072ad90df6bbd7a1001a88c8af595121153b3db8f0d40ec9c6d9bb7c3c0cc4b25cb08fa8bc2feb9afb4eee28eb00e8978bbb9de027099a042648271e26f993128b69689a481e60ce1da252bb6cc50c9e39252966bc12a03d29e4000f7b011b7b2dcc0f36fb15c4767a0573c6e7f81e32174b0188a8e1cc77a46f16c50a1ebe01e3d4fd8ccfd9493e4f0f251200b31ec59f3740ec080f94cce0d2bedc82bdd5a46cca1484d9bcf3bb0c691ef3e7b0e5d6fe50944f9b7624dc5a5e5e9bab602fcd72af079ffeff51d556112ead3cc73a2ebef981ac39467d711b8bf10cd2f74cb10d2f2417c40cfd038ecbece396f7d6633a2435a41d7aa0ac135492b8f2c929a9f4a30e35728cad00de397e6f04bf624754227908ae59c9ec2afd11f07e73e9d76a17c8b53790cc4dd98f457ac674fe7266858dc84d1f4f382435cf4fd611a761109b5ffcc707f3f973a406b63d3a342425d5772040d80d55823d72a2a62273b385683509664a7cc93714785e32218dce9c472914a1401d9c4d0fb4bf4a85a5f4e59e7eb08f34fbc87c66a30b7b7fe1183fcab52ecfd56ccd85de199dea88dffd68764abf6d436f244c46c92677a4c864fe2f560f49a4444a57815e3e1d1a334629e641d8a1bb5edd072afc3cc1cc3b839db15f62ddf3fa40654e1e48d5ce88c4199df7fc1c4b62291e1196028300b1a88bf0cc8fe67dfa5d1079fa803fc05a48235ae06830bd52215d51d5d89b3eb7bcc27a7fccbd65edbe9b8d36d54a1cab19f6c298a6ecb5164d27cdaa2e4299f6e53bffc2b9ef6e421541ae03f97d43d0c01889b6ea833b4829694a6d329894e74ecda39a94ea6fcc51bebdc4a57e088e3b4f0ed36ddc18790d600af6220c074388eec31125dd651443a2e280b46af6d3ea8f2bffd5349cdb08eb3b38afb0231d21a0837ea5ca29391200a384ca051e826c71a8550d3d30a37a7fd8898662e717192281dd06d21d8099185c463427832fe6210d6641150e1abe5fcb4836263b4c5a913b6efaba7e22f34c2df0065b8fde1f588b3e2f3c2732395f9a502efbe484280b6a89fffba118430bccfe18b058a52e62a075a63cda2906c63f6de24125a748a8c7aa7bee5589bc8fbbfd7138bb0c3a6bda0a6ecc0f3b43dfba2a63ac843b6a03886ec1ed6a3631d928ca8d158f5b0404601786c6dc61d0e12e91aaf143b70ae44e3dc45523d75b7e0bf35ffbc24eebf1cbd90d118760aa8b2d2cc954d04fe26dc80781b7a604a40a81fb74a5e5debd90b77848b6a9b2fdc2f86d472959694a601ce43cf473c50f4eaa7b1eb167943dccf07045adbe12bcc60769c2043932b841e8c895d54a8625a7e28b3fa8d69aac71579b43415ed6b7ad90aa8855b551bc3d4a12178122aa67ce147a92cbcc2031f91febfe3fb6369f69ef396b764c980dda1daa0df4a8e4b80769384aa7dbe1fc9e5629e7436ad55499c4f365cd78bda34dc8afbf4a71248088146d8afc747bd13efaa04c274d3290d77bf8cf4d744ea9ebbb3ce862b65fa091fe02f022355854f80b748b1d4f8344536f2b5d8dd727e6f4d0effe04c139824aebbec16b4b9bda55c4b66e71a75534bd43d49e9eb37f116671988672ff360c27c20276d60fea46a4f66ef436ddf32c71a4b04e1e9ccb1aad536157a708cf04abc6e1da9afa2971d426f777683cad3e49abdd03b3a8a661d157955ab57a0fd17a8abcd7ca826481b72556a4ae5e57f630ae148746fc5f896f828d78a86592799a3e45157f399fe0d82d2f56a46c3b859306b43ab5d8fdd0b577b5a61778c84732feb93e89f8b919b62f1ae73e9813549090ef9b21cef5048e6b5cfbf4c3f3fdb0d0091af8ed6eeea", 0x1000}, {&(0x7f0000001bc0)="4bd653f745bd05a83b648df0d0cadf55aca4a407eced772544f1b83a73529da791f94ffaf3af21cfee4b65d53cf71fb702c25928f114187ebb632f59a877a772cd83dc7ffb1a8cdfff7029444a2003094c40b53e4e0aac51d59aafdeafb70e05495be4305c65225befb1169fdcf13c84c6e6d1fcc553c21d5cd6990df7ac4ea283418d9a0233d71d32e42051dc001eb4cab4f982b3a4d0bd8d5f294a", 0x9c}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000002c80)="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", 0xfb}, {&(0x7f0000002d80)="94f7e634fdd729ad48a81450b705b9238f78230d0d020c6b0c75a55a78e6aab594becf6783c44fc01e02f8f9775756f692c59916a6e3b1ddf5c1252a927fe65298e8512dafdb20e63e55c61317d86e2917e1ca576a17218c8f389cbf8417b689c8e0bd330cfc97bbbf", 0x69}, {&(0x7f0000002e00)="229a8deeca91b3db6bfc6d0cb3c7968b3e61be601d6943e9e1502b07e86158322dcc37ffc9c8c521", 0x28}, {&(0x7f0000002e40)="1b1c7ebf0674ff013f44ffd845fa0bbe4c1fc357d9a28943505560b58d37b868", 0x20}], 0x9, &(0x7f0000002f40)=[@dstopts={{0x58, 0x29, 0x37, {0x62, 0x7, '\x00', [@ra={0x5, 0x2, 0x6a}, @calipso={0x7, 0x10, {0x3, 0x2, 0xaa, 0x1, [0x1f]}}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ra={0x5, 0x2, 0x1}, @pad1, @pad1]}}}, @hopopts={{0x1038, 0x29, 0x36, {0x41, 0x203, '\x00', [@ra, @generic={0x81, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @private1}]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x5e, 0x5, '\x00', [@generic={0x20, 0x4, "e6f7b31b"}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x7}, @pad1, @jumbo={0xc2, 0x4, 0x20}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x29, 0xc, 0x0, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x19}, @loopback, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x1150}}, {{&(0x7f00000040c0)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7}, 0x1c, &(0x7f00000041c0)=[{&(0x7f0000004100)="a6166104b117c08b1561d5e6a6269e33b3363834ba2938711f44873c6525849b64b966af2c89f57557cefe64584cfa71f7739f253cd69d29dc5984b7298c22d69305358419109352ee43b134e4023e6bc99b8e882d98f541bda35bcb44aab973f8ec4cd5fa22f88d6d6229e97524a4269add37d0ac525d4990147124d1eea2ab42aeaaeddbc45d06fe94eb2ff898e263736c1d529d0919be51294c7cfc26a92b2ce0aaae20", 0xa5}], 0x1}}], 0x4, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r4, 0x325, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) [ 1364.504636] audit: type=1326 audit(1754319223.786:197): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9220 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cde33b19 code=0x7ffc0000 [ 1364.518011] audit: type=1326 audit(1754319223.786:198): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9220 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cde33b19 code=0x7ffc0000 [ 1364.533047] audit: type=1326 audit(1754319223.790:199): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9220 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa9cde33b19 code=0x7ffc0000 [ 1364.543713] loop5: detected capacity change from 0 to 262144 [ 1364.551025] audit: type=1326 audit(1754319223.792:200): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9220 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cde33b19 code=0x7ffc0000 [ 1364.565019] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: special inode unallocated [ 1364.572302] audit: type=1326 audit(1754319223.793:201): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9220 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa9cde33b19 code=0x7ffc0000 [ 1364.572794] EXT4-fs (loop5): get root inode failed [ 1364.578304] EXT4-fs (loop5): mount failed [ 1364.597295] audit: type=1326 audit(1754319223.793:202): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9220 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cde33b19 code=0x7ffc0000 [ 1364.628039] audit: type=1326 audit(1754319223.794:203): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9220 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cde33b19 code=0x7ffc0000 14:53:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 18) 14:53:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r0) 14:53:57 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:53:57 executing program 0: sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5b2c}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x65}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x60}}, 0x40) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 1378.278995] FAULT_INJECTION: forcing a failure. [ 1378.278995] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.281858] CPU: 0 PID: 9248 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1378.283407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1378.285286] Call Trace: [ 1378.285898] dump_stack+0x107/0x167 [ 1378.286726] should_fail.cold+0x5/0xa [ 1378.287596] ? xas_alloc+0x336/0x440 [ 1378.288443] should_failslab+0x5/0x20 [ 1378.289311] kmem_cache_alloc+0x5b/0x310 [ 1378.290236] ? trace_hardirqs_on+0x5b/0x180 [ 1378.291223] xas_alloc+0x336/0x440 [ 1378.292034] xas_create+0x60f/0x10d0 [ 1378.292893] xas_create_range+0x189/0x620 [ 1378.293854] shmem_add_to_page_cache+0x760/0x1130 [ 1378.294956] ? shmem_getattr+0x180/0x180 [ 1378.295899] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 1378.297131] ? shmem_unuse_inode+0xf60/0xf60 [ 1378.298141] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 1378.299297] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1378.300454] shmem_write_begin+0xf7/0x1d0 [ 1378.301399] generic_perform_write+0x20a/0x4f0 [ 1378.302454] ? page_cache_prev_miss+0x310/0x310 [ 1378.303507] ? evict_inodes+0x470/0x470 [ 1378.304407] ? generic_write_checks+0x2ad/0x390 [ 1378.305468] __generic_file_write_iter+0x39d/0x5d0 [ 1378.306592] generic_file_write_iter+0xdb/0x230 [ 1378.307644] ? iov_iter_init+0x3c/0x130 [ 1378.308538] new_sync_write+0x42c/0x660 [ 1378.309459] ? new_sync_read+0x6f0/0x6f0 [ 1378.310384] ? __x64_sys_pwrite64+0x201/0x260 [ 1378.311401] ? lock_release+0x680/0x680 [ 1378.312302] ? selinux_file_permission+0x92/0x520 [ 1378.313400] ? security_file_permission+0xb1/0xe0 [ 1378.314511] vfs_write+0x7c0/0xb10 [ 1378.315324] __x64_sys_pwrite64+0x201/0x260 [ 1378.316304] ? ksys_pwrite64+0x1b0/0x1b0 [ 1378.317231] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1378.318426] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1378.319598] do_syscall_64+0x33/0x40 [ 1378.320443] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1378.321603] RIP: 0033:0x7f28824e6ab7 [ 1378.322459] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1378.326630] RSP: 002b:00007f287faa8f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1378.328362] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28824e6ab7 [ 1378.329998] RDX: 0000000000000081 RSI: 0000000020000280 RDI: 0000000000000004 [ 1378.331610] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1378.333225] R10: 0000000000002100 R11: 0000000000000293 R12: 0000000000000004 [ 1378.334847] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002 14:53:57 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0x0, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:53:57 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:53:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538f", 0x63, 0x2100}], 0x0, &(0x7f0000000080)) 14:53:57 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1378.346108] loop7: detected capacity change from 0 to 262144 [ 1378.354792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9250 comm=syz-executor.6 [ 1378.358862] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1378.359972] loop5: detected capacity change from 0 to 262144 [ 1378.366577] udc-core: couldn't find an available UDC or it's busy [ 1378.367532] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1378.372700] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1378.375569] EXT4-fs (loop5): get root inode failed [ 1378.376263] EXT4-fs (loop5): mount failed [ 1378.383127] loop2: detected capacity change from 0 to 262144 14:53:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r2, 0x1, 0x2d, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x0, @nfc={0x27, 0x0, 0x0, 0x4}, @tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, @vsock={0x28, 0x0, 0x0, @local}, 0x400, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x95, 0xfffd}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x34) r3 = dup(r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003100)=[{{&(0x7f00000000c0)=@pppol2tp, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)=""/67, 0x43}], 0x1, &(0x7f0000000480)=""/254, 0xfe}, 0x8}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/101, 0x65}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000006c0)}, {&(0x7f0000000700)=""/107, 0x6b}, {&(0x7f0000000780)=""/67, 0x43}], 0x3, &(0x7f0000000840)=""/221, 0xdd}, 0x3ff}, {{&(0x7f0000000940)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/160, 0xa0}, {&(0x7f0000000a80)=""/45, 0x2d}, {&(0x7f0000000ac0)=""/123, 0x7b}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x4, &(0x7f0000001c00)=""/159, 0x9f}, 0x1}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000001e00)=""/212, 0xd4}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/137, 0x89}, {&(0x7f0000002f00)=""/243, 0xf3}], 0x4, &(0x7f0000003000)=""/222, 0xde}, 0x3}], 0x5, 0x40000241, &(0x7f0000003240)) recvmmsg(r3, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_cancel(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, r4, &(0x7f0000000340)="973718d000416d0e113ace690a98f1619484e4960056aa777fed63e5d28907e5dc658359736aa2b3be6a054ff61d0d0a1704feb3dcb95ee5a9cff583a4c2fe2b47dfbb4b82095e76228691e017e710f5527b9185295cf3d3a3e16d4d705f339c596fb9ddcd0bbc9eb440a4102813cb2df3f63c3d37f8ed50d3a4270ad215d9176a280cd1e1d5", 0x86, 0x7, 0x0, 0x0, r5}, &(0x7f0000000280)) openat(r5, &(0x7f0000000bc0)='./file0\x00', 0x8000, 0x4) 14:53:57 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1378.424147] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) [ 1378.429128] EXT4-fs (loop2): get root inode failed [ 1378.430330] EXT4-fs (loop2): mount failed [ 1378.492447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=9277 comm=syz-executor.0 [ 1378.577688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=9286 comm=syz-executor.0 14:54:12 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1393.516758] FAULT_INJECTION: forcing a failure. [ 1393.516758] name failslab, interval 1, probability 0, space 0, times 0 14:54:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06", 0x66, 0x2100}], 0x0, &(0x7f0000000080)) 14:54:12 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x0, @fd_index=0x8, 0x100000000, 0x0, 0xffff, 0x0, 0x0, {0x3}}, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x606001, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) 14:54:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000ea14f168c96deead99da0bf20cc878d3aa9c31e738c1cefbe3c6cc9089248fa85e7ac1ad1c102206846fdc5afa5dc29fed8d4be38a33db7ef754ded439b12f0ce086", @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 14:54:12 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0x0, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:54:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 19) 14:54:12 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\'-@%\f(\'t\\\x93'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1393.519643] CPU: 1 PID: 9299 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1393.521693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1393.523806] Call Trace: [ 1393.524489] dump_stack+0x107/0x167 [ 1393.525417] should_fail.cold+0x5/0xa [ 1393.526394] ? create_object.isra.0+0x3a/0xa20 [ 1393.527554] should_failslab+0x5/0x20 14:54:12 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1393.528531] kmem_cache_alloc+0x5b/0x310 [ 1393.529688] create_object.isra.0+0x3a/0xa20 [ 1393.530811] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1393.532121] kmem_cache_alloc+0x159/0x310 [ 1393.533190] ? trace_hardirqs_on+0x5b/0x180 [ 1393.534309] xas_alloc+0x336/0x440 [ 1393.535223] xas_create+0x60f/0x10d0 [ 1393.536200] xas_create_range+0x189/0x620 [ 1393.537276] shmem_add_to_page_cache+0x760/0x1130 [ 1393.538531] ? shmem_getattr+0x180/0x180 [ 1393.539605] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 1393.540992] ? shmem_unuse_inode+0xf60/0xf60 [ 1393.542143] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 1393.543465] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1393.544768] shmem_write_begin+0xf7/0x1d0 [ 1393.545832] generic_perform_write+0x20a/0x4f0 [ 1393.547032] ? page_cache_prev_miss+0x310/0x310 [ 1393.548217] ? evict_inodes+0x470/0x470 [ 1393.549238] ? generic_write_checks+0x2ad/0x390 [ 1393.550457] __generic_file_write_iter+0x39d/0x5d0 [ 1393.551734] generic_file_write_iter+0xdb/0x230 14:54:12 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1393.552931] ? iov_iter_init+0x3c/0x130 [ 1393.554094] new_sync_write+0x42c/0x660 [ 1393.555125] ? new_sync_read+0x6f0/0x6f0 [ 1393.556171] ? __x64_sys_pwrite64+0x201/0x260 [ 1393.557334] ? lock_release+0x680/0x680 [ 1393.558371] ? selinux_file_permission+0x92/0x520 [ 1393.559622] ? security_file_permission+0xb1/0xe0 [ 1393.560880] vfs_write+0x7c0/0xb10 [ 1393.561805] __x64_sys_pwrite64+0x201/0x260 [ 1393.562933] ? ksys_pwrite64+0x1b0/0x1b0 [ 1393.563986] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1393.565339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1393.566684] do_syscall_64+0x33/0x40 [ 1393.567644] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1393.568967] RIP: 0033:0x7f28824e6ab7 [ 1393.569939] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1393.570322] loop2: detected capacity change from 0 to 262144 [ 1393.574262] RSP: 002b:00007f287faa8f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 14:54:12 executing program 0: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0x0, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1393.576805] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28824e6ab7 [ 1393.578589] RDX: 0000000000000081 RSI: 0000000020000280 RDI: 0000000000000004 [ 1393.580188] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1393.581787] R10: 0000000000002100 R11: 0000000000000293 R12: 0000000000000004 [ 1393.583400] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002 [ 1393.595251] loop7: detected capacity change from 0 to 262144 [ 1393.603243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9302 comm=syz-executor.6 [ 1393.622159] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) [ 1393.625563] EXT4-fs (loop2): get root inode failed [ 1393.626230] EXT4-fs (loop2): mount failed [ 1393.632876] udc-core: couldn't find an available UDC or it's busy [ 1393.634921] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1393.637678] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 14:54:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @empty}, 0xe) clock_gettime(0x0, &(0x7f0000000100)) ppoll(&(0x7f00000000c0)=[{}, {r0}, {r3, 0x610}, {r2, 0x10}, {r1}], 0x5, &(0x7f00000001c0), &(0x7f0000000200)={[0xec]}, 0x8) ftruncate(r2, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd, 0x10000000}) fcntl$setflags(r1, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) writev(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)}, {&(0x7f0000000280)="68045a189f063948c3641b5bd826e4e9bb9b6ba2732e227325e9beda4037109b2fbd23d6eac6772d9eed2d10b138567389e50da3847252fae238c0b6d94ba2ce6f8cb1e481930de6a57389e657f0c53895f4d23c6e4d583e44830b52f1d77df01e75e2d2a3de0da2013e3b9cfee51c7fa0d6256be25a2542456d525df5932fcefa4f912a4cdef91c67dab95f9eff0b05a1a2ffe04b0e14c45ceaccd1eca1ac6c67c33174d6856efc62de5d5ad29f0565e9c02dd7d5a3bb2636d751eefa3eea610c582a1866ea93fea67e6aa1", 0xcc}, {&(0x7f0000000940)="c2dcbc94c2c8d247d24579bc24b0a9d2ae9d1a2140b886ff7324ee4befdc54a15365f24c08520037fa0bc93f34ae32e0954933db7b95235f270350bb8da7dd83f342fc83e7e1d7da199d391037b176e2bcf5d59f4d9de001daf5388991688d36d701a61848fc2d2a8ef2cd699080381e5cbeabc810993e7d39bbc91db4970cf9d9ff41be37a6dd9bca46c8dcea9e1acadeb2a4395a8cdb56b5d0ec1977841f9551b5f7cb64eb2f11edb7a9e8aaa5e989e079b2816d90db4178e1aa9e7152574bdf6a167313914aff5adea769780f5a5dc5caca5acdecf20a7f058ab181372fe8c868963fb5ed885106c2bf18435b1fc33a39cc8d4ede0e28108081679ea0730ce752c2df9ca0bc3f35a9620b44d8f0b7a487896a572c7d970594a919b7649873a6f0f856d1dcbd9e074b0e00a644e797965ef4cff22e631f8ef3f03e9dea53d295ebd5d249eeff1308af5ed9b0c606b9d6fe0a2caaddd1b527425f21ce8f9685d20ac7597d2f421603c240653b42dcd9e3d3f0fc55acd326779c8c611d5b5f413db488fd8bbea2a486beeb7e77fedbd961dd5a5a5d3edf255e2e6224b411820485791d47ac89af4e7c9f8ec759ae94bac50fd8ceb62a625cafdbe4b99ae3fb5c13c6865605e0e2d623b1a26077bdf425bb6c1bfbf4a79f31a4cd688dc068d593f2b99d07c91a45314f0210dda258b51f063d4b69e393fa2a5345fe5c1728789f64115f386fa803516e7dd3de5d32d0410736e4ec2c7b99d9a60f63c2aa43e4f55846866ab6654042f4ef607a05591105da69216d2c574aba01e5a869d246494c80568bcba496ea89556644df38dcd4b4deee15ee383481feba8719ff422f19c9959293cdf57d25a3faa0ff84d278624422ec2c0812032fb63af10d304290e32f3ed51ff84f56e3cd3241dbc010503cf58b718f0492af1ecaa7d77979265582ce1b5e60423b3419f9c3983e99d52bf43ff95a186ae58d8b8944b428202fe6e56cbc6b2821cbe354f14f7d44743ad201581abe8e97ef445e1c91ecce57f884b6ce25fc2a53a1d24269786caa522cdb32b34597f3f894a470fb023b1c8862c1ed07d5fe09af5412a5e8e2fc2ea80100b259181792ccc84ae97c33191c4431b47eafac1da9f77e777af4b74e79dbd104a0a9c023a15357a96fc0477fa0e2b23541d96d71a9d75bb5a9517cc1feebc5f10983864de3daaab3befa0ad7cee380ace9bc07a0cdb28ff573b6a81d925dd733e6be501ffdeaf972152a37a3bab7e86aeb09351b42fde4d0a2370149f1b4742a27798e32a41227b27572c0237f79ab6322d2e06143d9f292c2267906b02a3f2c0e58cd268b0b1f0de9403c22b90c286bb0c649c1b4959a28a48e4b841a64620bc0c83fac687ecd9e09cc8ddcdf62d099143f0ca3bb1a5692e8e4db7d6a4555d45d18ab7f57879181f8a097da905e64aedfb82c62df9f8143f2ec9a91027537f77cb317adcdbfdab76f54c3c6b6c88cfd5dc51f9f6d97acab200d2dd679930226da391cc8189e9f1da81fc21fdc3a44a69893625d2a6a6d9ddabfc3585c423a67554816b8da8c6b56e0fc967a1e16143d906d94e5855283ad042d78ddb52b1650eef0f2eb8df92d29ce1ac60bdf3da1bb283f05d689b45039b40a1a981dc010f96fc67257896f542f8aa31da9b2c4fbbd77a8d01afe49a8113ccbd80502b756801800c0f6507c0d74907dad9305f35a59f5a4eb60f3808845b0e4e03ba78c848bb0d3b275c9c799c9dede8059b45cf4463bfe9d5fa4b7d4b06b3c0d699defb20d8f9fb09ba74dc9745d90bb54f6919ad8a278770cc193bcaa7abb39d673668a58eed91245cdc52d0ccd36a1c3b1325c1c63381e40ce98a22ea8bed2083bf09a8d557883ae365ddb0ac8b2f9fb2d7217b9f40035461bba71e187218c6c7208157759dd2b5555bf0ede98dcfadfe0bf04286f2a461f682f9f103ec2f8c4231f16c797a98527b14e9d6d2a37469422e7e094009a0e9ce30b70a81d866840e7b0424264e862a629e15dc0f9fc89ba7ad0f551d2dd371c2ee424fe8007651b9577b50541fdf5b3f5a8fc670c46a2a6e982633f3c1fa18ea8df71812b399a40f1dd26401746c4e84bedf39d70e7879bf28ff67094e5eff573ae973b01e027710e28861bbfca314272cc6949232c5f8ce34853d5df7001f4759ae08c9ad7966c7f36bda930709e0217e1a0a6eab6def3e39cd23b1f389ac7da67edd19b19babb27143e1ce4a3e487be9c37acfa369bb16a0b89afcc611b3fc98defc4eea32f6441834675d29f7f8dcead3b6a821ffb1dcbd7b7f52f86400af5d70201cb336dfd5417b680db86d713de42e60e640288ae8cb01c748cb748f2be5df9bd7a570dbf27240dbacd1c62273b822819c7e0a6457a2b57dad5c7468d11977e387fbc54e6fdb4384a99e99612a9993b04fa16828332aab54673d6e27b0678560195842358d2ffd251302f0b2e88d6083f9bf145797d92984e801d1c4d9d9c26a8a78a80a55b02896636073d7864c8dd21df1e8ada3609e6fdc48fe42f8c1adda515fc32614339c86cd6a0665170820e7009476a9c5fd98fb34e1bd092839f27508acbf2857f6827820ed1ad648e7431ccaf1b736e181b5a791b8203893e924da3e8079f38a11d18194f7dfdc38d93014d55aaf726f5dc5be9ed49ac41208a58b625bbf56f84552fa5ce42cb0dcf22e3d0376cf61f30b13319b8fac6a6ac81718ecd370ac49e273d72ec10667f4f9a67c16f74533b323fdd02ba03627ee1ad64af3a544d184e90a3b1b7001d9c4c1f7516147a9c35a501dda774e009fe4148a979c7f3dba6a248714deff8fd94caa3e68038db18463fb294d3ec3fccee39f87e26c504312c2abfd4fd37e3c4462ffa5c20a53145fa7650545c446d236b5c89c65d29443a1f51eb0e27fbba43d9d88882e9ecb7a31ce4a779058b772e0f30e1043aaaa4875c79861aa7f912041c7f773d97381167e41576d9bc68fdc6211226af32acd78d81979f371a434cc57555a7dc70d048948381f5f2f8895071725d6d209b24ec17765cb3868b598c4cc323c030436d04aed90b56914edd6809a674bdf37fe9f2281e336ecd18bd9c818442e32e6bc468e874cf28d60ad307502f0c3f5f56659fd995be78b4afa13a90312c1d17e6cf367218ef0585d237f70b13734f21404a8277f14c5b82b92e4bf3e74027560e7b4fa16856bfbdfe0438eabbf1c46161d8469b406a4d6c62ef4f660871621246066b4aac588199aac57e71d5ddad32dcddf91743afae9aee45da7fcc04978ec074abc76cca073281fddd3549522e89176e0f0f751cb7f9aa3496a5b6e53921a02bef1d05ef12d59ac5165fa1b8a61fe522b8b7c2e79edd0fc3a5762be9f0488e5136b2c38b7d9cfbaa287c5190334df26c02a9d8bd4961c898f0a1e2f56cde2ae38f887750ec67d4a62a1ecf634a10ba0f5f892e4233d8a0208bcd981aa68aa39a5c61413a8ee7e89ac026c0179086177364a08991e8422587d0caddc20e8cb4015cc5cf711961a2f94e7cb1bb84d33da1c5a5f66e1fab53140305da36572059ad40a2a8a280753ab3f4f29f69b1b623458513408f9331a90f6ab73a565986d1d52b82cd7f484f276652cd47b5d5124d9a5484983cfb3250abe31abef552c44756792ebd458c550fce4ed8c115ad1155b34f516ab53b54217afa7100ed39afc2f386554f27b08ae5e90185dfaf645fe6a55d1b48c4c30f0c7d895c8e9b14c7c51667b32d123bfb217de710d2b5b04d71d38b5604af9aa497b6ed0254d9131d39a90f1f8d7f364eec40c600d2c4f9a688ce6beb01fd6a9360e6aa469e46a0e149cc76449fa41bf0419ee7ade0becad8377b27def9e071a82b355f367b68f400565f08e7217e84e1cc76f942284ae2aab1a119d32282f7a4bb2e45119f71ecc74141509eb14c006e89bc1ea97a9829d6094bd65fd616709832d735793582971d7b8c2dfae369669e05b05f9ac479b5b0eb70afc1404633f7f162f783f964cdbbe1830d6d749dc1cd6a48b6f68e0d16930ecace6a7b19c745835bc13619e86bbb8da555b7a829723a595a64b663c44e9a87098ec6c09c941379355009f641c1aa6652ef0a74c95e6ed58bee5e393ccef0a4be2eab62dbad2941fbfdb4156a4371c21d9af8210be11ba275ec375583632b8b49b9853b4479e18383e57ce60ce599d277ec70db14d2045976464cfe446686040183382b3e812ab3e6141297d00659296e2deb69767d6d5354b1b1c6afb5e66d5908e0a46be04d79bc18dc3795290c8d402990240eeacc4be54d1474e982a6d7a1cb7ee1e525a08f1589b7c42022cd7166ad189964fe5833f3fef591c509ae91e02db78cccac8c26d57b3c5dd2066ab248367e3259a7d6f03fdfa83f7e380a5da62903db944915e26d4d912ce62d6f414f6c760dfb8e02f9784d61a0cb9f8f0013b996473b5b1b49c4129f0dbd4a2070b38b5c4608ebbc79cc0297bfcc530f45bad787476ffcaf19b8a6ac538c0016461eedebf0ef31bcf790d4bec9c27c9925126e04ad5c6003959de7ec248e33261e129f08aceccf5fcb8509c42c4a6bcc3e309334359e24df82e2d3d5e7120b2b9c6cb4b14b6739a2a89bf7e7c8471e782cb5c4319a031b15234056068ad9cdef907d78965fdbbacd8d40bdeaa0313cb1dbf92c2b8d8ea24ab2f62bec5b15cbcb734de56b22fcd5663e76c26a758ef959499945a6f80a0d298e93297a5e86c6600d99c74e3610ad78021f18a487407cb70bcb1b58012afe620435507e192b467a4cad45db50dc03d2d20117c72956bd37bb18ae428c7d94c1da2ff282e437e81a1b2e0d9d00aeda60cca85ed618c36d36911f74cba27900dd1e7050fcfc8c87359352274c25083d66f7d0af35ba69200fe015896904b835b517b9c7eea7347e093e7bca162e2096b95dfa534bb17329bb2fadd95fa540ff48941b8e0005edf4d21f2e3b07fd930df96a71400c11b603b0eaca17178cf9917a9ea54f0c510bb9e095c6ade53d7b1fbd8b1077ab89ee0459384902b4dbd9bd3e5072bca3f785cb0f29c76a073f6093fbc1f8422930c19bd0ccf78511a9a427894c5289593a7ce723c77684af1c7678607d3f44f029146d33b916796cba165d27351afc5039b04d0af8355b3f67ebf64948524ac5689bd21d1b182c26c1757c92e75cb8dbe84c242e9e683047a78ad6c7b4d8258348ede67afa48e69a6aad3a003648e5bca91f2d1f7ec79da7254a4ff11cfd188f7b3597e5dbbd5603e16e1e20d34561dc1be8d9625e4d8b966593ba2f2d651a67b946c47f1df71211528a3ce07d6f996108fc93996ebb091f6891fc781596b24ecc59fd398cf6b58277f94226b2111d949812cc4acfd8b60807beb5890b736419cfcea4def204cb5b429d7eb55a72fc9c3abc14236bd852aea0aa3888c35a37e9ed6351093fbcfb9fa6633f15dd94cd2a3c3ced383c81a8d179e247cf24443951a158f413d88ca81eb3378b9ca1d445cfc9f703fdb032add94875e3eb67f2059c82766228042560e9ce0935a940733ea5db3466466a00834e2396dbba08a9c62e6ae1a66dc7e40f2952b5b4645ade5283090e4df313c2971daa17253c1f4fec6dfc26d739eb9a209ed223ad54276d7c32bbc1afe4932098a6dfe440f121ea0d8b32d820947b0d8f1714f954945e1fe8ff9ea261dfae2b9513bf2deb0988dc45b224763225b8e387ac99696e1be96593afdb548e908cb443da8bb5603af76146d8feb921ac5f5841bbc03d73cd42d2610b4d4dd8e359bd1bf97cd956dbb0aebe", 0x1000}], 0x3) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x74}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 14:54:12 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="54000000230000ec2abd7000fedbdf25000000000c001c000000eaa1f4f956700e4cd7aeb0ae5902d6013277001886f671265a908787a4d26e62541fcab27428db3699e95de1aef8d9534c74973d0bcfdcdf50f9f791b45c40f41a41029d70e1b3fa6635df077f60907651c66a2dc560de23ab20c441db59e8df591bf96ed04bf6fc2cc9d270fb4f2772ac8762c1f26bf7b74d22c730b75f8f1bb42f6ab15a48185be1e8b990607d1edf25449eb03fa9f23a", @ANYRES32=0x0, @ANYBLOB="150000000c001c", @ANYRES32=0x0, @ANYBLOB="01000000080016009467ffff150008001100080001070900ea446c73b20620348100000008000b0008000000"], 0x54}}, 0x20000000) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001580)=@updsa={0x144, 0x1a, 0x1, 0xfffffffd, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010101, 0xfffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0xfffffffffffffffc, 0x6, 0x0, 0x98}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @extra_flags={0x8, 0x18, 0xad}]}, 0x144}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@getpolicy={0x58, 0x15, 0x208, 0x70bd2b, 0x25dfdbff, {{@in=@private=0xa010101, @in=@loopback, 0x4e23, 0x6, 0x4e24, 0x7f, 0x2, 0x80, 0x0, 0x87}, 0x6e6bb4}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x54b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004010}, 0x8000) readv(r0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) getpgrp(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)='system_u:object_r:auditd_exec_t:s0\x00', 0x23, 0x2) write$binfmt_elf64(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x0, 0x1, 0x8, 0xfffffffffffffffc, 0x3, 0x3e, 0x6, 0x2a6, 0x40, 0x19e, 0x10000, 0x9, 0x38, 0x2, 0x1, 0x1, 0x1f}, [{0x7, 0x65, 0x1, 0x100000001, 0x477d, 0x3f, 0x2}], "34093ca3819902c9253f2375db2df1ef88953ca81bddcd18d1b2636d3cd18af1cfe2791bdea33a251226994a9c427ad45736d5e2e0f3d40f2dffa5b301", ['\x00', '\x00', '\x00']}, 0x3b5) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 1393.703382] loop5: detected capacity change from 0 to 262144 14:54:13 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:54:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06", 0x66, 0x2100}], 0x0, &(0x7f0000000080)) [ 1393.738164] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1393.740128] EXT4-fs (loop5): get root inode failed [ 1393.740725] EXT4-fs (loop5): mount failed [ 1393.747097] loop2: detected capacity change from 0 to 262144 14:54:13 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1393.768486] loop7: detected capacity change from 0 to 262144 [ 1393.779356] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 14:54:13 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'$\\%&,[\x92'}, {'\\'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1393.805751] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) [ 1393.810967] EXT4-fs (loop2): get root inode failed [ 1393.811592] EXT4-fs (loop2): mount failed 14:54:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 20) 14:54:13 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:54:13 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:54:13 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1393.861984] loop7: detected capacity change from 0 to 262144 [ 1393.885435] EXT4-fs error (device loop7): ext4_fill_super:4967: inode #2: comm syz-executor.7: iget: special inode unallocated [ 1393.887120] EXT4-fs (loop7): get root inode failed [ 1393.887720] EXT4-fs (loop7): mount failed [ 1393.921726] FAULT_INJECTION: forcing a failure. [ 1393.921726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.924491] CPU: 1 PID: 9350 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1393.926047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1393.927936] Call Trace: [ 1393.928536] dump_stack+0x107/0x167 [ 1393.929371] should_fail.cold+0x5/0xa [ 1393.930257] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1393.931491] ? shmem_write_begin+0xf7/0x1d0 [ 1393.932498] ? shmem_write_begin+0x100/0x1d0 [ 1393.933533] generic_perform_write+0x279/0x4f0 [ 1393.934620] ? page_cache_prev_miss+0x310/0x310 [ 1393.935706] ? evict_inodes+0x470/0x470 [ 1393.936635] ? generic_write_checks+0x2ad/0x390 [ 1393.937730] __generic_file_write_iter+0x39d/0x5d0 [ 1393.938891] generic_file_write_iter+0xdb/0x230 [ 1393.939975] ? iov_iter_init+0x3c/0x130 [ 1393.940909] new_sync_write+0x42c/0x660 [ 1393.941840] ? new_sync_read+0x6f0/0x6f0 [ 1393.942793] ? __x64_sys_pwrite64+0x201/0x260 [ 1393.943845] ? lock_release+0x680/0x680 [ 1393.944773] ? selinux_file_permission+0x92/0x520 [ 1393.945912] ? security_file_permission+0xb1/0xe0 [ 1393.947048] vfs_write+0x7c0/0xb10 [ 1393.947884] __x64_sys_pwrite64+0x201/0x260 [ 1393.948893] ? ksys_pwrite64+0x1b0/0x1b0 [ 1393.949846] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1393.951080] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1393.952286] do_syscall_64+0x33/0x40 [ 1393.953158] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1393.954364] RIP: 0033:0x7f28824e6ab7 [ 1393.955227] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1393.959524] RSP: 002b:00007f287faa8f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1393.961291] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28824e6ab7 [ 1393.962958] RDX: 0000000000000081 RSI: 0000000020000280 RDI: 0000000000000004 [ 1393.964619] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1393.966281] R10: 0000000000002100 R11: 0000000000000293 R12: 0000000000000004 [ 1393.967933] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002 [ 1393.976211] udc-core: couldn't find an available UDC or it's busy [ 1393.977830] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1394.055195] loop5: detected capacity change from 0 to 262144 [ 1394.068963] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1394.071198] EXT4-fs (loop5): get root inode failed [ 1394.071839] EXT4-fs (loop5): mount failed [ 1406.802361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:54:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 21) 14:54:26 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:54:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06", 0x66, 0x2100}], 0x0, &(0x7f0000000080)) 14:54:26 executing program 0: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:54:26 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:54:26 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'!%//-\xd0]*![]&-%}{'}, {'\\'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:54:26 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:54:26 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000001a40)={0x2bc, 0x3d, 0x400, 0x70bd29, 0x25dfdbfc, {0x12}, [@nested={0x1ab, 0x5a, 0x0, 0x1, [@generic="bb8cffc49fa52452bbbdd1a9242edc0f8c6509f8c925b8f23c8e2a5605f2001ee4c062eb411426dca0ed857f6716edba8e7318c154b72e29c20ac1ee01f738dea8d0e76d978528d0667b2cdd21ad6f31261ad6d8e5cc18e1c570777305d7277a44d50306efb64c8627c7570496d9b58865a20a18249593a1f6c14bc1ef9d19b69183dc7496bbe3b49fdd0913e1b0500a79de06e5c0935d11a70842d6f02d5a6cf4826a42771b555096fc87046fbd6c4f32912dbb65224003307651c91685307e5c", @typed={0x4, 0x46}, @typed={0x4, 0x95}, @typed={0x4, 0x44}, @typed={0x8, 0x4d, 0x0, 0x0, @uid}, @typed={0x8, 0x43, 0x0, 0x0, @fd}, @generic="716d0034fcf95268df76004a6f99f5218883b5b6b3f7f9e1efb1564f1e353558ef617b6a8e9b95ffb8e4506ef145c97760624cb03b34b527cef08b52ebc4353988b6b07a2f737be3151a9684b5355a46e8a441265729498bae8cd045fea92c958c3695c63f5a6127c6f06e5ba1212941f137005df5e559b0ba4f895cdc38b6278823d0fe32f1fb07b9113474318c9fcb8ebcf8ef0e1960e7a8006c65e2a736fa872d7750a7a9a2d4134103486da5e437ce9d", @typed={0xc, 0x95, 0x0, 0x0, @u64=0xffff}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}]}, @nested={0xe6, 0x32, 0x0, 0x1, [@typed={0xc, 0x52, 0x0, 0x0, @u64=0xfffffffffffffffa}, @generic="eff0bf45e3272cc3a5a611abad2d8422c103649b2cd4e023364704954aeadcbfba111df6bd561f76614143736d8d745ac158371a96110c3e150d2735fd8e7647f24dcc06e38be4ed38731d0aacfd29d2fffab4004a83b2398c157c0a842c6321c819809f7b07ab8a3ef6efba85aefa1a91bfcdb381030611d6ae8f31681e674f31cb93da6ae78963c092bc5f996a6333916b0dd2a09ec294f124350d0436b6715a2fca73f4cdd34fd1a7b51a57ac849f0d32b0517fa7157edbb788cd887b051e81508bca20273766cb06eec91e6e93989800603e39f8"]}, @typed={0xc, 0x64, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x30, 0x0, 0x0, @fd}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x8040}, 0x8010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000800)={0x0, 0x0, "17f042"}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1406.839499] udc-core: couldn't find an available UDC or it's busy [ 1406.841171] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1406.842877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.843231] FAULT_INJECTION: forcing a failure. [ 1406.843231] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.844435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.847081] CPU: 0 PID: 9379 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1406.847097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1406.851265] loop2: detected capacity change from 0 to 262144 [ 1406.851993] Call Trace: [ 1406.852020] dump_stack+0x107/0x167 [ 1406.852042] should_fail.cold+0x5/0xa [ 1406.852063] ? getname_flags.part.0+0x50/0x4f0 [ 1406.852085] should_failslab+0x5/0x20 [ 1406.857550] kmem_cache_alloc+0x5b/0x310 [ 1406.858498] ? new_sync_write+0x499/0x660 [ 1406.859465] getname_flags.part.0+0x50/0x4f0 [ 1406.860400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1406.860487] getname+0x8e/0xd0 [ 1406.862623] do_sys_openat2+0xf9/0x4d0 [ 1406.863533] ? build_open_flags+0x6f0/0x6f0 [ 1406.864548] ? rcu_read_lock_any_held+0x75/0xa0 [ 1406.865629] __x64_sys_openat+0x13f/0x1f0 [ 1406.866599] ? __ia32_sys_open+0x1c0/0x1c0 [ 1406.867593] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1406.868810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1406.870028] do_syscall_64+0x33/0x40 [ 1406.870892] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1406.872087] RIP: 0033:0x7f28824e6a04 [ 1406.872946] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1406.877233] RSP: 002b:00007f287faa8ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1406.877275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1406.879007] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28824e6a04 [ 1406.879019] RDX: 0000000000000002 RSI: 00007f287faa9000 RDI: 00000000ffffff9c [ 1406.879029] RBP: 00007f287faa9000 R08: 0000000000000000 R09: ffffffffffffffff [ 1406.879039] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1406.879051] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 14:54:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 22) [ 1406.915899] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) [ 1406.923762] loop7: detected capacity change from 0 to 262144 [ 1406.935497] EXT4-fs (loop2): get root inode failed [ 1406.936674] EXT4-fs (loop2): mount failed [ 1406.951625] EXT4-fs error (device loop7): ext4_fill_super:4967: inode #2: comm syz-executor.7: iget: special inode unallocated [ 1406.976063] EXT4-fs (loop7): get root inode failed [ 1406.977187] EXT4-fs (loop7): mount failed [ 1407.022247] FAULT_INJECTION: forcing a failure. [ 1407.022247] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.024874] CPU: 0 PID: 9390 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1407.026412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1407.028278] Call Trace: [ 1407.028870] dump_stack+0x107/0x167 [ 1407.029699] should_fail.cold+0x5/0xa [ 1407.030574] ? create_object.isra.0+0x3a/0xa20 [ 1407.031603] should_failslab+0x5/0x20 [ 1407.032454] kmem_cache_alloc+0x5b/0x310 [ 1407.033366] ? __generic_file_write_iter+0x1a4/0x5d0 [ 1407.034509] create_object.isra.0+0x3a/0xa20 [ 1407.035484] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1407.036625] kmem_cache_alloc+0x159/0x310 [ 1407.037552] ? new_sync_write+0x499/0x660 [ 1407.038489] getname_flags.part.0+0x50/0x4f0 [ 1407.039470] getname+0x8e/0xd0 [ 1407.040191] do_sys_openat2+0xf9/0x4d0 [ 1407.041066] ? build_open_flags+0x6f0/0x6f0 [ 1407.042048] ? rcu_read_lock_any_held+0x75/0xa0 [ 1407.043102] __x64_sys_openat+0x13f/0x1f0 [ 1407.044039] ? __ia32_sys_open+0x1c0/0x1c0 [ 1407.045007] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1407.046184] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1407.047334] do_syscall_64+0x33/0x40 [ 1407.048165] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1407.049303] RIP: 0033:0x7f28824e6a04 [ 1407.050145] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1407.054274] RSP: 002b:00007f287faa8ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1407.055970] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28824e6a04 [ 1407.057560] RDX: 0000000000000002 RSI: 00007f287faa9000 RDI: 00000000ffffff9c [ 1407.059155] RBP: 00007f287faa9000 R08: 0000000000000000 R09: ffffffffffffffff [ 1407.060757] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1407.062363] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 14:54:26 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:54:26 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1407.109280] loop5: detected capacity change from 0 to 262144 [ 1407.128478] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1407.138283] EXT4-fs (loop5): get root inode failed [ 1407.139392] EXT4-fs (loop5): mount failed 14:54:41 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:54:41 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRES32], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000dc0)=ANY=[], 0x508}, 0x1, 0x0, 0x0, 0x24040841}, 0x48804) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08006c030000ffdbdf252e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900feffffff390000000a00c80008021100000100000400d000040001010600fb00090000001c00e3800800020008000000040001000400010008000200000800000400e200"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00ff00", @ANYRES16=0x0, @ANYBLOB="100025bd7000fddbdf25620000000600b300000000000600b400740600000600b300020000000600b400fdff00000600b30003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 14:54:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 23) 14:54:41 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:54:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0", 0x68, 0x2100}], 0x0, &(0x7f0000000080)) 14:54:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x400240, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r2, 0x8800000) fsetxattr$security_evm(r2, &(0x7f0000000040), &(0x7f00000002c0)=ANY=[@ANYBLOB="040ce160a3677bb3ce90c9180f960000000039fb9491ec637ea4f26a9a7da603dc7ce23a5f0008fd5ecfde63be46fb8a2c7c2c2e7e512b589d60feed772b925bc1977752bdeeb6e6b910b95a1234f4d60e9667cc"], 0x12, 0x3) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x80) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x22) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00?'], 0x24}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0xa8, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_IE={0x28, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x3, 0xa5, @device_a, 0x8, "", 0x7ff, 0x2, @broadcast, 0x1f}}, @dsss={0x3, 0x1, 0x64}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x49, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x5c}, 0x4, 0xd1, @broadcast, 0x5, 0x9, 0x4}}, @mesh_chsw={0x76, 0x6, {0x1, 0x6f, 0x28, 0x1}}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x4}, @mic={0x8c, 0x18, {0x331, "a1c75b927086", @long="60bb88647dd6bc6d3d84a1da9e4137c4"}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ftruncate(r3, 0x8800000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x60000) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000100)={0x1, {{0x2, 0x4e23, @local}}, {{0x2, 0x0, @rand_addr=0x640100fd}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000500)={'filter\x00', 0xb8, "814182427226181620594f69c9909c272db06dad2baecd0b19d42394f71b4494d048d1ad85eba85147bea5d866395e16106283ef4019b26e40decb61605adf5295ddccbb051d5476c4ae026ab1810d1d5e6c3ad8cc25ff4b68fb40469c1722d5c237aa2ca6913156a4c36abd5af94f364a349cc1f6c6f4610b56d6b705dbd083a8aa4b9c6421e0ae75140ba716e733272e2dcf5eb4c13cf9b87e35351766348f05682822afd80cf1d5a8430c015f828e1818f1f162e9b0ff"}, &(0x7f0000000600)=0xdc) 14:54:41 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1421.958691] loop7: detected capacity change from 0 to 262144 14:54:41 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) [ 1421.986010] EXT4-fs error (device loop7): ext4_fill_super:4967: inode #2: comm syz-executor.7: iget: special inode unallocated [ 1421.988529] EXT4-fs (loop7): get root inode failed [ 1421.989503] EXT4-fs (loop7): mount failed [ 1421.998822] FAULT_INJECTION: forcing a failure. [ 1421.998822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1422.001347] CPU: 1 PID: 9417 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1422.002784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1422.004553] Call Trace: [ 1422.005113] dump_stack+0x107/0x167 [ 1422.005882] should_fail.cold+0x5/0xa [ 1422.006695] strncpy_from_user+0x34/0x470 [ 1422.007576] getname_flags.part.0+0x95/0x4f0 [ 1422.008508] getname+0x8e/0xd0 [ 1422.009188] do_sys_openat2+0xf9/0x4d0 [ 1422.010017] ? build_open_flags+0x6f0/0x6f0 [ 1422.010968] ? rcu_read_lock_any_held+0x75/0xa0 [ 1422.011963] __x64_sys_openat+0x13f/0x1f0 [ 1422.012840] ? __ia32_sys_open+0x1c0/0x1c0 [ 1422.013759] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1422.014878] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1422.015988] do_syscall_64+0x33/0x40 [ 1422.016784] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1422.017873] RIP: 0033:0x7f28824e6a04 [ 1422.018672] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1422.022607] RSP: 002b:00007f287faa8ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1422.024232] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28824e6a04 [ 1422.025760] RDX: 0000000000000002 RSI: 00007f287faa9000 RDI: 00000000ffffff9c [ 1422.027280] RBP: 00007f287faa9000 R08: 0000000000000000 R09: ffffffffffffffff [ 1422.028800] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1422.030335] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1422.032096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.033798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.035489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1422.046257] udc-core: couldn't find an available UDC or it's busy [ 1422.047626] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1422.075446] loop2: detected capacity change from 0 to 262144 14:54:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 24) [ 1422.111836] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) 14:54:41 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 14:54:41 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1422.125003] EXT4-fs (loop2): get root inode failed [ 1422.125810] EXT4-fs (loop2): mount failed 14:54:41 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x14, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) tgkill(0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000007000000000000000003003e00000000000000e300000000000800008aea00000000000000000000000000000000003800020000000000000003d0586f5c5b5f0ea51a99e7f6d62bd2cf82d62227cf687ff39cf4aae816736c1f9474c6d4796a541ce1afd2d5fdc78e0ea82527e9ec1d03103b0d554c4eb84eb713dd58390a451e4c99d935eea4384cd046ec2cc349afb44a722bd19988a0ab254af6b067"], 0xaf2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x9, 0x7, 0xe1, 0x3, 0x0, 0xbb, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xcd01, 0x1, @perf_config_ext={0x5, 0x7}, 0x40204, 0x0, 0x2, 0x6, 0x1f, 0x5, 0x0, 0x0, 0xfffff000, 0x0, 0x7fff}, 0x0, 0x4, r6, 0x1) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) pread64(r7, &(0x7f0000000040)=""/32, 0x20, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000900)={0x0, "72b65d47eda932bc407d3663234162a9"}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r6, 0x0, &(0x7f0000000300)='./file1\x00', 0x10, 0x20442, 0x23456}, 0xdb6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1422.159700] FAULT_INJECTION: forcing a failure. [ 1422.159700] name failslab, interval 1, probability 0, space 0, times 0 [ 1422.161630] CPU: 0 PID: 9436 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1422.162817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1422.164200] Call Trace: [ 1422.164649] dump_stack+0x107/0x167 [ 1422.165262] should_fail.cold+0x5/0xa [ 1422.165887] ? __alloc_file+0x21/0x320 [ 1422.166543] should_failslab+0x5/0x20 [ 1422.167175] kmem_cache_alloc+0x5b/0x310 [ 1422.167847] __alloc_file+0x21/0x320 [ 1422.168462] alloc_empty_file+0x6d/0x170 [ 1422.169127] path_openat+0xe6/0x2770 [ 1422.169739] ? __lock_acquire+0x1657/0x5b00 [ 1422.170475] ? path_lookupat+0x860/0x860 [ 1422.171135] ? perf_trace_lock+0xac/0x490 [ 1422.171819] ? SOFTIRQ_verbose+0x10/0x10 [ 1422.172488] ? find_held_lock+0x2c/0x110 [ 1422.173168] ? __lockdep_reset_lock+0x180/0x180 [ 1422.173960] do_filp_open+0x190/0x3e0 [ 1422.174595] ? may_open_dev+0xf0/0xf0 [ 1422.175230] ? alloc_fd+0x2e7/0x670 [ 1422.175838] ? lock_downgrade+0x6d0/0x6d0 [ 1422.176522] ? do_raw_spin_lock+0x121/0x260 [ 1422.177227] ? rwlock_bug.part.0+0x90/0x90 [ 1422.177924] ? _raw_spin_unlock+0x1a/0x30 [ 1422.178608] ? alloc_fd+0x2e7/0x670 [ 1422.179217] do_sys_openat2+0x171/0x4d0 [ 1422.179870] ? build_open_flags+0x6f0/0x6f0 [ 1422.180592] ? rcu_read_lock_any_held+0x75/0xa0 [ 1422.181363] __x64_sys_openat+0x13f/0x1f0 [ 1422.182069] ? __ia32_sys_open+0x1c0/0x1c0 [ 1422.182783] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1422.183637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1422.184493] do_syscall_64+0x33/0x40 [ 1422.185099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1422.185931] RIP: 0033:0x7f28824e6a04 [ 1422.186536] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1422.189526] RSP: 002b:00007f287faa8ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1422.190789] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28824e6a04 [ 1422.191962] RDX: 0000000000000002 RSI: 00007f287faa9000 RDI: 00000000ffffff9c [ 1422.193123] RBP: 00007f287faa9000 R08: 0000000000000000 R09: ffffffffffffffff [ 1422.194296] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1422.195460] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 14:54:41 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:54:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0", 0x68, 0x2100}], 0x0, &(0x7f0000000080)) 14:54:41 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}) [ 1422.281851] loop7: detected capacity change from 0 to 262144 [ 1422.287879] EXT4-fs (loop7): invalid first ino: 0 [ 1422.305392] loop2: detected capacity change from 0 to 262144 14:54:41 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000440)) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$update(0xf, r2, &(0x7f00000000c0), 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000780)={0x0, "ac32add5e1ce4bf276b974eb3c1e4c25"}) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="e07e23aa781062075de035286d7f9d96650f8e1a6b9f0fb2d417fca3f9d5dcce05da14fc79f95a34b46bb82e6477014bd66866b2494ea3db51ed8875a17cfeec990ece42f51219b7733647243e43ac3643d43b53ee78b23e54b13d6f16b89e0c511cc8d908b66d154f0a31f969c54b5387a4", 0x72, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$user(&(0x7f00000002c0), 0x0, &(0x7f0000000880), 0x0, 0x0) keyctl$revoke(0x3, r4) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffc, r1, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000740), 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, r5) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x48020200) 14:54:41 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:54:41 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1422.382801] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) [ 1422.387532] EXT4-fs (loop2): get root inode failed [ 1422.388659] EXT4-fs (loop2): mount failed [ 1422.454387] udc-core: couldn't find an available UDC or it's busy [ 1422.456047] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 14:54:56 executing program 0: ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f00000010c0)={&(0x7f0000001080)=""/32, 0x20}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x3ff, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x40}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) mq_open(&(0x7f0000001300)='\r@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4\xf9\x82qU+\\\xde\xe7c\x7fO\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0\x82,\x00\xb3\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7E\xf3\xb9\a\x18p\xbf\x86^6\xa8\x15\x02q\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfes\xd6.\x87\x15v\x18\xe4J\xad\x17\xb4\x8b\x06\xd15\xdcm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\xe9L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\v+~\xabu\xf9K`!\xce\xc1\x97\xd6\xe2\xf3\x95\xc5\xd5~\xabi\xd3e0Q^\xe8=\xb9-\xd0\xd0\xb8\x0e\x04q\x86\xcc\xa9\xaf\xceb\x0fNz\x98\xedO\x8d| \\4\xac\x9f\xf3OJ\xc5\x13\f\xaa\xa4\xd9\xb0z\xad\x88x\x1bF\x84\xed\xfd\x7f\x87\xc9\xd3\xafw\xaem\xf7\xa0\x97\x0f\x0ex;`\x81\xd4\x900\xc5p\x97\xec\xdcJ\xaa\xf4\x95\xfc\xec\x88M', 0x3, 0x40, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x80000, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) openat(0xffffffffffffffff, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000100)) dup3(0xffffffffffffffff, r0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe2(&(0x7f0000001040)={0x0, 0x0}, 0x0) vmsplice(r2, &(0x7f00000012c0)=[{&(0x7f0000000040)="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", 0xfffffe90}], 0x1, 0x0) vmsplice(r2, &(0x7f0000001140)=[{&(0x7f0000001200)='<', 0x1}], 0x1, 0x3) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44f5, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 14:54:56 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:54:56 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:54:56 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x3, 0x6, 0x9, 0x4, 0x0, 0x100000001, 0x80044, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x18020, 0xfffffffffffffff9, 0xfff, 0x0, 0x3, 0x80, 0x1000, 0x0, 0x1f, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = getpgid(0xffffffffffffffff) r2 = fork() waitid(0x0, r2, &(0x7f0000000100), 0x4, &(0x7f0000000500)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xffffffffffffff3a, &(0x7f0000001380)={&(0x7f0000006dc0)={0x133c, 0x36, 0x200, 0x70bd29, 0x25dfdbfc, {0x15}, [@nested={0x10f0, 0x40, 0x0, 0x1, [@generic="cc866658cef90a47dd9882b5", @typed={0x8, 0x96, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x37, 0x0, 0x0, @pid=r1}, @generic="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", @typed={0xc, 0x3c, 0x0, 0x0, @u64=0x60e}, @typed={0xa1, 0x4a, 0x0, 0x0, @binary="80e659ca60141cf24b6b0a6927212654c9c685c10d175fc9bfe721be6a39f19978002027640c0fa40e29ae6a161f1bd3227a3504f5385d5a55ea81b0cad9f4048f07e19ab746b1758b2623b46af05adeeed0a944e54cf4533008e60b2609a7519c228c738adaf032fc95df628ca214c9b28545e0e5bf09b65782268726f5078098de8554bbbcc1ebce2058176527eed589c6b43178f8df1cde06d20fc7"}, @generic]}, @generic="2c2e81879305247d682876785d0fa34e0c6cd50adffcb11929f93875e926868bd686e66cb5ebfc61dbe56fcb71abfd3bbffe235331cecf674414f76b11f90890d46400bc90ff9699b9fce93e814a47687d82e706ae4237557304b4d1d9e3bff9adf86aa7e047eea204197e0ea12e6045d7fe138ab022fefe793a8bf65005924f9660441020a9a5a8e4b04bee8b03a6a36b5fbe", @generic="5135de1cae6d17726c9e74c7056978c072aee04e60ede86ab2eb1ccaa79d7f9b0ec2561b21c7c6b3c23a098ccc5e4ebc1e6ab5ce6d42bd4cf1bc11f6220084e149a37a91fe6302b6d9e158ba5f86d0dfe622d892d93d04b61ab2cead47c97ce90ff9201f101ba5d7f930b25534841f820aab425f27176f157dfece1c6210e8df55ecbdce2486fb373b4f5994eaf369fb0cf34d8e99d710225da4b3935006af4b811d78532050", @generic="e69bbd853d5033bcab0b6933ab40a5b1f13c6268b799e92816fc05dc91f127975abbbc0f68d6d780c10f9caf968c5266b820d3b14e6131ec023e0e177222779aab0ef3b2b0afc7b1cadd23230d079d25ade8a80db069c0a73ca75805f73e261d974c432aca38214adc596f1617be143eb56edfb82ce4c2b7cf47d2c358405ef3a5fb06f06d9879bf9045c0f1f0883bbad89244d82e79ea922c9d0e7b016d78c394656a659ce61f94e80563c271535a3831653e67877bf424cb1e20b9c4ad5aba346bec31", @generic="231f692e8a51d0148dd477b1d2ed873d2ee1deacceb7b5e75a689b4f03bcdb49f472de09392eef235962a4235b6fb577136bbd0c75bb957b5c4e3e", @typed={0x0, 0x3b, 0x0, 0x0, @u32=0x1000}, @nested={0x0, 0x82, 0x0, 0x1, [@generic="d9094dc359dc5329a73deda8b00e263882ab7186229df7b5b9af7102af16b5b8ff570ea159c3a58a4309832f558b9f0a9994b66bfbfec92b4c419224b4e0e6ef4620cf8f9638207c2d3a796d05086a85a6fd09c87c3ee1b77c7228c6a8ce023c8d3eaba93835cee6d8fea0eafce2ede946a94ab2b1d303f9809a4567370473af1eb5787d72b12541a7d3401102e17ca868deb4c1adb23fcf8d14aee21bcb8fed2275688cb1978ca2ffbdead7dcd74e00220541ddef81232ae18e443a2c7b7f8cc06be2da3872890a3cd2", @typed={0x0, 0x17, 0x0, 0x0, @binary="35a7310cf2d2c54ebf961efa6af1838a251f7367b80db75af8d42ce49a162d0de44c7d5c76a73b2473373388b99806dbca956c2ecf5b47e42dab2542a49cc615b79c1e191cf7e1defd4992e44f94e192536ec9246c7e776aab31"}, @generic="f0b8e3d5cc0aad2346b13e794e74a3b73f0e976647f3796a3cf16eec169afae08a71ac07c60099064ec69c9836b35636eb9ddbf087686b3e70b4979b47689f77f7b9f2b433db8ef2b89b03f41e0b2ba86498803b1b7b0d8199a2424be3fa0405b64abe10fcb68a60f020f6744b8acb8caef0e8b70de65805f21579f8fb4ef966828804daa25aa24e824b3be1046531204ff29225a23ba63e74881c94d0e396b97220a3f5ce2f31ad97a46c44bdf0dc729d6dfca511a6a39f327f90cbf3d59863d114c27881361b598958", @generic="ada1de2fe24bf796019e8c290587c9e9fda82784703d51de1a49d3e8d44f91a162ec4eb3db888c1df9631dc4c74e4400523e0de1ef08b62303c8f2dc5b5f3f4a1c2e46242dc55c869eadcfc9fbf324ae3cb7fbf58bff45e0756b3d3415fabbaf70764d0931af99b0760fbf3ed0710e1e59504deba44c4cf3377e21f6700ca63ca12c45023bc376e488662dfd5230ba601a09f4d4b1da125fd05bf470dfc211db79332581e485377e02bef4e5971e003dc7c8ac432a63117db6b55a417f5424a23484c74d5b87a5c59f3d8f37c9f48593b538341acf8cd78dda4019ed923d95114294", @generic="f4e407d010ae56008320056aa21b422a81ab872c72328d54f4f8", @typed={0x0, 0x37, 0x0, 0x0, @str='%\x00'}, @typed={0x0, 0xc, 0x0, 0x0, @binary="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"}]}, @generic="8bd351c0588acb1c95a9e14ad3c0bcde9b6c7582f22544c4f349ac800261576bfa28d1d97edb40e00fa88b6a44b70aca0823eee6b5c62af848c0c3fe263100fb5158fc6603a321e462d06cb55ee7259be82a387ee1ced7c42046f04e0a9c90b9ce436da0bfc00c0884386e05dc1d3df41e9de7d23d5d05344aee8a5bf848ff52cf1f97b1c45fb1fbc64c2263a30f97693bf371fdbfd22bedeece7d3a79b272497fe8b7356046e94b680f8e080d66f0888696a470632417ea8de344dcac0007ec32ca10e66167ffd29a0e50633f46638f9dc582e377c884c4fcbc6fb2c9bdadeed648", @nested={0x0, 0x44, 0x0, 0x1, [@generic="0fd03f978e1d8e4fdd9ae746589b066c7358daf79835f62c2288970a19ec9c1c176d14a23d45b5c64552d38ab569180449add01abfdea6d5e9047266046ca30b99e864cab9d07a3fa3c8e5cdfa1902b751abdb0f6c4a7adf302d20a65b3b46d3522470343e09981b5e73a7f2ba5c7b2916511386e2b1112aeee80b30d69baa12ebb98c51bafcdb1d0baffacd974906d162366445a988aac1822ccc4c9bf1395bbe68ee981802153170f5ceaf6358a1c42dba5d2e5870051b9ab3595db1dcfe00ef496629788ec310a9544b1d9774ab67755c99f562e87067ec43214c627a81b0773934afa51b503e1b8eec494edbb07af6a8"]}, @nested={0x0, 0x75, 0x0, 0x1, [@generic="fecffd280cf199bfe09b50fc2bace0822d2f2c96b6af4b94c252ccf1db51d5a15a11b964b14f486b9529983afec57a6891593164efb4dc1e706c34f15297f2808f31be76f59dd6da80d352dede569f63da927786ba530975e648e483202a025cc9e50a0a035b83003970d838a595acbf7935af", @typed={0x0, 0x3b, 0x0, 0x0, @pid=r2}, @typed={0x0, 0x1d, 0x0, 0x0, @uid=0xee00}]}, @typed={0x0, 0x85, 0x0, 0x0, @fd=r0}]}, 0x133c}, 0x1, 0x0, 0x0, 0x800}, 0x20040080) mincore(&(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/107) 14:54:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 25) 14:54:56 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}) 14:54:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0", 0x68, 0x2100}], 0x0, &(0x7f0000000080)) 14:54:56 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1437.387051] loop7: detected capacity change from 0 to 262144 [ 1437.398685] EXT4-fs (loop7): invalid first ino: 0 [ 1437.399340] FAULT_INJECTION: forcing a failure. [ 1437.399340] name failslab, interval 1, probability 0, space 0, times 0 [ 1437.402492] CPU: 1 PID: 9488 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1437.404100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1437.406033] Call Trace: [ 1437.406670] dump_stack+0x107/0x167 [ 1437.407522] should_fail.cold+0x5/0xa [ 1437.408423] ? create_object.isra.0+0x3a/0xa20 [ 1437.409487] should_failslab+0x5/0x20 [ 1437.410374] kmem_cache_alloc+0x5b/0x310 [ 1437.411339] create_object.isra.0+0x3a/0xa20 [ 1437.412357] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1437.413547] kmem_cache_alloc+0x159/0x310 [ 1437.414528] __alloc_file+0x21/0x320 [ 1437.415392] alloc_empty_file+0x6d/0x170 [ 1437.416338] path_openat+0xe6/0x2770 [ 1437.417202] ? __lock_acquire+0x1657/0x5b00 [ 1437.418216] ? path_lookupat+0x860/0x860 [ 1437.419167] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1437.420385] ? SOFTIRQ_verbose+0x10/0x10 [ 1437.421321] ? find_held_lock+0x2c/0x110 [ 1437.422278] do_filp_open+0x190/0x3e0 [ 1437.423168] ? may_open_dev+0xf0/0xf0 [ 1437.424059] ? alloc_fd+0x2e7/0x670 [ 1437.424905] ? lock_downgrade+0x6d0/0x6d0 [ 1437.425864] ? do_raw_spin_lock+0x121/0x260 [ 1437.426867] ? rwlock_bug.part.0+0x90/0x90 [ 1437.427857] ? _raw_spin_unlock+0x1a/0x30 [ 1437.428823] ? alloc_fd+0x2e7/0x670 [ 1437.429689] do_sys_openat2+0x171/0x4d0 [ 1437.430626] ? build_open_flags+0x6f0/0x6f0 [ 1437.431639] ? rcu_read_lock_any_held+0x75/0xa0 [ 1437.432736] __x64_sys_openat+0x13f/0x1f0 [ 1437.433700] ? __ia32_sys_open+0x1c0/0x1c0 [ 1437.434714] do_syscall_64+0x33/0x40 [ 1437.435590] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1437.436785] RIP: 0033:0x7f28824e6a04 [ 1437.437654] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1437.441981] RSP: 002b:00007f287faa8ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1437.443767] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28824e6a04 [ 1437.445438] RDX: 0000000000000002 RSI: 00007f287faa9000 RDI: 00000000ffffff9c [ 1437.447116] RBP: 00007f287faa9000 R08: 0000000000000000 R09: ffffffffffffffff [ 1437.448785] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1437.450476] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1437.478833] udc-core: couldn't find an available UDC or it's busy [ 1437.480447] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1437.489280] loop2: detected capacity change from 0 to 262144 14:54:56 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}) [ 1437.513269] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 5880, entries 57476, max 63019(0), depth 58919(58919) [ 1437.530227] EXT4-fs (loop2): get root inode failed [ 1437.531529] EXT4-fs (loop2): mount failed 14:54:56 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="28ab741f5d328107d0ed3300000093b200dff4655fe0f4655fe0f4655f", 0x1d, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) openat(r0, &(0x7f0000000000)='./file0\x00', 0x22440, 0x2) [ 1437.539167] loop5: detected capacity change from 0 to 262144 [ 1437.549182] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1437.553645] EXT4-fs (loop5): get root inode failed [ 1437.554970] EXT4-fs (loop5): mount failed 14:54:56 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:54:56 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:54:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 26) [ 1437.653333] loop7: detected capacity change from 0 to 262144 14:54:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69}], 0x0, &(0x7f0000000080)) [ 1437.663661] EXT4-fs (loop7): invalid first ino: 0 [ 1437.697178] FAULT_INJECTION: forcing a failure. [ 1437.697178] name failslab, interval 1, probability 0, space 0, times 0 [ 1437.699748] CPU: 0 PID: 9511 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1437.701281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1437.703154] Call Trace: [ 1437.703751] dump_stack+0x107/0x167 [ 1437.704570] should_fail.cold+0x5/0xa [ 1437.705427] ? security_file_alloc+0x34/0x170 [ 1437.706436] should_failslab+0x5/0x20 [ 1437.707293] kmem_cache_alloc+0x5b/0x310 [ 1437.708209] security_file_alloc+0x34/0x170 [ 1437.709176] __alloc_file+0xb7/0x320 [ 1437.710014] alloc_empty_file+0x6d/0x170 [ 1437.710930] path_openat+0xe6/0x2770 [ 1437.711764] ? __lock_acquire+0x1657/0x5b00 [ 1437.712746] ? path_lookupat+0x860/0x860 [ 1437.713659] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1437.714840] ? SOFTIRQ_verbose+0x10/0x10 [ 1437.715743] ? find_held_lock+0x2c/0x110 [ 1437.716675] do_filp_open+0x190/0x3e0 [ 1437.717523] ? may_open_dev+0xf0/0xf0 [ 1437.718380] ? alloc_fd+0x2e7/0x670 [ 1437.719235] ? lock_downgrade+0x6d0/0x6d0 [ 1437.720185] ? do_raw_spin_lock+0x121/0x260 [ 1437.721186] ? rwlock_bug.part.0+0x90/0x90 [ 1437.722154] ? _raw_spin_unlock+0x1a/0x30 [ 1437.723083] ? alloc_fd+0x2e7/0x670 [ 1437.723914] do_sys_openat2+0x171/0x4d0 [ 1437.724800] ? build_open_flags+0x6f0/0x6f0 [ 1437.725783] ? rcu_read_lock_any_held+0x75/0xa0 [ 1437.726834] __x64_sys_openat+0x13f/0x1f0 [ 1437.727775] ? __ia32_sys_open+0x1c0/0x1c0 [ 1437.728739] do_syscall_64+0x33/0x40 [ 1437.729575] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1437.730732] RIP: 0033:0x7f28824e6a04 [ 1437.731564] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1437.735695] RSP: 002b:00007f287faa8ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1437.737396] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28824e6a04 [ 1437.739008] RDX: 0000000000000002 RSI: 00007f287faa9000 RDI: 00000000ffffff9c [ 1437.740606] RBP: 00007f287faa9000 R08: 0000000000000000 R09: ffffffffffffffff [ 1437.742206] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1437.743798] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1437.811681] loop2: detected capacity change from 0 to 262144 [ 1437.846127] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1437.850294] EXT4-fs (loop2): get root inode failed [ 1437.851513] EXT4-fs (loop2): mount failed 14:55:14 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:55:14 executing program 0: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="022029bd7000fbdbdf2502ddffff13009c00fe880008000000deffffff00000000000007ff00", @ANYRES32=0x0, @ANYBLOB="04000500060001004e230000140009000100000000000000000000000000000008000600ac1414bb"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000400", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) sendfile(0xffffffffffffffff, r3, &(0x7f0000000240)=0x3f, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000340), 0x1000) bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)=ANY=[@ANYBLOB="01003f836340e5c45308d6b6", @ANYRES32=r4, @ANYBLOB="ff010000000000002e2f66696c65312f66696c653000"]) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xe1, 0x40, 0x80, 0x9, 0x0, 0x20000000000, 0x4480, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc5d6, 0x0, @perf_config_ext={0x1, 0x5}, 0x350, 0x4460, 0x1, 0x3, 0x1, 0x8, 0x9129, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x8, r5, 0x9) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 14:55:14 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) lseek(r0, 0x4, 0x2) [ 1454.863874] loop7: detected capacity change from 0 to 262144 [ 1454.868822] EXT4-fs (loop7): unsupported inode size: 0 [ 1454.869622] EXT4-fs (loop7): blocksize: 2048 14:55:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69}], 0x0, &(0x7f0000000080)) 14:55:14 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:55:14 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:55:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 27) 14:55:14 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) [ 1454.902810] FAULT_INJECTION: forcing a failure. [ 1454.902810] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.905469] CPU: 1 PID: 9545 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1454.907053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1454.908977] Call Trace: [ 1454.909596] dump_stack+0x107/0x167 [ 1454.910444] should_fail.cold+0x5/0xa [ 1454.911329] ? create_object.isra.0+0x3a/0xa20 [ 1454.912374] should_failslab+0x5/0x20 [ 1454.913248] kmem_cache_alloc+0x5b/0x310 [ 1454.914188] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1454.915469] create_object.isra.0+0x3a/0xa20 [ 1454.916479] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1454.917653] kmem_cache_alloc+0x159/0x310 [ 1454.918620] security_file_alloc+0x34/0x170 [ 1454.919610] __alloc_file+0xb7/0x320 [ 1454.920468] alloc_empty_file+0x6d/0x170 [ 1454.921397] path_openat+0xe6/0x2770 [ 1454.922253] ? __lock_acquire+0x1657/0x5b00 [ 1454.923267] ? path_lookupat+0x860/0x860 [ 1454.924200] ? perf_trace_lock+0xac/0x490 14:55:14 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1454.925148] ? SOFTIRQ_verbose+0x10/0x10 [ 1454.926206] ? find_held_lock+0x2c/0x110 [ 1454.927174] ? __lockdep_reset_lock+0x180/0x180 [ 1454.928250] do_filp_open+0x190/0x3e0 [ 1454.929126] ? may_open_dev+0xf0/0xf0 14:55:14 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000003c0)=""/4, &(0x7f0000000400)=0x4) fcntl$addseals(r1, 0x409, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000440)=0x7, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000bc0)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0x3, 0x8, &(0x7f0000000140)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef0397c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024d4751fcbfb4d3ec4b7b6dc1", 0x3f, 0x0, 0x1}, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', r3) r4 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa) add_key(0x0, 0x0, 0x0, 0x0, r4) unshare(0x4c000200) add_key$keyring(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000240)='\x00', &(0x7f0000000480)='$[.@\x00'], &(0x7f0000000780)=[&(0x7f0000000680)='syz', &(0x7f00000006c0)=':\'!!.\x00', &(0x7f0000000700)='keyring\x00', &(0x7f0000000740)=']%.+-+$&\x00'], 0x400) [ 1454.929998] ? alloc_fd+0x2e7/0x670 [ 1454.931045] ? lock_downgrade+0x6d0/0x6d0 [ 1454.931992] ? do_raw_spin_lock+0x121/0x260 [ 1454.932973] ? rwlock_bug.part.0+0x90/0x90 [ 1454.933949] ? _raw_spin_unlock+0x1a/0x30 [ 1454.934904] ? alloc_fd+0x2e7/0x670 [ 1454.935752] do_sys_openat2+0x171/0x4d0 [ 1454.936659] ? build_open_flags+0x6f0/0x6f0 [ 1454.937656] ? rcu_read_lock_any_held+0x75/0xa0 [ 1454.938732] __x64_sys_openat+0x13f/0x1f0 14:55:14 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1454.939732] ? __ia32_sys_open+0x1c0/0x1c0 [ 1454.940722] do_syscall_64+0x33/0x40 [ 1454.941574] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1454.942749] RIP: 0033:0x7f28824e6a04 [ 1454.943597] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1454.947772] RSP: 002b:00007f287faa8ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1454.949495] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28824e6a04 [ 1454.951097] RDX: 0000000000000002 RSI: 00007f287faa9000 RDI: 00000000ffffff9c [ 1454.952700] RBP: 00007f287faa9000 R08: 0000000000000000 R09: ffffffffffffffff [ 1454.954307] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1454.955921] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1454.960665] loop2: detected capacity change from 0 to 262144 [ 1454.983988] loop7: detected capacity change from 0 to 262144 [ 1454.992562] udc-core: couldn't find an available UDC or it's busy [ 1454.994443] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1454.999660] loop5: detected capacity change from 0 to 262144 [ 1455.009854] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1455.018495] EXT4-fs (loop2): get root inode failed [ 1455.019228] EXT4-fs (loop2): mount failed [ 1455.031516] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1455.040527] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1455.043172] EXT4-fs (loop5): get root inode failed [ 1455.043903] EXT4-fs (loop5): mount failed [ 1455.049999] EXT4-fs (loop7): unsupported inode size: 0 [ 1455.050734] EXT4-fs (loop7): blocksize: 2048 14:55:14 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}], [{@seclabel}, {@dont_hash}]}) 14:55:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69}], 0x0, &(0x7f0000000080)) 14:55:14 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:55:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 28) 14:55:14 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:55:14 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1455.200704] loop2: detected capacity change from 0 to 262144 [ 1455.203166] FAULT_INJECTION: forcing a failure. [ 1455.203166] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.204843] CPU: 0 PID: 9574 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1455.205675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1455.206687] Call Trace: [ 1455.207014] dump_stack+0x107/0x167 [ 1455.207458] should_fail.cold+0x5/0xa [ 1455.207924] ? __kthread_create_on_node+0xd1/0x400 [ 1455.208518] should_failslab+0x5/0x20 [ 1455.208983] kmem_cache_alloc_trace+0x55/0x320 [ 1455.209540] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1455.210110] __kthread_create_on_node+0xd1/0x400 [ 1455.210691] ? __kthread_parkme+0x1d0/0x1d0 [ 1455.211219] ? __mutex_lock+0x4fe/0x10b0 [ 1455.211710] ? loop_configure+0xc8a/0x1410 [ 1455.212229] ? do_raw_spin_unlock+0x4f/0x220 [ 1455.212760] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1455.213331] kthread_create_on_node+0xbb/0x100 [ 1455.213882] ? __kthread_create_on_node+0x400/0x400 [ 1455.214485] ? lockdep_init_map_type+0x2c7/0x780 [ 1455.215066] ? lockdep_init_map_type+0x2c7/0x780 [ 1455.215645] loop_configure+0x3e7/0x1410 [ 1455.216144] lo_ioctl+0xa57/0x16b0 [ 1455.216574] ? avc_has_extended_perms+0x7f1/0xf40 [ 1455.217161] ? loop_set_status_old+0x250/0x250 [ 1455.217711] ? avc_ss_reset+0x180/0x180 [ 1455.218194] ? find_held_lock+0x2c/0x110 [ 1455.218706] ? __lock_acquire+0xbb1/0x5b00 [ 1455.219249] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1455.219885] ? generic_block_fiemap+0x60/0x60 [ 1455.220429] ? lock_downgrade+0x6d0/0x6d0 [ 1455.220928] ? build_open_flags+0x6f0/0x6f0 [ 1455.221453] ? loop_set_status_old+0x250/0x250 [ 1455.222002] blkdev_ioctl+0x291/0x710 [ 1455.222465] ? blkdev_common_ioctl+0x1930/0x1930 [ 1455.223045] ? selinux_file_ioctl+0xb6/0x270 [ 1455.223588] block_ioctl+0xf9/0x140 [ 1455.224032] ? blkdev_read_iter+0x1c0/0x1c0 [ 1455.224556] __x64_sys_ioctl+0x19a/0x210 [ 1455.225051] do_syscall_64+0x33/0x40 [ 1455.225505] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1455.226125] RIP: 0033:0x7f28825338d7 [ 1455.226579] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1455.228818] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1455.229740] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1455.230598] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1455.231469] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1455.232326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1455.233192] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1455.254819] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1455.273000] EXT4-fs (loop2): get root inode failed [ 1455.274125] EXT4-fs (loop2): mount failed [ 1455.303694] udc-core: couldn't find an available UDC or it's busy [ 1455.305264] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 14:55:27 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:55:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:55:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00?'], 0x24}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf2536e9ff0008ba300000000000e70dd8debe59ef7fe2ff1f412d37d9e6adcd192363883aed4307", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24004100) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="20008000", @ANYRES16=r3, @ANYBLOB="00042dbd7000ffdbdd0900000000000000008100000013000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8844) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) openat(0xffffffffffffff9c, 0x0, 0x606542, 0x0) clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x540, 0x0) openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) clone3(&(0x7f0000000440)={0x141000, 0x0, 0x0, &(0x7f0000000200), {}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1}, 0x58) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000080)) 14:55:27 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:55:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x5420, &(0x7f00000000c0)=0x4) r1 = timerfd_create(0x7, 0x80800) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000440), 0x4) poll(&(0x7f0000000980)=[{r1, 0x1}, {r2}], 0x2, 0x1) r3 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7, 0x9, &(0x7f0000000800)=[{&(0x7f0000000100)="da6ba4d5088a4442bcd28e13ec845d13bdec8de233f165c91804faf4cda6628a94e58c5cdd2053f80527dde1c6eae57ea17c9e582d754ee1bb194d3bc7c5f3aeb160ecbd1bbf2ca82fafcc3891411d57a3963585ab444755e2251d52f7fb4975eaeb9a8342fbd9613ab5d25642c614ed5e1c7e2dc31164a53a3b4efcac007afeba5e54cc76285515c77dd3ba4d42b7854a2c781a0ae8947cad804486b6166d2772699e78cd3baed0ec16116724060fe6765de224e2d8d190744ea1599e44a426a5e6fb840dfa9f93fdac24997d11a15d398c417a1a0aadd0e4e1a170", 0xdc}, {&(0x7f0000000200)="2cfebc3e4e18a72fc565fb5e4a49cff6d243d439d01ca6fb64b12cae54cb70daef39db97fc78ff20021cd119586013919237956cbc101380c962d2e4365438638c4b367b21275e15c8c9f3a3e38f0da43073be77cdad47da3828b189305bdd74959fafe227d6fdd7eb062766b27b9c2e27b619a22535c9b5a2c78ee64f5cbf2f6a69ef628a9546a3f35721c99b1c410ce146d2dfa296eaac77117e6feda63e73d4e9cf2319cfb509de76bd7bedccb479d9b3eceb628f7c915f7eb1900ae13b79", 0xc0, 0x1000}, {&(0x7f00000002c0)="a13b7e39a34ebcd6074077c84a26b11c075885056d481970bbd74eb95e6fdda8e1a150a4a9475df6fbd4906b727ca48e178fc26637be1e28204b150e05e13971bcddfdb7b7d2eab7e15b61ccd81e7e454039d5da4e91531e0c215ab4b1123e025fbff29f2e5ba4dc7c8104a009b91fb54ddea95f601fdfd457524f8a879f7af2db47442c9b68b8829d66b924935183e197bb5468a4a761bac30042cdf1a719e436477ed0b20855ea0b8c0327546198ea7a0303401d207137b2fa5c5ff7c4dda22724a1a43be9a1635ccf", 0xca, 0xfffffffffffffffd}, {&(0x7f00000003c0)="ab5e81a89dea0299cae5ca73cc7261f7fc116a4596a14a38b1df321cf1d1a4696b2d4db9729498df951a125bb423a19b0934a117c025a0af6f6211eff847c6ebb169243ed2fed2e1a1b17d1c7df4e21b46e421eb76dd81207c88f5ac6b8aa95c9f0b02fe14d41f50ea57e84537f1d1cf150c93b0d82910b4c7c38e4967f08829057020554ab7f38f2c4de2e985a34b50204b3730b536f6ddb2ce03526cdc4703e597862adfb2d71c15014c2d539cc6ef3ce3eba29afadf052233", 0xba, 0x800}, {&(0x7f0000000480)="5b95b63edbb4d2cbc217e8ddf5069d379a79a48ffcd15f73ec0cca10e59b49418cf78fc6a3887b277564b4bc945b6354aeb2a8cc1eb76c72788d3f740b5bf5dc9e76ed99d8f1e1d9a45804633c9e3b6c25d911a97967782ca4abf423ea2757eededa36502c5f87dc0a08f8f80a1ce7c97ce028ae3a05cae4c8fd7cb188ea65f3d1812a1502", 0x85, 0x1f}, {&(0x7f0000000540)="cdab311f18d0b283379c2a948e725209ec2295c060ada53a4b3efe8be147244a6cc07cd7c7c00ab379d47aa5b5a361daf7480d0d404391a19a69de14092b0662a8bedd2c52f76a58767494058cfbd1558d9451a1710d4597103de1fb4e7e98a88fdfe320da866787877ef0bb6b2c895674a10acabb46f5132815a599cc1e9690239a6f127712", 0x86, 0x27721d43}, {&(0x7f0000000600)="2e8bb986c6e9b08272b1ef6b8a0385caa5e5697411ca439135462ab29365f3bc83338309fb1ca93e0cec6a6987b937f65e9420135352fc84335d86efc0b8a442e3cde09c12eb4758204589e23ca2bbda5f44c9e6", 0x54, 0x5}, {&(0x7f0000000680)="83fbfb4b3a073bb492220a99fc8ec16a25a0532c254f9534def9ce7dc893e4267c0b14ee0876491b21b29b974eaa699cf6866e637331b9360a985e846d682fcf304bb3529726321070a75525c5d5899d4751ac967b0e0832adefb2f3b28a6226daf4dd6f86e690dcff33991cd593f188e7a841b577790a2e229189ce8cbda96ba4ab1da3aa8df3b7402a71bf6fccb6e28d3a4195e9247934db6f0eb9a2717c9521f52307b178e52705063eed897675ed53a742fe0785e3c1b06478b8b4d5df8e376e709b0bf48498409026cb8fbe89e3f1a2d048df5f1e2e630e1e4f15661c2d0343f381bc52f44b5fee0724c8474a4563e5c655dc", 0xf5, 0x3}, {&(0x7f0000000780)="bb452c109ac8d7ecfc6657d490894acf7b294d29b217575f9fe9bae481b1da770b741b01df30fc4909c4c582cdb7eab0576dece88ab9a9505a2d4f5ac49b1913c4f2565ec0e0adc652520c", 0x4b}], 0x140440, &(0x7f0000000900)={[{@cruft}], [{@euid_lt}]}) fcntl$lock(r3, 0x6, &(0x7f0000000940)={0x0, 0x4, 0xfffffffffffffffe, 0x8, 0xffffffffffffffff}) 14:55:27 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:55:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 29) 14:55:27 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}], [{@seclabel}, {@dont_hash}]}) [ 1467.898672] udc-core: couldn't find an available UDC or it's busy [ 1467.899655] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1467.903271] loop7: detected capacity change from 0 to 262144 [ 1467.908016] EXT4-fs (loop7): unsupported inode size: 0 [ 1467.908684] EXT4-fs (loop7): blocksize: 2048 [ 1467.913192] loop2: detected capacity change from 0 to 262144 [ 1467.915135] FAULT_INJECTION: forcing a failure. [ 1467.915135] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.918142] CPU: 1 PID: 9597 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1467.919943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1467.922077] Call Trace: [ 1467.922784] dump_stack+0x107/0x167 [ 1467.923761] should_fail.cold+0x5/0xa [ 1467.924745] ? create_object.isra.0+0x3a/0xa20 [ 1467.926056] should_failslab+0x5/0x20 [ 1467.927313] kmem_cache_alloc+0x5b/0x310 [ 1467.928630] create_object.isra.0+0x3a/0xa20 [ 1467.929919] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1467.931246] kmem_cache_alloc_trace+0x151/0x320 [ 1467.932451] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1467.933665] __kthread_create_on_node+0xd1/0x400 [ 1467.934942] ? __kthread_parkme+0x1d0/0x1d0 [ 1467.936061] ? __mutex_lock+0x4fe/0x10b0 [ 1467.937102] ? loop_configure+0xc8a/0x1410 [ 1467.938184] ? do_raw_spin_unlock+0x4f/0x220 [ 1467.939354] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1467.940426] kthread_create_on_node+0xbb/0x100 [ 1467.941405] ? __kthread_create_on_node+0x400/0x400 [ 1467.942477] ? lockdep_init_map_type+0x2c7/0x780 [ 1467.943528] ? lockdep_init_map_type+0x2c7/0x780 [ 1467.944532] loop_configure+0x3e7/0x1410 [ 1467.945405] lo_ioctl+0xa57/0x16b0 [ 1467.946158] ? avc_has_extended_perms+0x7f1/0xf40 [ 1467.947175] ? loop_set_status_old+0x250/0x250 [ 1467.948143] ? avc_ss_reset+0x180/0x180 [ 1467.948979] ? find_held_lock+0x2c/0x110 [ 1467.949846] ? __lock_acquire+0xbb1/0x5b00 [ 1467.950802] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1467.951903] ? generic_block_fiemap+0x60/0x60 [ 1467.952857] ? lock_downgrade+0x6d0/0x6d0 [ 1467.953736] ? build_open_flags+0x6f0/0x6f0 [ 1467.954646] ? loop_set_status_old+0x250/0x250 [ 1467.955618] blkdev_ioctl+0x291/0x710 [ 1467.956426] ? blkdev_common_ioctl+0x1930/0x1930 [ 1467.957421] ? selinux_file_ioctl+0xb6/0x270 [ 1467.958369] block_ioctl+0xf9/0x140 [ 1467.959140] ? blkdev_read_iter+0x1c0/0x1c0 [ 1467.960045] __x64_sys_ioctl+0x19a/0x210 [ 1467.960917] do_syscall_64+0x33/0x40 [ 1467.961701] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1467.962787] RIP: 0033:0x7f28825338d7 [ 1467.963566] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1467.967431] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1467.969022] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1467.970514] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1467.972025] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1467.973504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1467.975014] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1467.996284] loop5: detected capacity change from 0 to 262144 14:55:27 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:55:27 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1468.005751] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1468.007602] EXT4-fs (loop2): group descriptors corrupted! [ 1468.019078] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1468.022308] EXT4-fs (loop5): get root inode failed [ 1468.023528] EXT4-fs (loop5): mount failed 14:55:27 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1468.100787] loop7: detected capacity change from 0 to 262144 [ 1468.139352] udc-core: couldn't find an available UDC or it's busy [ 1468.140986] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 14:55:27 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}], [{@seclabel}, {@dont_hash}]}) 14:55:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1468.153015] loop2: detected capacity change from 0 to 262144 [ 1468.163344] EXT4-fs (loop7): unsupported inode size: 0 [ 1468.164129] EXT4-fs (loop7): blocksize: 2048 14:55:27 executing program 4: getrandom(&(0x7f0000000180)=""/182, 0xb6, 0x1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r0], 0x98}}, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000440), 0x4) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r2], 0x98}}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000a00)={{r2}, "d97e1fc251a6d136d3afc0c344e7475fff30bfa137556ee2f77fbe0163f080d9ae71eb1d8f46593a05198124682ebf05d85a45c0fe1aed63add7fa3f2f2dfb4f793fe4aca7102b98c41b32a9d69c8d88be6f5217248bc05d467dcfb0cea5e85d709b8eb048f27412bec5c0e89d60e2bdc01c4eefde4d97427d640b0e343b9281d5315202b8d4e1d3f902861fc14215da512bc95e1192082868d945bfb072c5615942f7204e6443f40696dae4e596a5e348876a8124ab15ea408b652021896bb0863e30a0856896112cd4b7b62798472d235f9c763662a3c9ff8c0231476b59ba93f5b3f865d03cfbc4ab0357f3e0c20810fd568e3a0d0cdd9bab116015ddc43c5fe2e7fc14e12c22ef27852713f3bba5084dc7d476c12cd93ee65d3aec93379ec3d3ef0e6838bb77c636494a3fd5477a2af8d50a7ad3af77a4297da56149a6207eaac4049dcb4df10569efbe7928aed35e14c429ecc45e4e63972d0a1862a9843f2f180ff7ad2bfa20ebc4f840c5f6d47ac527b4de0ec78de0b68ea69fc95f34f45e23837d2f45075b8a051123ec31fd8e8072052e60c5dc7af45d1a117845ceb4e5705eada07cd6c7e432a3a17747dc519ad0d8c9768be938ebe3b48cde3249bf663cdc65fc8c0d0979005521e0cf66e044d486edc12776368dfc465dee5120da7336216c3d2fff30c17b586f3f72a08ecc587e149f4d4eb90d8996220ad2de261157d819d398143f9001b6c4592bfe03b7e0b262b984f3e62b5ff34df021423e6dc4ca516fce45ebbc3dc9fa4812d61b2e739adff71f66a660402b807db1a9322f3076e9c912df766b9388ddd3aedaed186a095c062eb6b0f20837f7481888517dd716d0befb31fd235b72f260c1a8b4ffd0506565902379dfed27e8c19fa54665e2b7fa3748cda762daf6d55ecf388f391e229e6b92f2df56ca353e1e3baa3c722d191559f88af7ac9e34b69f00043e07fc94e96efdc253979401498ad5b877e04b18cb3e8849aef9d480156e9cf3660e551a29fd3f0a7214873491b361a49832468c5bce942079bdacbe8873c8a24ca3d148b4746698d876812ccb35a1cce385eca6e2589453e494f16e2cc7ed1b6690927c832fbdd8a0a4b0223f2f0ab13c3458661bf9cbb0c79ee1878b941d44a2dae4fb2df439cdd1eeee85355403a5cccf26d96a1bf2e312a9b8330b4385c1a789be6b83f6a7ad8a88cba965a10f0dbcd4147fea89291ede35191b2ab3ed21d519524ed7fc9739185a5e470629fe847ba30d398920dc565ac3292cfd2f3cc99d1c705d8aaaafecf724083c407b7f4ee2533ebcedeb5c985cce14435dedf29abf019c19de73a75b2225b7b696602340335717f34215681eae178fd5c63f5e4f7d9e95292793cb69003d9f734a74a390518991d34a6f049a957726aa21c2b1f0250a3775ec21ab0e15d7d8be36ce427d87bc017fe8304a2d7c0b1a22a41311f266b35db61c6e42cc3fc8497d4d5f11ad82a26df779103dc751a0fad2020f96eaf610bb45274270023ec4e43f75dcb5f7b7d8fc50395cf3698f4c475ec4a8f49172254d3b78b76aabf09b40db3ede21acd2ff61d73f1b0ae63e8c3e8f0391a013c59d8777396f7c0f4a3e28660c4bf62b8f9ae3a3bea64283f656245890180019b3ef3dec30a88683b79aeeaaaaaed86ff9ce935a279d8926578bace510ee566d664d5c9ac31ca10c8a65060c8c7675441796186cd8d9a5a57f7d98a9165708d83f04a77c59d238e1fd9c3f789765e4a5b460558f616f6172ccdb3374d219ad32c970ac2f3edd62e4f15fac64c95c6ded6352244dcee4aba2bab30b8f5e36d281858451ebede6f39dc5110c63ac79cb89d3b2cb29f5a5b7f0c513485eece95377bbd8bd97f4b81bafdcd9d58c8564b32e1c3d9c1614bb63e9bfea826db23e7f029a8921b0c59ff5cce0107813946574d7175fcb30940c0b4f40e20a6da32cfa873d657be506fdf4aa8beeae7ebf0d43dc481d03a271042044ad2bc5b4fb2990980673951197f7731372e4db5aad94becde9dac8a708228c982c70cdfaed2f6f7ff8b7391650ce4a14ae233412871ffc12417bcc4723ec3b8042a48131c07a974b5d69e5f0697013be00ddc49ed215db847b4d3d319d362992a426c93ca7d32f82c125bee03a115c5897d41874f052689086072c991b9a76beb306a30a52bbf62defff6c02c17640cdc8726aa1ef827706d89d7893005504a2b554e7d3a20bc8492768dcf2bcc00eb82e658792d39079a4014dab0706f953b0270284f64f3755d93853b28937bfca78c097a9b93bf5bc07bf9c0809e10fcc71d7fa331d26a558db8a7515e89ed6d94a17896058cdb4da7c2aaa5df4f544c4454b86c1b08d55f739ed03632ae5e1065e08926b3a91b120477102c4cf6d8b610360b942a002a12530f23716405f72ce7d346d4b0cd90fdc427f598f79325bb589a0ecb338a42733c1afc9f306b7a0fb85be6b0a8d7db6a627e5410da396abf30914253655b6d32f8f73b83a6dd924b9e12d93d173ea80422851547fe57dc337b4e344b9286247bfcfdde2a2efb6bda70024b9122f80c7000ec4076b44dc661bbf4a601b81f8f85ab60a8019d1663937013ef4cc7e3887b07daa7cf73d621d33da9462da5aac80c34315ad7de9e568de4410d3674e53bd24b82b5da1806de361852ccb2707f00e76428b1087f6efd4ad9283e45ddf96f22e2b8d569e0a8d56c79e5d5fe74c41202c9554e74252ad10f3a11f21124615418313778a1a77e648cac6498bff1d7910b4bbd192b3896e62584113d9cdd60676793d8fbe67aa4d6ac10e603edaef38d39719a7fa3f9676260640784e6a7245e7047bdfb36b640bd7e4a9b1831f06b60d4fac9a7b52a59b0abe66eef07fe3e974a018693b60429066bce651fb8dbea35a003ae08b6bcfb4c8d8e5d7185740485e59014aaa2ac6dbf13deaa5a5ead3aa18125d78a9f7d4b4ef241c9d0ffeee96d47cd50348b1b7078fccdb2807317451670972a2685c324fbf75cbafacd6cbac1510494b414799845b27914ab3deb90a4aea14b7986062f6adb02af7966d168a67144fdf04a3884cf47763e66ab700eb5f3b569469495acb9c0ff504e4f2bbddbbc52ee300ef494c00c11aa4a317617d6a1abc672a135236b1c18b5ef3443b1335177357da9c94993bd42f3c46f6f37c5f5104b2a5a6068026b4d997c096a8a41250c1c404ef34da3b6c51c739fff8c73d21f27f42de51451236ed3c1cbdb0b8d655c1af5e4ac030fc0d1f20319082850fa5934f7f7cc0b55ee4f1539d0766ce7f9c7f946f049e2a695178d28b50fb687b2009ca3eb0e166d776fb55af336889503ff89e854d8e80a8f93941d464b5c1c564f08e3db68bdbc170f96ef97b1cf594905bc7224ddaf58773580f68d538126ce4ee2cee30fe562c5c4b4b5de35e810a59af1c22dd3dc9126dfb8a1218650ee41d1fcff9d509c283f5b658b3e8ef879cdce5d38ca7ac77ff77a357de3f9f3ba0ffdadc61ead4b12a45d1ee0bf16b1ea222461a09aa81359836ee5785fb34498977a383dfd08c6946cd571499268ce6ab8bdf5b50b0345d47c512387f0cd8c9d0a8a5a806569c45cddc8b72d98015394b50987c99bac49910d87f783b3a36c16c92265363e7b822883e21f8ed0897f9fe4c3451b72aca2a776d44302e8c40396599447ad3057ac430aac9c73dfd96e26cf600bd36a2bbb84a80287e74b6e975d9fdd973f12be8983e0fe829c1b84e2a62ddcd2cee8046f298a7c2f5fcb81e76f6cf70e633f202a2ce6c4b7166a91d976c6d2f9956b40bef931601f136308d769367d15814f7922dee2f0a0a8901ae3a8bb9216781b0dd998e5e1ebd89283a57910f7f4e30bef76bedca26502da9ebb44ce94b1b24fa6e2fd9bc9085ccc5fbb509b7dadf7a6ba12ee6c22e85c49c859c5ed856a726681c80e0aab3c2cb9a12eb22021f49a4ab7cd16d3cc9f72b3ae9948eff8ca59850a29c07e7802f8a3bfe805407b8c290ebf0765b9c3672bd774d6cd8dfe900f0f780f3f7b87a67eee185f64a03fedaf7beaaf1df500404c7d730528a265d486908dfb531827102c735c5d3045e76429b87e8cdee38bc443c246ec0ca9aac38bdb15be5a65d2f19ba443d5dcff52d4da9af36a5d689fb5ffc62869e137664dfead11d6bf3473fd6c1611298b875386d49371be2668f6bb1249ebaddb68b0657a6a2773b262871de6f3ec3739e7b485f1d0d8b9f0988cd1738a51ecfe7ecd6a29b0ab47ede46da8f2566bc58983a16394c22519b8b2507ee692b46050eb8d4fdbcb735b49be14c419d2aab69ba7da84f7d302a9f76960267abbb22aec807d5abf051227b481193a836ca768a9369dbed8f6c01cde2d9d68c21f559a1a29a22c16d112188ad4af3bc6df1c0d7e37c62c9d17c61c7c14fcc148e7bc731812a5e4f8a2b1bf2b6f18984119fa001fb2fcf649f054eac92bdf54b82dd6f10249cdb0ffc6021f9a66eb0f87e72e5db52f1ee102076d4e423c7561c21513d3ca90446e47873d9ad121ab92aec3c9cec3757f037e465964e16bc0f7cd357447e8fb8336f1005f065638e0ee0670e1393da90fff7828e3bb64a0e513397bd6825516ca837df64ff2446cc7dcad0571c149e57d309949eac82eb2ab7403942fd28c6c8d36ced5812e5b28c173d1ff6a2da6de011e8f44fe424e3a6ecd5424b643723dbe42a005bc9b9fe94548b90e512b3bd48560569e7bc0f456f61c052227ec374de8500e8fe9bdb89725ea2511caa62587d7a9c2d0f40074bdbcfb858f28e1fb03a248931edfc4171741197aea066e933a17302fa06fc892e80e8b4bffa342f0087d467b442a2559412ed7f86805dc318dc5f6cfbedd67d96dde06d6fcbdfbeba3cf2de07a16acb9d9d2f44fda647883fa8de3ea32264b8fe171f80011c8f271295a05940c41ac7d088bfd7b1992b48dd05fbcef7f9d3de9d20d34a05d6cede2e87c8bda8de73e21479280b77d41b371b7fba51e61509d5ad422b792d57f52f8a0237bddbb1099fc92a0078a24bdbb59efe351da4083b78741d3d3bdcd9d458667337b78b6c8b0b4c54855c1405bf03b26b3b02378cfad341ccac8d30aeb5faa094eaf10f1d669b561fff87260e7a17fe8a18d122399a27009060c7cd9722b91b2c7a375462c4dce9971c6ce2045c489c588aa2ba5c8d73d873dcbc52d04f2ff1084c63541d82459ac2281e7e3585c798dc7564d3b60f842e6a9e0e75df21005e3a9ecd7d1c7683c789994e5f30a3c23b1d05c35a68692b1a69b1bdbfc5d7c9b29df8696abe151baa879b3020a11e8b56e1fa405f8e70ac85c6d342b420a94fe5b915f72e19f3794c4e1951bdebb121cf1c98e9337dc397a96b96495cb411c53b626332c4bfc31cf0676c17b6ca432c877b3a1c2271ff205cd9a7d4d0e7ca6b6dd16e4623946e9e0782fda54af06dafe8656bba46c723d51a9d881c1a7c2b11705aa21a6737b0419fbe967ce44cc25352739e7e90bca051c50d6039ca243640dfd1f6052a341e4cb418ce80be6f7290992c156f863986a882d66d5fb8473b7f2481838afe84158c072dff6ca265840d77470eb64b102dc7b5fb837a40fdf9f9a61edd5e636f9298f78d0df02b20427a7dd8d7cbddbe24c15e9642f241ed5053fd60a737b157aadba02c015f5d26ae0b6a25a0f2706747449b923c5a2b54d11f132b49af8201e405bf724559c311e4c22c452510e5049789572dbc891d9caa6c5dc1fa9f8a9e486034d9af94f0a43d506d1aa106552978c13310e7"}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="2002000000000000060000006a0000000f000000000000020100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) [ 1468.191624] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1468.193958] EXT4-fs (loop2): group descriptors corrupted! 14:55:27 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:55:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 30) 14:55:27 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001400)=""/53, 0x35) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001440)={{r0}, 0x0, 0x0, @unused=[0x1, 0x7ff, 0x9, 0x4], @name="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"}) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="7472616e733d66642cff0f00006f", @ANYRESHEX, @ANYRESHEX, @ANYBLOB]) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = pidfd_getfd(r2, r1, 0x0) tee(r3, r0, 0x4, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000180)=@ieee802154}, 0x80) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x40010, 0xffffffffffffffff, 0x0) fgetxattr(r4, &(0x7f0000000000)=@random={'btrfs.', '\',{[[(\x00'}, &(0x7f0000000380)=""/234, 0xea) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001200010000000000000000000000000008000000ac1414aa0400000008002e00", @ANYRES32, @ANYBLOB="816e0d3b5edbedac3e7239107cadd7ec0fbeb5daabd7d6acf26e4122a6fb425b861f7e3db4b87f812eac664afe776cc14a84b7b2968dabbbadff695e1f753d052e7022704a57ab9f2b0180f0780ca46beb081352174559201e84f236939183005eb450c10cf26a0a0753b080d8cdf2ccd336759ef47499400047ff7be73efb8d931f4f92f1367363a730901201b4f6349b1f5961fc279e9109928a546f289b6df62fcf5117f601fdc2d53a8a03e5a79d5f0eff1066967a345d6272f25105521492c47d8342186c650298ac0fa7a2ec025fc80735d6b926ea947ded13258184024c"], 0x28}}, 0x0) 14:55:27 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1468.262613] FAULT_INJECTION: forcing a failure. [ 1468.262613] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.264149] CPU: 0 PID: 9637 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1468.264989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1468.266052] Call Trace: [ 1468.266386] dump_stack+0x107/0x167 [ 1468.266864] should_fail.cold+0x5/0xa [ 1468.267343] ? __kernfs_new_node+0xd4/0x860 [ 1468.267869] should_failslab+0x5/0x20 [ 1468.268330] kmem_cache_alloc+0x5b/0x310 [ 1468.268826] __kernfs_new_node+0xd4/0x860 [ 1468.269333] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1468.269910] ? lock_acquire+0x197/0x470 [ 1468.270417] ? lock_chain_count+0x20/0x20 [ 1468.270961] ? lock_acquire+0x197/0x470 [ 1468.271467] ? task_rq_lock+0xab/0x270 [ 1468.271971] ? lock_release+0x680/0x680 [ 1468.272466] ? find_held_lock+0x2c/0x110 [ 1468.272962] kernfs_new_node+0x18d/0x250 [ 1468.273471] kernfs_create_dir_ns+0x49/0x160 [ 1468.274027] internal_create_group+0x793/0xb30 [ 1468.274618] ? set_user_nice.part.0+0x2fd/0x760 [ 1468.275194] ? sysfs_remove_group+0x170/0x170 [ 1468.275748] ? lockdep_init_map_type+0x2c7/0x780 [ 1468.276326] ? blk_queue_flag_set+0x22/0x30 [ 1468.276853] ? __loop_update_dio+0x2d2/0x690 [ 1468.277392] loop_configure+0x953/0x1410 [ 1468.277895] lo_ioctl+0xa57/0x16b0 [ 1468.278341] ? avc_has_extended_perms+0x7f1/0xf40 [ 1468.278933] ? loop_set_status_old+0x250/0x250 [ 1468.279508] ? avc_ss_reset+0x180/0x180 [ 1468.280014] ? find_held_lock+0x2c/0x110 [ 1468.280516] ? __lock_acquire+0xbb1/0x5b00 [ 1468.281061] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1468.281700] ? generic_block_fiemap+0x60/0x60 [ 1468.282248] ? lock_downgrade+0x6d0/0x6d0 [ 1468.282781] ? build_open_flags+0x6f0/0x6f0 [ 1468.283321] ? loop_set_status_old+0x250/0x250 [ 1468.283881] blkdev_ioctl+0x291/0x710 [ 1468.284347] ? blkdev_common_ioctl+0x1930/0x1930 [ 1468.284929] ? selinux_file_ioctl+0xb6/0x270 [ 1468.285475] block_ioctl+0xf9/0x140 [ 1468.285920] ? blkdev_read_iter+0x1c0/0x1c0 [ 1468.286454] __x64_sys_ioctl+0x19a/0x210 [ 1468.286966] do_syscall_64+0x33/0x40 [ 1468.287422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1468.288049] RIP: 0033:0x7f28825338d7 [ 1468.288503] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.290745] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1468.291687] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1468.292563] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1468.293440] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1468.294316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1468.295199] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1468.298758] 9pnet: Insufficient options for proto=fd [ 1468.325159] 9pnet: Insufficient options for proto=fd [ 1468.353625] loop5: detected capacity change from 0 to 262144 [ 1468.373941] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1468.379954] EXT4-fs (loop5): get root inode failed [ 1468.380563] EXT4-fs (loop5): mount failed [ 1468.381343] loop7: detected capacity change from 0 to 262144 [ 1468.385566] EXT4-fs (loop7): unsupported inode size: 0 [ 1468.386355] EXT4-fs (loop7): blocksize: 2048 14:55:43 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:55:43 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r0}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r1, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r2, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r5}) timer_settime(r1, 0x0, &(0x7f00000004c0)={{r3, r4+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:55:43 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}], [{@seclabel}]}) 14:55:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 31) 14:55:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:55:43 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:55:43 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x13b7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x83}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$packet(0xffffffffffffffff, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001640)=0x14) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1c, 0x1}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:43 executing program 4: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x80}, &(0x7f00000a0000)=nil, &(0x7f0000875000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x1, 0x0, 0x0, 0xd8, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) syz_io_uring_setup(0x21a8, 0x0, &(0x7f000010b000/0xf000)=nil, &(0x7f00006f0000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}, 0x8005) flock(r0, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$inet6(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000835000/0x1000)=nil, 0x1000, 0x1000000, 0x20012, r6, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000140)=0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1483.885996] loop2: detected capacity change from 0 to 262144 [ 1483.909386] FAULT_INJECTION: forcing a failure. [ 1483.909386] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.913055] CPU: 0 PID: 9662 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1483.915113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1483.917591] Call Trace: [ 1483.918381] dump_stack+0x107/0x167 [ 1483.919489] should_fail.cold+0x5/0xa [ 1483.920634] ? create_object.isra.0+0x3a/0xa20 [ 1483.921996] should_failslab+0x5/0x20 [ 1483.923149] kmem_cache_alloc+0x5b/0x310 [ 1483.924375] create_object.isra.0+0x3a/0xa20 [ 1483.925689] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1483.927228] kmem_cache_alloc+0x159/0x310 [ 1483.928384] __kernfs_new_node+0xd4/0x860 [ 1483.929443] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1483.930647] ? lock_acquire+0x197/0x470 [ 1483.931676] ? lock_chain_count+0x20/0x20 [ 1483.932741] ? lock_acquire+0x197/0x470 [ 1483.933755] ? task_rq_lock+0xab/0x270 [ 1483.934750] ? lock_release+0x680/0x680 [ 1483.935774] ? find_held_lock+0x2c/0x110 [ 1483.936811] kernfs_new_node+0x18d/0x250 [ 1483.937858] kernfs_create_dir_ns+0x49/0x160 [ 1483.938991] internal_create_group+0x793/0xb30 [ 1483.940162] ? set_user_nice.part.0+0x2fd/0x760 [ 1483.941349] ? sysfs_remove_group+0x170/0x170 [ 1483.942495] ? lockdep_init_map_type+0x2c7/0x780 [ 1483.943726] ? blk_queue_flag_set+0x22/0x30 [ 1483.944821] ? __loop_update_dio+0x2d2/0x690 [ 1483.945945] loop_configure+0x953/0x1410 [ 1483.947004] lo_ioctl+0xa57/0x16b0 [ 1483.947921] ? avc_has_extended_perms+0x7f1/0xf40 [ 1483.949162] ? loop_set_status_old+0x250/0x250 [ 1483.950332] ? avc_ss_reset+0x180/0x180 [ 1483.951358] ? find_held_lock+0x2c/0x110 [ 1483.952407] ? __lock_acquire+0xbb1/0x5b00 [ 1483.953547] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1483.954888] ? generic_block_fiemap+0x60/0x60 [ 1483.956043] ? lock_downgrade+0x6d0/0x6d0 [ 1483.957107] ? build_open_flags+0x6f0/0x6f0 [ 1483.958218] ? loop_set_status_old+0x250/0x250 [ 1483.959399] blkdev_ioctl+0x291/0x710 [ 1483.960387] ? blkdev_common_ioctl+0x1930/0x1930 [ 1483.961601] ? selinux_file_ioctl+0xb6/0x270 [ 1483.962736] block_ioctl+0xf9/0x140 [ 1483.963669] ? blkdev_read_iter+0x1c0/0x1c0 [ 1483.964773] __x64_sys_ioctl+0x19a/0x210 [ 1483.965816] do_syscall_64+0x33/0x40 [ 1483.966765] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1483.968075] RIP: 0033:0x7f28825338d7 [ 1483.969022] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1483.973729] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1483.975675] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1483.977497] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1483.979334] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1483.981151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1483.982989] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1484.026877] udc-core: couldn't find an available UDC or it's busy [ 1484.029099] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 14:55:43 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x7, r0, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r2, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0xffffffff}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x2, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x0, r0, 0x3) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r3, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2, 0x0, 0x8}, 0x6a}}, 0x18) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x200c040, &(0x7f0000000580)=ANY=[@ANYBLOB="466ff55d00b9616812bd1fe7340100000000000000004000a0751b182f1dc95f017e466f2cff000000000000006bd5aa7e27a3de6b2545c3e6893bfdf6563c24074126044ef06e18493a26283d3d4998169d09f60c637032dd6fe5c48d2d63c75be19f7e6ab871ef5dcd3eea627209ae4cab09c5a78e9fddc153fcde92d64cdf0513ff9d966a3f8de1c4e62a916fa60c0000c56334307977f297149ba2257b062e8073db420799962cd476e0f68bfc9ef6eda94a6ec3f5d5abb44a58d7c79bc7af7c5681b6714f118481a93bc2a61b2678c8b6731633caf79a"]) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x30, r3, 0x8000000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) flock(r4, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') pread64(r5, 0x0, 0x0, 0x6800) 14:55:43 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:55:43 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r0}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r1, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r2, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r5}) timer_settime(r1, 0x0, &(0x7f00000004c0)={{r3, r4+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1484.160184] loop5: detected capacity change from 0 to 262144 [ 1484.169398] loop7: detected capacity change from 0 to 262144 [ 1484.178483] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1484.181184] EXT4-fs (loop2): group descriptors corrupted! [ 1484.199033] EXT4-fs (loop7): unsupported inode size: 0 [ 1484.200313] EXT4-fs (loop7): blocksize: 2048 [ 1484.231231] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1484.243515] EXT4-fs (loop5): get root inode failed [ 1484.244824] EXT4-fs (loop5): mount failed [ 1484.251264] udc-core: couldn't find an available UDC or it's busy [ 1484.252740] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 14:55:43 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}], [{@seclabel}]}) 14:55:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:55:43 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:55:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 32) [ 1484.421101] loop7: detected capacity change from 0 to 262144 [ 1484.430063] EXT4-fs (loop7): unsupported inode size: 0 [ 1484.431113] EXT4-fs (loop7): blocksize: 2048 [ 1484.455165] FAULT_INJECTION: forcing a failure. [ 1484.455165] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.457976] CPU: 0 PID: 9702 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1484.459758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1484.461634] Call Trace: [ 1484.462232] dump_stack+0x107/0x167 [ 1484.463073] should_fail.cold+0x5/0xa [ 1484.463933] ? __kernfs_new_node+0xd4/0x860 [ 1484.464907] should_failslab+0x5/0x20 [ 1484.465763] kmem_cache_alloc+0x5b/0x310 [ 1484.466688] __kernfs_new_node+0xd4/0x860 [ 1484.467647] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1484.468711] ? kernfs_add_one+0x36e/0x4d0 [ 1484.469657] ? mutex_lock_io_nested+0xf30/0xf30 [ 1484.470721] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1484.471827] kernfs_new_node+0x18d/0x250 [ 1484.472754] __kernfs_create_file+0x51/0x350 [ 1484.473753] sysfs_add_file_mode_ns+0x221/0x560 [ 1484.474811] internal_create_group+0x324/0xb30 [ 1484.475859] ? sysfs_remove_group+0x170/0x170 [ 1484.476875] ? lockdep_init_map_type+0x2c7/0x780 [ 1484.477947] ? blk_queue_flag_set+0x22/0x30 [ 1484.478917] ? __loop_update_dio+0x2d2/0x690 [ 1484.479929] loop_configure+0x953/0x1410 [ 1484.480854] lo_ioctl+0xa57/0x16b0 [ 1484.481658] ? avc_has_extended_perms+0x7f1/0xf40 [ 1484.482754] ? loop_set_status_old+0x250/0x250 [ 1484.483799] ? avc_ss_reset+0x180/0x180 [ 1484.484702] ? find_held_lock+0x2c/0x110 [ 1484.485630] ? __lock_acquire+0xbb1/0x5b00 [ 1484.486634] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1484.487810] ? generic_block_fiemap+0x60/0x60 [ 1484.488796] ? lock_downgrade+0x6d0/0x6d0 [ 1484.489711] ? build_open_flags+0x6f0/0x6f0 [ 1484.490669] ? loop_set_status_old+0x250/0x250 [ 1484.491700] blkdev_ioctl+0x291/0x710 [ 1484.492561] ? blkdev_common_ioctl+0x1930/0x1930 [ 1484.493636] ? selinux_file_ioctl+0xb6/0x270 [ 1484.494629] block_ioctl+0xf9/0x140 [ 1484.495460] ? blkdev_read_iter+0x1c0/0x1c0 [ 1484.496442] __x64_sys_ioctl+0x19a/0x210 [ 1484.497360] do_syscall_64+0x33/0x40 [ 1484.498198] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1484.499367] RIP: 0033:0x7f28825338d7 [ 1484.500210] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1484.504399] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1484.506125] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1484.507748] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1484.509357] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1484.510983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1484.512606] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1484.515500] loop5: detected capacity change from 0 to 262144 [ 1484.531471] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1484.535038] EXT4-fs (loop5): get root inode failed [ 1484.536198] EXT4-fs (loop5): mount failed 14:55:59 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:55:59 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:55:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 33) 14:55:59 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r0}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r1, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r2, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r5}) timer_settime(r1, 0x0, &(0x7f00000004c0)={{r3, r4+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:55:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1c01, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000380)=0x33, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000001540)=ANY=[@ANYBLOB="e0000002ac141429000000000600000000000000000000ef5c4b9bbcff704b3bcc13c54a35007f000001e00000010a010101"], 0x28) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0xc9) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000500)={0x0, 0x4}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x181080, 0x2) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000240)=0xb5, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000003c0)={0x80, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}}, {{0x2, 0x0, @loopback}}}, 0x108) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x30}, 0x0, 0x20000040}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1d}, 0x80000001) signalfd(0xffffffffffffffff, &(0x7f0000001500), 0x8) r7 = socket$inet(0x2, 0x1, 0x0) dup3(r7, r6, 0x0) io_uring_enter(r3, 0x3491, 0x0, 0x0, 0x0, 0x0) 14:55:59 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}], [{@seclabel}]}) 14:55:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:55:59 executing program 0: timer_create(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) fork() timer_create(0x2, &(0x7f0000000180)={0x0, 0x6, 0x1, @thr={&(0x7f0000000280)="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", &(0x7f0000000200)="c51a43201a603d64c090cd2ac5f5e3212c335717c035bced3119755ddecb62ea906198a433842e733f8d385cddd21d3f1958a4f3630a995af32a6fda5959d447dc605339c69f277fcfd786609fbfe054267758328a4b05c41c2771367260286ac6268ff535fc5c2be8df0104994e83c8ff0f0000000000009681cd"}}, &(0x7f00000001c0)) r0 = gettid() getpgrp(r0) [ 1500.224508] FAULT_INJECTION: forcing a failure. [ 1500.224508] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.228061] CPU: 1 PID: 9715 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1500.228764] udc-core: couldn't find an available UDC or it's busy [ 1500.229846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1500.229904] Call Trace: [ 1500.229934] dump_stack+0x107/0x167 [ 1500.229963] should_fail.cold+0x5/0xa [ 1500.229990] ? create_object.isra.0+0x3a/0xa20 [ 1500.230013] should_failslab+0x5/0x20 [ 1500.230035] kmem_cache_alloc+0x5b/0x310 [ 1500.230071] create_object.isra.0+0x3a/0xa20 [ 1500.231744] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1500.233779] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1500.233813] kmem_cache_alloc+0x159/0x310 [ 1500.244750] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1500.246246] idr_get_free+0x4b5/0x8f0 [ 1500.247287] idr_alloc_u32+0x170/0x2d0 [ 1500.248327] ? __fprop_inc_percpu_max+0x130/0x130 [ 1500.249611] ? lock_acquire+0x197/0x470 [ 1500.250664] ? __kernfs_new_node+0xff/0x860 [ 1500.251833] idr_alloc_cyclic+0x102/0x230 [ 1500.252941] ? idr_alloc+0x130/0x130 [ 1500.253928] ? rwlock_bug.part.0+0x90/0x90 [ 1500.255069] __kernfs_new_node+0x117/0x860 [ 1500.256152] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1500.257285] ? perf_trace_lock+0xac/0x490 [ 1500.258279] ? perf_trace_lock+0xac/0x490 [ 1500.259282] ? lock_chain_count+0x20/0x20 [ 1500.260278] ? __lockdep_reset_lock+0x180/0x180 [ 1500.261394] ? __lockdep_reset_lock+0x180/0x180 [ 1500.262521] ? update_load_avg+0x162/0x1870 [ 1500.263566] ? find_held_lock+0x2c/0x110 [ 1500.264549] kernfs_new_node+0x18d/0x250 [ 1500.265538] kernfs_create_dir_ns+0x49/0x160 [ 1500.266600] internal_create_group+0x793/0xb30 [ 1500.267726] ? set_user_nice.part.0+0x2fd/0x760 [ 1500.268850] ? sysfs_remove_group+0x170/0x170 [ 1500.269938] ? lockdep_init_map_type+0x2c7/0x780 [ 1500.271095] ? blk_queue_flag_set+0x22/0x30 [ 1500.272142] ? __loop_update_dio+0x2d2/0x690 [ 1500.273211] loop_configure+0x953/0x1410 [ 1500.274215] lo_ioctl+0xa57/0x16b0 [ 1500.275080] ? avc_has_extended_perms+0x7f1/0xf40 [ 1500.276256] ? loop_set_status_old+0x250/0x250 [ 1500.277366] ? avc_ss_reset+0x180/0x180 [ 1500.278331] ? find_held_lock+0x2c/0x110 [ 1500.279345] ? __lock_acquire+0xbb1/0x5b00 [ 1500.280444] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1500.281724] ? generic_block_fiemap+0x60/0x60 [ 1500.282817] ? lock_downgrade+0x6d0/0x6d0 [ 1500.283832] ? build_open_flags+0x6f0/0x6f0 [ 1500.284893] ? loop_set_status_old+0x250/0x250 [ 1500.286003] blkdev_ioctl+0x291/0x710 [ 1500.286932] ? blkdev_common_ioctl+0x1930/0x1930 [ 1500.288098] ? selinux_file_ioctl+0xb6/0x270 [ 1500.289178] block_ioctl+0xf9/0x140 [ 1500.290061] ? blkdev_read_iter+0x1c0/0x1c0 [ 1500.291120] __x64_sys_ioctl+0x19a/0x210 [ 1500.292136] do_syscall_64+0x33/0x40 [ 1500.293056] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1500.294314] RIP: 0033:0x7f28825338d7 [ 1500.295240] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1500.299666] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1500.301525] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1500.303120] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1500.304693] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1500.306254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1500.307822] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1500.313368] loop5: detected capacity change from 0 to 262144 [ 1500.317582] loop7: detected capacity change from 0 to 262144 [ 1500.346055] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1500.348604] loop2: detected capacity change from 0 to 262144 [ 1500.350500] EXT4-fs (loop5): get root inode failed [ 1500.351779] EXT4-fs (loop5): mount failed [ 1500.358743] EXT4-fs (loop7): unsupported inode size: 0 [ 1500.360223] EXT4-fs (loop7): blocksize: 2048 [ 1500.380967] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1500.383259] EXT4-fs (loop2): group descriptors corrupted! 14:55:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 34) 14:55:59 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:55:59 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}]}) [ 1500.458323] FAULT_INJECTION: forcing a failure. [ 1500.458323] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.460865] CPU: 1 PID: 9739 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1500.462355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1500.464170] Call Trace: [ 1500.464745] dump_stack+0x107/0x167 [ 1500.465542] should_fail.cold+0x5/0xa [ 1500.466371] ? __kernfs_new_node+0xd4/0x860 [ 1500.467319] should_failslab+0x5/0x20 [ 1500.468144] kmem_cache_alloc+0x5b/0x310 [ 1500.469032] __kernfs_new_node+0xd4/0x860 [ 1500.469936] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1500.470967] ? kernfs_add_one+0x36e/0x4d0 [ 1500.471877] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1500.472924] ? wait_for_completion_io+0x270/0x270 [ 1500.473970] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1500.475116] kernfs_new_node+0x18d/0x250 [ 1500.476013] __kernfs_create_file+0x51/0x350 [ 1500.476977] sysfs_add_file_mode_ns+0x221/0x560 [ 1500.477998] internal_create_group+0x324/0xb30 [ 1500.478999] ? sysfs_remove_group+0x170/0x170 [ 1500.479986] ? lockdep_init_map_type+0x2c7/0x780 [ 1500.481023] ? blk_queue_flag_set+0x22/0x30 [ 1500.481963] ? __loop_update_dio+0x2d2/0x690 [ 1500.482923] loop_configure+0x953/0x1410 [ 1500.483824] lo_ioctl+0xa57/0x16b0 [ 1500.484600] ? avc_has_extended_perms+0x7f1/0xf40 [ 1500.485652] ? loop_set_status_old+0x250/0x250 [ 1500.486649] ? avc_ss_reset+0x180/0x180 [ 1500.487527] ? find_held_lock+0x2c/0x110 [ 1500.488419] ? __lock_acquire+0xbb1/0x5b00 [ 1500.489391] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1500.490531] ? generic_block_fiemap+0x60/0x60 [ 1500.491565] ? lock_downgrade+0x6d0/0x6d0 [ 1500.492468] ? build_open_flags+0x6f0/0x6f0 [ 1500.493409] ? loop_set_status_old+0x250/0x250 [ 1500.494406] blkdev_ioctl+0x291/0x710 [ 1500.495246] ? blkdev_common_ioctl+0x1930/0x1930 [ 1500.496272] ? selinux_file_ioctl+0xb6/0x270 [ 1500.497228] block_ioctl+0xf9/0x140 [ 1500.498014] ? blkdev_read_iter+0x1c0/0x1c0 [ 1500.498955] __x64_sys_ioctl+0x19a/0x210 [ 1500.499846] do_syscall_64+0x33/0x40 [ 1500.500651] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1500.501765] RIP: 0033:0x7f28825338d7 [ 1500.502569] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1500.506568] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1500.508226] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1500.509776] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1500.511333] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1500.512884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1500.514434] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 14:55:59 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:55:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:55:59 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000016c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x10001) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 14:55:59 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:55:59 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1500.672079] loop5: detected capacity change from 0 to 262144 [ 1500.745806] loop2: detected capacity change from 0 to 262144 [ 1500.758765] loop7: detected capacity change from 0 to 262144 [ 1500.770619] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1500.772631] EXT4-fs (loop2): group descriptors corrupted! 14:56:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x40) r2 = open(&(0x7f0000000000)='./file1\x00', 0x2080, 0x1) readahead(r0, 0x4, 0xfffffffffffffffa) openat(r2, &(0x7f0000000100)='./file1\x00', 0x42, 0x129) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2b7766646e151d", @ANYRESHEX, @ANYBLOB='8\x00']) [ 1500.797005] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1500.798584] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1500.835833] udc-core: couldn't find an available UDC or it's busy [ 1500.837651] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1500.847718] EXT4-fs (loop5): get root inode failed [ 1500.849098] EXT4-fs (loop5): mount failed 14:56:00 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:56:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:56:00 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1501.001694] loop7: detected capacity change from 0 to 262144 [ 1501.015478] loop2: detected capacity change from 0 to 262144 [ 1501.032038] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1501.082746] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1501.085002] EXT4-fs (loop2): group descriptors corrupted! 14:56:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x7, 0xff, r1}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) clone3(&(0x7f0000000480)={0x2080, &(0x7f0000000180), &(0x7f00000002c0)=0x0, &(0x7f0000000300), {0x2}, &(0x7f0000000380)=""/10, 0xa, &(0x7f0000000900)=""/4096, &(0x7f0000000380)}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000640)=""/148) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x5, 0x81, 0x44, 0x67, 0x0, 0x9, 0x800, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x8001, 0x775da91}, 0x400, 0x3, 0x7fff, 0x5, 0xfffffffffffffffc, 0x7fff, 0x1, 0x0, 0x7, 0x0, 0x3}, r2, 0x1, r0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x800, 0x2, &(0x7f0000000500)="15b31405df2dd8f4f4c84f997c56f4af86f39bec379b0f0efb425b8a0481aee66e6fc89711cef6d8ee6be6b7f29135c6b099ae588f96a696d48b9a07daf920cce4ef8af3705972e30a6de27d542ddda7345c65d73691aa5a225211f5fc15702ec9cb0fcab612144f86a4d9e58a1c98ef7616475f659313d3d1da12cd25fdb55ebb8ebbd8d1da0d9cdd1ae6a3508674a230850018e564c85ff7dcb775346935b9e6dff4c43e1eaec5a22b0644c3d8b014303326b1aec6ffd0a5f5929387680d0fd4247b9332238e23413a07c220f1c44e8043ecf090cf431b0b83162afb1ab7cb458032f6", 0xffffff00, 0x0, 0x0, {0x1}}, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xb3a}}, './file0/file0\x00'}) io_submit(0x0, 0x2, &(0x7f0000000600)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x1, r5, &(0x7f0000000240)="ed58b29b248eb7b9145cce98b290e3cf3908bb25ec45af9e7b412ca87f113e0efeb2a640112460f3b7a451b10223a89da4f174e0713c6302d0287113d0a7457a22211757ebce", 0x46, 0x82f, 0x0, 0x1, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x1, r6, &(0x7f0000001e00)="f236b8f0cbd56e86e6f4ee14be24f360b7e967e01acd33e8b3ec3693eba5933d2f8c707a9c2bf949a6c60c7d570e252976bc01401b3c7f840b64c87724c5023cc2c8cdf3720fe9ccc257f37f6d120ec42190de66301bfd9a2135acab36902a237a9968ac10bb18e7d4876507a72ab2d01ee733458047f2637bbe9f97f0143a0099af6e6c7b04fe230a637e16257aa264a52b0eca7164fe2691e16e5bf2a98173de566cfac0a4eaea954210471fa4fcd06e7c8f6818bc1fe4a2055de3637d717251c49745ae0a4228d312a361f65c56fe420e6905ded6b557f8962c3badbdaade091f3a5d4482c5afa96d658e76ea90d19e86f7356f3a4625e927164da19e76445432da83e771e1b55a08678cba46780ff908917cd2ae2885f64f33ebb3087b2517c2f74b7d6564fb91475a9046344a856ee36cd47ec4ba090463bcfe2036955a3a323cdfdf1b50c4b8623a905017bd682dcb1656eb9db8c13791113b3c281c881e78829638f54809ffd3d7cdc4884e9229ceccd6dd43dbe7e80d856342b42cedb264bc86647424bfb9598e5c07a49642aaba2785378dc47c43bbb4c28e04f18d0f649c598a368294e68d1d81aaa9fbc91810ab96f9cc69e892373617f823ac0ce653d34099bfb006a4f22cac0ce9ec9f6d371dc9d52d311850ad1e36ec3d4aafb0dd32f7bc98ea11259149bd1e7df7b39a2f0b7f0ce2fe07db51ec77cd84e94277df981c9662f2ea769a2a3af63f4268b934a317e6ea410a276dd90ed13468992750f35f2adaaae13f4f88afc21e232bd04aaff3cf9956ceb648e473ce0afec0b2cf016346f6393edbb096d437a0d6918a601d124ee88031a3f122e4c40bbeaf9ee5bce12b5a249eb625a6cf5f2f89d47185599d636bdefbf53667c27257c57d1f9a486801d78c81adf58bdc7267dda3aab4a4d7c3e4f92f2481d1b3210ae1590b78ad9995205a86d4363a22d59cc9131deecacd7588d0a3ca92395311d5cd766380bdbb5211b33d70f73ede42abf4caf41a9853888b222bc5448a1dc047e9864fdba399ced4503c7bcec343b08ea1efdabfa8a45cbbbe7bf394ec3b669ff0d509072acc24f6cd9349ec990b1cc95457bf0748b1d8b54795efd37e8db768b2942d507a51222913151dcbcecf6a2833aaa89055d236e031a3776c8a356c6cfd2d4b0aa7f3759448ff3b1cd75a5e5edc9d46aa04719d8c1c2266f1fe3872aee52ac365e30583309eda3a0a7ddc2a3c1bb8b730628e9053df1bedea1059d8db55a09669d0d602c7676f434fc6adf6bddc34608c6ec72dbbe091e469f4ab1207c217d6e69383f314a8b2925e1222cade720e2521ce99374de19118e671764bf224e78ba08403c2bd91d077a15ffddc5f67f7442f569aff2df89c4af55b81926e98a72fb0a1fcc8ac4bdb8553a091c1578994407661da27925093f72f915147a21cb154771932dbde4fa409101697e4626909e6b59d23988dde5fca8004912fc8d63bab9248e17088bceb881c808a76a4081fcb4a1a507e544163c23b01bb0cb5d7e388db88126a20f15735c029a9b26420975d578ab4d6739c24512893a4df47a0537ddfc69ad4907692bd902bf578b4169e5f667ccaefc53ac54713184f1193d64208aa908d693b341f6a7599d278fb0725eb465ca07058951db828c394b8f57e8f0362efb5bd67fabb427b3d2c4ce9984d77f3f8e26c73464ca3b442d62d898d10f4e102f9f35ceb98b7beb5d1a6d4c7966de53de76fa1b98606de64d255a2dd87918d9858718cafa592d5d1cde97011425bd38865e0c2dc6f5d5606c19ba2b1940cee10f6fa811925c9315267ee11b53a9f1f458ebbab821a374264276cb2d9cc89a370f0344ccb4e57085e463c2493cb5543e6d06d92b3812f123940d2602a57fb6fe4e924cf90bc32857eb249aea5b2a33080e4cd299ce4ec22fb9048a339299f8723aeaba407e511ea34af6e349f605bc5909e501b2566663b1de35d2a4843efdab89ef302da579016e38377443d7fd35e7dc66d9adeac8cf5ab063f7528522f923ad235b958d13a8f8322f29493c53907d38d41d98961ad40b3afda31135bb25bf87c120a4d805721916d13494144415670934dd377d982c7188dacfb755eff3ebc40afd611fcd6cc8c5a9031d63e130054c614511e940f8681e4d5ab87e728ef577b7989746ecd6f78d19f0eb0d6b6da874743dc13310b3ba89d5a13f841da2422084b4c7bf9bb97404087d4a91dfce03d6f1e2ce81644b389f0b5d4cbc37cf740af7db86d38d5cfa4fa985cf46bcd5d490b7b756287ecc3d7c654665ff929bc635bc31dcea6f502bae0f3b2ac1fde3caabb3c8904d166167b6478446f4af2a3a700270c07ad83e6c69487654a148e092a37f234669d9292d1f0384e28c55a5c71e7e75ef2146cb59e5e6a5f0c85a9b9471146d1dda9face34626a93e810a4ffa2a71db86c47f1d8362b64f0cf73c22e25e8414cd094937071a300e98c49efd1e3d9ce82f2e24f1c999089b32060a45cde2c9945f4ca249a6045500ec1d9a003b5122d0f0d600f4cb2cdcd6ef9ffdb21d1c4efc0d618231046a65a2c1fa5b8b9d47ba42f75caefc10c4e7121a96526180c91a904d282d8206a95e3655c3bab9439affbcdd27aec15817361c6172697045c21715927cb8fdc91409d49f10159de53448d949a2cb93e2bc5d70aa0ff186f4a1e06463705e95a2a2793cc7e35c34f2dde0808d85cdac45cb8880c0fc58ed9741492da8e37c0bd2799f5b2bd458372f24e0683f1982311451b9edd01cbf6da413e118443df366846e701a388ab0ccc68f2b54db7ef932f7ea29609f343d6349ef3c3431fd2830fbc9456ac34be4d7bcd18ea1ca460ab76f3e8e83e695fa86c975174ad2e7fd7fa22d905b10550f3de2f13e5f1172e5aa7bc53dae3d3fae17490f7ecb770baa1c3fc8dffe1caab5bd49de3ce3c402d39b57d59ef9b7160fb284c224e1b09f892074fb94ae67fa9a3e258bc68bb01a94e647afac7b9a3703cff5a4d011961e2006efa561ee9ae3f16ef80d5abe5c7f53a07ad304e4e20a7dce1269721a0c6a66761db85d8d04b7b243b77956b823ff39d299ab2fb3dea7b1601bf4b0bf01e1c0f64b5118d53d08bbccf88f1cd0013630764b8bff5e91d8ba3cd7d6ec4690bdd5cfad89a81fed72b875a35045cdf2b39e2f0493a99adc367e8b688a47cb91f1d050f93f7e60654e6e77e35c5ffcbf1a3b949a444faa0c1c2c878b2c04d51ba37f37c662c371004c3bb19547fb067c29b3576598c381237af093af075e5c39b11fc8e0a26e6c2f478fa841caeb058fe6293d7ef607ecf558cda81bcdf309ed1d49daa587e437be46131df021ba441fd58142c97d86c6a462306820ef2015c852543afaacb0988934473f112885c0e7a702eb33cc8c418e98960e7b3709581fdeb0580ae075d6df3d860b15ccac7976bb56774b04da68236719330cd209a3d04181307bf7d17587895104fb0bb18de6a0b3290d716d8a47a679018f0f94af4cca33f98a45509e6eb7669f6120a035f95c41c87c0b0a422fef09ad1793c4a94e514930c18dc0618e387b7169590ad5416f9e262c81c04f6cbe3bf5b92c8a08d02b260e0e299f6b7e64434bbc7b9433ee9dd483898050a38dcfb9efc576503f346f8037b5d5a30c1be437b712ca5c29db22f407b30a130da06caad9877dff2cf2b8172506b450db28ea207a899a7fcd4ff7d4b919341bcacdb8dcec93077c8d2c0d55336059d8a72ba3a023596f4e3188bdfcd000284afdd8374b804e9fe3fcdc91b342b413baa8ec3445efdcb81acd6ae37a083da9da2cfcdef01add3aae6d08ffdbdb72dfa33262cda53ebec35dc9be7537d8e028637bbc8b4956b9cb1d57ac06b792de7f6ff86e4915611ee9bdf12ea07abecc9f3a3298ec7588f8e33abc905fd26f70d9880ef9d222b1167e4bf8a87823e2ebf1419f093fa887661a081cc71255e97745670d48287b2474c5fc9b4f10916189fd88313428912b2298b224e1c45d821d21a03e1636455d401b4442e2c28e94db5f708f428a7fa0416a95fe1bab83fd47217a785c0ed48e25e77aae473e5cb169465e6ce74561aba68e7f8b60bf2fab2bdca52c07096a62249e0de8a6df54bacc23dafc121c474f2aa7cb77f2a886ed827e947a3557df9d4b399573d2f5df3238bbf0aff1b9ec51bddfc207eaa4ce2f9011d198730ffce03c877ebe429a32a558f9a657a4a325c62ddee9161c12b02275a0b0ecaff3ca6a7f3f9c04feaef1fb5f5ac0ee81044790981841cddfef08859f326609601ef78b45955ca177e6d72d645b31bb7603053f8310222c3a39b8afdacd66c9286a44939327a7eebd7a4b635ae4cfaeb3b139fa2419754955730a2bb6da8be6e8aab8024bd2deab71338cd98d1763c01d2fd36cf114c482943c035012abc0fec7be0bd8f94c3fd75db9d1a07f0760e72687f48dbaafe05ad96d3c5adaf8a1dcd13a912e173ac25e194542a92b7c8032ebb0f93fe874cd425837171a907f3fe6d059c36a1986d196aae6b039e7958c34d6e021670b4a66983bfa1ad5e69997298a123465fc2d9d11ffbf5dd753abecaf414fec9ff7b904aacb97cd92ff21a0c20b54c67f356c1071d418e2b05ac09e8923fb74190a632c68a6b1f1a60f19f3bd22d6f42458b2e5acb149e7362f696f52e85029c4c5e3f2659153c249fd179da4791b41c402d0d9d0916202a8c83e39234471b0fe6eb07f43f5751d19e2caed3de7c91258d3d20aa3f9c021d6bae11d24d36e23a0f5868f6f0b53930da315265d924fd0e9db3d0d7cfac81eef41544ada3e603561f30158f6f9b39358e5d604a90f91ac7953b74b3f6b6adeb6585329e5f56255b3c6d95fb42276c75fdacbbaa669211e395b2cc7b014d6dbe26a00fe72714ffa14d4af84ed422ed3f75b620dd843bb7e475e75f8adc698ab742c44f68e6efbcddae46bb8fdc12f5a89b408c7f3b8bbb2112e0591bb8a105289c6ca1db2de4293f126f0e4131a5af6653eff3ac3d0f388cf429fe70f5e75e42a620fb9e5770f28a1f41abad0518f7977580101d262e540664c44a244ffc3f91b43a36f32479ee17fa2ebf6f5f341948849792ae9171eec302dfab57df2e7706c74a3a97e423f59aa7115afea82f255b11920fa8d33caf9794642280755d2710758d4d09c60a77f640a0d6947a6b367e9acb82d633472f3d8899af016714526fe3db584b85a498bd092c90090a275968590e44a1290bd74a1869574d0e7af4054673e9bd7c64c8e0f4e1fbf6bec1836fe9e3affb6207d18f3610486e2a713cf530ecc492460383928f73ec0c20af2e3767cce11c7b90019e515b6c9d23313d875f6343bb3b4a1fb9a85fb57f9f2a12ae2f8f6b0fe0ca1bcbd87f8878f09da84ee0abb3401a4026a9419a93812f9795bdab3f9294407ab6524cf812cba8fbf66dd2344b043225f75481f50ff7ddcbd66e83ce4657a971e1e16dbc35dcb0ed601ef48d8024ed49b27e6a35a636c2fe48d8f867860dc453653a25d66c261246a28752a7873e2dd6d8fbf6d48b7c95b182c7e1ee68949b7a26b7234e3ee0ab9a95c2027e5db61e4f571528908eee59b8e6f09b92af36c817c926fb2ad6cfa60d44c4176ae092d70c46e6a2815f470248abce3799d9c2e179736694c5b8caa240b078842d9053e1665df1bf4ba0b80963a6cb539036558c60cb18ce0427e3c3cd9b94bd996b4073a1ec3d0be656afc490a63a341a0eaa4e4c2eb46c75dbb6cd0ce9394f3f779224e06c6816d0ce5c9adedc1e040088377bd225", 0x1000, 0x8, 0x0, 0x1}]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) unshare(0x48020200) 14:56:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 35) 14:56:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1c01, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000380)=0x33, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000001540)=ANY=[@ANYBLOB="e0000002ac141429000000000600000000000000000000ef5c4b9bbcff704b3bcc13c54a35007f000001e00000010a010101"], 0x28) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0xc9) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000500)={0x0, 0x4}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x181080, 0x2) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000240)=0xb5, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000003c0)={0x80, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}}, {{0x2, 0x0, @loopback}}}, 0x108) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x30}, 0x0, 0x20000040}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1d}, 0x80000001) signalfd(0xffffffffffffffff, &(0x7f0000001500), 0x8) r7 = socket$inet(0x2, 0x1, 0x0) dup3(r7, r6, 0x0) io_uring_enter(r3, 0x3491, 0x0, 0x0, 0x0, 0x0) [ 1515.897823] FAULT_INJECTION: forcing a failure. [ 1515.897823] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.900690] CPU: 0 PID: 9787 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1515.902353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1515.904494] Call Trace: [ 1515.905142] dump_stack+0x107/0x167 [ 1515.906029] should_fail.cold+0x5/0xa [ 1515.906973] ? create_object.isra.0+0x3a/0xa20 [ 1515.908098] should_failslab+0x5/0x20 [ 1515.909042] kmem_cache_alloc+0x5b/0x310 [ 1515.910035] ? mark_held_locks+0x9e/0xe0 [ 1515.911095] create_object.isra.0+0x3a/0xa20 [ 1515.912185] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1515.913449] kmem_cache_alloc+0x159/0x310 [ 1515.914463] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1515.915837] idr_get_free+0x4b5/0x8f0 [ 1515.916790] idr_alloc_u32+0x170/0x2d0 [ 1515.917756] ? __fprop_inc_percpu_max+0x130/0x130 [ 1515.918953] ? lock_acquire+0x197/0x470 [ 1515.920174] ? __kernfs_new_node+0xff/0x860 [ 1515.921499] idr_alloc_cyclic+0x102/0x230 [ 1515.922756] ? idr_alloc+0x130/0x130 [ 1515.923902] ? rwlock_bug.part.0+0x90/0x90 [ 1515.925130] __kernfs_new_node+0x117/0x860 [ 1515.926191] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1515.927410] ? lock_chain_count+0x20/0x20 [ 1515.928455] ? update_load_avg+0x162/0x1870 [ 1515.929616] ? find_held_lock+0x2c/0x110 [ 1515.930626] kernfs_new_node+0x18d/0x250 [ 1515.931650] kernfs_create_dir_ns+0x49/0x160 [ 1515.932752] internal_create_group+0x793/0xb30 [ 1515.933913] ? set_user_nice.part.0+0x2fd/0x760 [ 1515.935076] ? sysfs_remove_group+0x170/0x170 [ 1515.936220] ? lockdep_init_map_type+0x2c7/0x780 [ 1515.937445] ? blk_queue_flag_set+0x22/0x30 [ 1515.938519] ? __loop_update_dio+0x2d2/0x690 [ 1515.939637] loop_configure+0x953/0x1410 [ 1515.940690] lo_ioctl+0xa57/0x16b0 [ 1515.941615] ? avc_has_extended_perms+0x7f1/0xf40 [ 1515.942831] ? loop_set_status_old+0x250/0x250 [ 1515.944068] ? avc_ss_reset+0x180/0x180 [ 1515.945069] ? find_held_lock+0x2c/0x110 [ 1515.946131] ? __lock_acquire+0xbb1/0x5b00 [ 1515.947279] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1515.948631] ? generic_block_fiemap+0x60/0x60 [ 1515.949776] ? lock_downgrade+0x6d0/0x6d0 [ 1515.950983] ? build_open_flags+0x6f0/0x6f0 [ 1515.952186] ? loop_set_status_old+0x250/0x250 [ 1515.953386] blkdev_ioctl+0x291/0x710 [ 1515.954400] ? blkdev_common_ioctl+0x1930/0x1930 [ 1515.955727] ? selinux_file_ioctl+0xb6/0x270 [ 1515.956967] block_ioctl+0xf9/0x140 [ 1515.957918] ? blkdev_read_iter+0x1c0/0x1c0 [ 1515.959040] __x64_sys_ioctl+0x19a/0x210 [ 1515.960120] do_syscall_64+0x33/0x40 [ 1515.961091] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1515.962422] RIP: 0033:0x7f28825338d7 [ 1515.963388] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1515.968195] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1515.970179] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1515.972044] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1515.973954] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1515.975845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1515.977738] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 14:56:15 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:56:15 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:56:15 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:56:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1515.997563] loop5: detected capacity change from 0 to 262144 [ 1516.022382] loop2: detected capacity change from 0 to 262144 [ 1516.028462] udc-core: couldn't find an available UDC or it's busy [ 1516.030238] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1516.035400] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1516.036229] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1516.039648] EXT4-fs (loop5): get root inode failed [ 1516.040750] EXT4-fs (loop2): group descriptors corrupted! [ 1516.043556] EXT4-fs (loop5): mount failed [ 1516.046137] loop7: detected capacity change from 0 to 262144 [ 1516.060418] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 14:56:15 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1516.106588] FAULT_INJECTION: forcing a failure. [ 1516.106588] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.109736] CPU: 0 PID: 9802 Comm: syz-executor.1 Not tainted 5.10.240 #1 14:56:15 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}]}) (fail_nth: 1) [ 1516.111599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1516.114005] Call Trace: [ 1516.114738] dump_stack+0x107/0x167 [ 1516.115746] should_fail.cold+0x5/0xa [ 1516.116782] ? __do_sys_memfd_create+0xfb/0x450 [ 1516.118036] should_failslab+0x5/0x20 [ 1516.119071] __kmalloc+0x72/0x390 [ 1516.120038] __do_sys_memfd_create+0xfb/0x450 [ 1516.121251] ? ksys_write+0x1a9/0x260 [ 1516.122300] ? memfd_file_seals_ptr+0x170/0x170 [ 1516.123450] do_syscall_64+0x33/0x40 [ 1516.124414] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1516.125805] RIP: 0033:0x7f7d9522cb19 [ 1516.126814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1516.131480] RSP: 002b:00007f7d927a1f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1516.133185] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f7d9522cb19 [ 1516.134802] RDX: 00007f7d927a2000 RSI: 0000000000000000 RDI: 00007f7d952860fb [ 1516.136422] RBP: 0000000000000000 R08: 00007f7d927a1ff8 R09: ffffffffffffffff [ 1516.138031] R10: 00007f7d927a1ffc R11: 0000000000000246 R12: 0000000020000080 [ 1516.139654] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000380 14:56:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 36) 14:56:15 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, 0x0) [ 1516.232775] FAULT_INJECTION: forcing a failure. [ 1516.232775] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.235373] CPU: 0 PID: 9809 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1516.237020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1516.238977] Call Trace: [ 1516.239602] dump_stack+0x107/0x167 [ 1516.240451] should_fail.cold+0x5/0xa [ 1516.241373] ? __kernfs_new_node+0xd4/0x860 [ 1516.242415] should_failslab+0x5/0x20 [ 1516.243347] kmem_cache_alloc+0x5b/0x310 [ 1516.244352] __kernfs_new_node+0xd4/0x860 [ 1516.245377] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1516.246514] ? kernfs_add_one+0x36e/0x4d0 [ 1516.247502] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1516.248655] ? wait_for_completion_io+0x270/0x270 [ 1516.249807] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1516.251019] kernfs_new_node+0x18d/0x250 [ 1516.251985] __kernfs_create_file+0x51/0x350 [ 1516.253033] sysfs_add_file_mode_ns+0x221/0x560 [ 1516.254164] internal_create_group+0x324/0xb30 [ 1516.255271] ? sysfs_remove_group+0x170/0x170 [ 1516.256288] ? lockdep_init_map_type+0x2c7/0x780 [ 1516.257422] ? blk_queue_flag_set+0x22/0x30 [ 1516.258441] ? __loop_update_dio+0x2d2/0x690 [ 1516.259472] loop_configure+0x953/0x1410 [ 1516.260413] lo_ioctl+0xa57/0x16b0 [ 1516.261224] ? avc_has_extended_perms+0x7f1/0xf40 [ 1516.262353] ? loop_set_status_old+0x250/0x250 [ 1516.263439] ? avc_ss_reset+0x180/0x180 [ 1516.264369] ? find_held_lock+0x2c/0x110 [ 1516.265334] ? __lock_acquire+0xbb1/0x5b00 [ 1516.266377] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1516.267606] ? generic_block_fiemap+0x60/0x60 [ 1516.268626] ? lock_downgrade+0x6d0/0x6d0 [ 1516.269593] ? build_open_flags+0x6f0/0x6f0 [ 1516.270588] ? loop_set_status_old+0x250/0x250 [ 1516.271666] blkdev_ioctl+0x291/0x710 [ 1516.272540] ? blkdev_common_ioctl+0x1930/0x1930 [ 1516.273639] ? selinux_file_ioctl+0xb6/0x270 [ 1516.274653] block_ioctl+0xf9/0x140 [ 1516.275522] ? blkdev_read_iter+0x1c0/0x1c0 [ 1516.276515] __x64_sys_ioctl+0x19a/0x210 [ 1516.277459] do_syscall_64+0x33/0x40 [ 1516.278318] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1516.279519] RIP: 0033:0x7f28825338d7 [ 1516.280403] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1516.284763] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1516.286572] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1516.288284] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1516.289967] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1516.291676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1516.293364] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1516.296768] loop5: detected capacity change from 0 to 262144 [ 1516.304383] loop7: detected capacity change from 0 to 262144 [ 1516.330223] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1516.335596] EXT4-fs (loop5): get root inode failed [ 1516.336816] EXT4-fs (loop5): mount failed 14:56:32 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:56:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:56:32 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:56:32 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7f, 0x4) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000440)) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000300)="8f76db1a2c999cd3676ca44f274284cebbab339a7d40820caa44f39c43dbc6404b7100e30c58aeb6c9651fb128d2b1433b558c5ecce6573e0c0593e4fc6d7862f1732f77b493ac393d8831bbf83ebf8751514ad7a74dcd", 0x57}, {&(0x7f0000000200)="a7fac67a5d11a339273aa059fabacbf8126d6fe2dd1fa49416a059034d90efc9f598c420c9074b3ef7b0", 0x2a}, {&(0x7f0000000380)="9c45b3c7cb5050e4a0c191fb5abb9171ee58c9dc1340deecc9943238e57f5999b13654f1002d777c67babfc4385263b03df3662270b646192211e8bc8632739f228328b81ccd96dbbb1034ca5e3daa481e4f", 0x52}], 0x3) fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x4, 0x4) syz_io_uring_setup(0xb54, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001300010000000000000000000000000005000000000000000c00008008001a00", @ANYRES32, @ANYBLOB="9043f13cc6dcf411335f6cff26976b808f8cb02fbf08e7c0f13b2a6ca1034123f016dc957b4dc66b2d29fd3dc01cb82942ad499eda7284bdb9b26a274759b53fce919380869dc2dd78f1e8ee7d7a6d4e708a3165b948aef0099d9e9615f000d1388ed0146b6ab294b8ca35a5488f"], 0x28}}, 0x0) 14:56:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 37) 14:56:32 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, 0x0) 14:56:32 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}]}) (fail_nth: 2) 14:56:32 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001180)="f2c0b00a0a73e255b2c6", 0xa}], 0x1, 0xff7, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x39) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x6, 0x7, {}, 0x800, 0x4, 0x1}, 0x80000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x1000}, 0x1, {0x0, r1}}, 0x3) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt(r2, 0x5, 0x5, &(0x7f0000000040), &(0x7f00000000c0)) creat(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) finit_module(r3, &(0x7f0000000040)='\x00', 0x2) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000140)=0xc) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x29eb, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd_index=0x9, 0x4, &(0x7f0000000780)=[{&(0x7f0000000300)="ad4214437c0865348e73601f8d4fba3ad7a46a4cea96ba368ba56bc6489fa22d31215ebf481fff1f1f0986957d996bbcf6f1e08700b3e74918cf1b7ae5529e64aa48f8e6f8a3bf85d44093187c93f335d385bf3cf17794d7925f0ea526649dc2dda12593031cd89b29379e6f82887b7acd13cd9cdb307717183fbfd460f85014303fd02a1a8456f9daeb399d771d33cec93954e1932ff15f8bd5f0de2f3064598a7013a53132733c09d675f038e693a8d56a97685cfe6f70d0641c0da62b4bb3f4046dd9c3b919b5b0ab153c92e070479b52b45a640ad2283c5aeb74c3b9ac0a2f", 0xe1}, {&(0x7f0000000440)="e316e5b101282ba755452f453fbbcef6cd1b789d474a59adb1bdd6df7505ab1bf49d2e42876215852f9b5e3b24c1b5fa93fae381a6a0f5c5d839e2384ee7c0a9c5c567ee44644889cb64513573466902ed320c85646aac5afc36df86d2a69e06e13324b87a54e81951c17698e07b1eaa8b172d16c6b1743d0e820784db44f73e8ee7e62c4b6cbff9b4eedb23eac9552681ea262d9da06a6a6c88d281f0f46aa938549bc23a49bdc9750ca89c1c72ea40c2a456b8070fd4e7c11adf2fde9864560765eddc193532c27c0f044e5e0c34", 0xcf}, {&(0x7f0000000580)="f9e80ba4880b5c4b1e9c844948f20a25254f6fa6bab78606fb976084dc8168354b5eb06c8d5049c9d948b6a96cfca8790dc55ae696260e6e7898a52a25a7bbab75657a4575e683c546766724ec972f6347b67a8249b6c32bf7e5effe8a8734bdfb6237e5f0f8589d3f89886801c4a138f3835aac1eef3273f221b856ce20c8bb3aa50c38b3f357efe694781c65f52b0db0f4d00c67e09b8756dd8d267b33b93ed8877862e5", 0xa5}, {&(0x7f0000000180)="a324dbf5be9bb2f04bbc8a26d1018dc9bdde284591e1d4491d72d1b7320899561b0d4548899e45800946362336e703d845c873d07c6b5d209eb49255", 0x3c}, {&(0x7f0000000200)="137152e51459e3e4822a2af99a28507ab550b2b49dd455ce9b3c803c", 0x1c}, {&(0x7f0000000640)="261ad2e2ef83a0372450412320aa130b93d8c5ebaf52e62322813d3e8f2e7a1bafd61a2bd630aef705be2e2649ea09046d7d98a2810a8a002b9ad9999b4ac5c55773c80308b8cf57da2fe77e3cf036adcd176d1ce0fe8d4996", 0x59}, {&(0x7f0000000840)="1a9690efe20fdfece95dd84d414d73ab0e4c2183d8c8e5027cb6332d1285d1c4d5f40c7718f189971090a8170b410ecb82353522499246a40e5869c63217a54fc30a799f6def03bdeed8a90e27c19f3542a37e", 0x53}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f00000006c0)="f70169b0e4ac18103d459656336886ee2778ea88dbe82bb2bc173b2dbdee6d750b94d094f3048ec878ef8f74ed4d7be7cc8159d84ba14766642e1bb43c29359ecc4597d23f807b0715df2083406c8043a390e472561685dcd0a85af2579fb35fd4c136e529a87f4388d4d53d357f938850bf3d071ec54a715f50d30c8066cae25bb9f1d93be2c41d32918c093d96910a474305841e79583bc608a3088ae53575727b20877c135efbc4f0291f", 0xac}], 0x9, 0x5, 0x0, {0x2, r1}}, 0x1f) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x100010, 0xffffffffffffffff, 0x8000000) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x2f, 0x0) [ 1532.864068] FAULT_INJECTION: forcing a failure. [ 1532.864068] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.867010] CPU: 0 PID: 9836 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1532.868369] loop7: detected capacity change from 0 to 262144 [ 1532.868721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1532.868738] Call Trace: [ 1532.872945] dump_stack+0x107/0x167 [ 1532.873865] should_fail.cold+0x5/0xa [ 1532.874826] ? create_object.isra.0+0x3a/0xa20 [ 1532.875982] should_failslab+0x5/0x20 [ 1532.876939] kmem_cache_alloc+0x5b/0x310 [ 1532.877966] create_object.isra.0+0x3a/0xa20 [ 1532.879049] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1532.880341] __kmalloc+0x16e/0x390 [ 1532.881239] __do_sys_memfd_create+0xfb/0x450 [ 1532.882369] ? ksys_write+0x1a9/0x260 [ 1532.883325] ? memfd_file_seals_ptr+0x170/0x170 [ 1532.884531] do_syscall_64+0x33/0x40 [ 1532.885465] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1532.886740] RIP: 0033:0x7f7d9522cb19 [ 1532.887683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1532.892251] RSP: 002b:00007f7d927a1f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1532.894126] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f7d9522cb19 [ 1532.895894] RDX: 00007f7d927a2000 RSI: 0000000000000000 RDI: 00007f7d952860fb [ 1532.897647] RBP: 0000000000000000 R08: 00007f7d927a1ff8 R09: ffffffffffffffff [ 1532.899405] R10: 00007f7d927a1ffc R11: 0000000000000246 R12: 0000000020000080 [ 1532.901155] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000380 [ 1532.923131] udc-core: couldn't find an available UDC or it's busy [ 1532.924926] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1532.943755] FAULT_INJECTION: forcing a failure. [ 1532.943755] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.946685] CPU: 0 PID: 9834 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1532.948376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1532.950402] Call Trace: [ 1532.951058] dump_stack+0x107/0x167 [ 1532.951956] should_fail.cold+0x5/0xa [ 1532.952889] ? create_object.isra.0+0x3a/0xa20 [ 1532.954014] should_failslab+0x5/0x20 [ 1532.954951] kmem_cache_alloc+0x5b/0x310 [ 1532.955966] ? __lockdep_reset_lock+0x180/0x180 [ 1532.957111] create_object.isra.0+0x3a/0xa20 [ 1532.958181] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1532.959440] kmem_cache_alloc+0x159/0x310 [ 1532.960473] __kernfs_new_node+0xd4/0x860 [ 1532.961492] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1532.962642] ? kernfs_add_one+0x36e/0x4d0 [ 1532.963672] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1532.964847] ? wait_for_completion_io+0x270/0x270 [ 1532.966028] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1532.967321] kernfs_new_node+0x18d/0x250 [ 1532.968329] __kernfs_create_file+0x51/0x350 [ 1532.969413] sysfs_add_file_mode_ns+0x221/0x560 [ 1532.970562] internal_create_group+0x324/0xb30 [ 1532.971692] ? sysfs_remove_group+0x170/0x170 [ 1532.972789] ? lockdep_init_map_type+0x2c7/0x780 [ 1532.973964] ? blk_queue_flag_set+0x22/0x30 [ 1532.975016] ? __loop_update_dio+0x2d2/0x690 [ 1532.976102] loop_configure+0x953/0x1410 [ 1532.977106] lo_ioctl+0xa57/0x16b0 [ 1532.977974] ? avc_has_extended_perms+0x7f1/0xf40 [ 1532.979143] ? loop_set_status_old+0x250/0x250 [ 1532.980268] ? avc_ss_reset+0x180/0x180 [ 1532.981241] ? find_held_lock+0x2c/0x110 [ 1532.982239] ? __lock_acquire+0xbb1/0x5b00 [ 1532.983332] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1532.984598] ? generic_block_fiemap+0x60/0x60 [ 1532.985691] ? lock_downgrade+0x6d0/0x6d0 [ 1532.986701] ? build_open_flags+0x6f0/0x6f0 [ 1532.987767] ? loop_set_status_old+0x250/0x250 [ 1532.988876] blkdev_ioctl+0x291/0x710 [ 1532.989808] ? blkdev_common_ioctl+0x1930/0x1930 [ 1532.990969] ? selinux_file_ioctl+0xb6/0x270 [ 1532.992055] block_ioctl+0xf9/0x140 [ 1532.992944] ? blkdev_read_iter+0x1c0/0x1c0 [ 1532.993999] __x64_sys_ioctl+0x19a/0x210 [ 1532.994998] do_syscall_64+0x33/0x40 [ 1532.995918] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1532.997168] RIP: 0033:0x7f28825338d7 [ 1532.998074] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1533.002578] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1533.004432] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1533.006174] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1533.007919] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1533.009656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1533.011399] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1533.018716] loop5: detected capacity change from 0 to 262144 14:56:32 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:56:32 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, 0x0) [ 1533.061420] loop2: detected capacity change from 0 to 262144 [ 1533.098731] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1533.106236] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1533.108463] EXT4-fs (loop2): group descriptors corrupted! [ 1533.125078] EXT4-fs (loop5): get root inode failed [ 1533.126396] EXT4-fs (loop5): mount failed 14:56:32 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000040)) getgroups(0x0, 0x0) fallocate(r0, 0xa, 0xfff, 0xfff) 14:56:32 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}]}) (fail_nth: 3) 14:56:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1533.249669] loop7: detected capacity change from 0 to 262144 14:56:32 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:56:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 38) [ 1533.344450] udc-core: couldn't find an available UDC or it's busy [ 1533.346113] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1533.366358] FAULT_INJECTION: forcing a failure. [ 1533.366358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1533.369033] CPU: 0 PID: 9865 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1533.370515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1533.372304] Call Trace: [ 1533.372879] dump_stack+0x107/0x167 [ 1533.373663] should_fail.cold+0x5/0xa [ 1533.374495] _copy_from_user+0x2e/0x1b0 [ 1533.375356] __do_sys_memfd_create+0x16d/0x450 [ 1533.376353] ? memfd_file_seals_ptr+0x170/0x170 [ 1533.377382] do_syscall_64+0x33/0x40 [ 1533.378182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1533.379288] RIP: 0033:0x7f7d9522cb19 [ 1533.380095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1533.384019] RSP: 002b:00007f7d927a1f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1533.385639] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f7d9522cb19 [ 1533.387153] RDX: 00007f7d927a2000 RSI: 0000000000000000 RDI: 00007f7d952860fb [ 1533.388682] RBP: 0000000000000000 R08: 00007f7d927a1ff8 R09: ffffffffffffffff [ 1533.390208] R10: 00007f7d927a1ffc R11: 0000000000000246 R12: 0000000020000080 [ 1533.391727] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000380 [ 1533.399467] loop2: detected capacity change from 0 to 262144 14:56:32 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:56:32 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1533.492070] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1533.494128] EXT4-fs (loop2): group descriptors corrupted! [ 1533.515123] FAULT_INJECTION: forcing a failure. [ 1533.515123] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.517424] CPU: 1 PID: 9871 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1533.518813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1533.520626] Call Trace: [ 1533.521171] dump_stack+0x107/0x167 [ 1533.521925] should_fail.cold+0x5/0xa [ 1533.522710] ? __kernfs_new_node+0xd4/0x860 [ 1533.523599] should_failslab+0x5/0x20 [ 1533.524380] kmem_cache_alloc+0x5b/0x310 [ 1533.525222] __kernfs_new_node+0xd4/0x860 [ 1533.526083] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1533.527043] ? kernfs_add_one+0x36e/0x4d0 [ 1533.527905] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1533.528900] ? wait_for_completion_io+0x270/0x270 [ 1533.529885] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1533.530986] kernfs_new_node+0x18d/0x250 [ 1533.531839] __kernfs_create_file+0x51/0x350 [ 1533.532760] sysfs_add_file_mode_ns+0x221/0x560 [ 1533.533733] internal_create_group+0x324/0xb30 [ 1533.534682] ? sysfs_remove_group+0x170/0x170 [ 1533.535619] ? lockdep_init_map_type+0x2c7/0x780 [ 1533.536597] ? blk_queue_flag_set+0x22/0x30 [ 1533.537480] ? __loop_update_dio+0x2d2/0x690 [ 1533.538389] loop_configure+0x953/0x1410 [ 1533.539240] lo_ioctl+0xa57/0x16b0 [ 1533.539991] ? avc_has_extended_perms+0x7f1/0xf40 [ 1533.540987] ? loop_set_status_old+0x250/0x250 [ 1533.541928] ? avc_ss_reset+0x180/0x180 [ 1533.542743] ? find_held_lock+0x2c/0x110 [ 1533.543573] ? __lock_acquire+0xbb1/0x5b00 [ 1533.544477] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1533.545521] ? generic_block_fiemap+0x60/0x60 [ 1533.546422] ? lock_downgrade+0x6d0/0x6d0 [ 1533.547250] ? build_open_flags+0x6f0/0x6f0 [ 1533.548130] ? loop_set_status_old+0x250/0x250 [ 1533.549063] blkdev_ioctl+0x291/0x710 [ 1533.549827] ? blkdev_common_ioctl+0x1930/0x1930 [ 1533.550781] ? selinux_file_ioctl+0xb6/0x270 [ 1533.551655] block_ioctl+0xf9/0x140 [ 1533.552378] ? blkdev_read_iter+0x1c0/0x1c0 [ 1533.553242] __x64_sys_ioctl+0x19a/0x210 [ 1533.554040] do_syscall_64+0x33/0x40 [ 1533.554780] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1533.555807] RIP: 0033:0x7f28825338d7 [ 1533.556560] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1533.560308] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1533.561812] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1533.563260] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1533.564688] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1533.566120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1533.567583] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1533.622644] audit: type=1326 audit(1754319392.915:204): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9863 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07ff0b19 code=0x7ffc0000 [ 1533.631401] audit: type=1326 audit(1754319392.924:205): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9863 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07ff0b19 code=0x7ffc0000 [ 1533.636614] audit: type=1326 audit(1754319392.929:206): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9863 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5c07ff0b19 code=0x7ffc0000 [ 1533.642441] audit: type=1326 audit(1754319392.934:207): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9863 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07ff0b19 code=0x7ffc0000 [ 1533.646764] audit: type=1326 audit(1754319392.934:208): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9863 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07ff0b19 code=0x7ffc0000 [ 1533.651290] audit: type=1326 audit(1754319392.939:209): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9863 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c07ff0b19 code=0x7ffc0000 [ 1533.653264] loop5: detected capacity change from 0 to 262144 [ 1533.660992] audit: type=1326 audit(1754319392.943:210): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9863 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07ff0b19 code=0x7ffc0000 [ 1533.665629] audit: type=1326 audit(1754319392.943:211): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9863 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07ff0b19 code=0x7ffc0000 [ 1533.670530] audit: type=1326 audit(1754319392.951:212): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9863 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5c07ff0b19 code=0x7ffc0000 [ 1533.675525] audit: type=1326 audit(1754319392.951:213): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9863 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07ff0b19 code=0x7ffc0000 [ 1533.727108] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1533.736284] EXT4-fs (loop5): get root inode failed [ 1533.737261] EXT4-fs (loop5): mount failed 14:56:45 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}]}) (fail_nth: 4) 14:56:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 39) 14:56:45 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:56:45 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1546.104247] FAULT_INJECTION: forcing a failure. [ 1546.104247] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.107325] CPU: 0 PID: 9888 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1546.109160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.111386] Call Trace: [ 1546.112114] dump_stack+0x107/0x167 [ 1546.113307] should_fail.cold+0x5/0xa [ 1546.113358] udc-core: couldn't find an available UDC or it's busy [ 1546.114335] ? create_object.isra.0+0x3a/0xa20 [ 1546.115082] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1546.116278] should_failslab+0x5/0x20 [ 1546.117718] FAULT_INJECTION: forcing a failure. [ 1546.117718] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.118038] kmem_cache_alloc+0x5b/0x310 [ 1546.118061] ? __lockdep_reset_lock+0x180/0x180 [ 1546.121633] create_object.isra.0+0x3a/0xa20 [ 1546.122819] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1546.124203] kmem_cache_alloc+0x159/0x310 [ 1546.125325] __kernfs_new_node+0xd4/0x860 [ 1546.126446] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1546.127733] ? kernfs_add_one+0x36e/0x4d0 [ 1546.128875] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1546.130175] ? wait_for_completion_io+0x270/0x270 [ 1546.131503] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1546.132966] kernfs_new_node+0x18d/0x250 [ 1546.134090] __kernfs_create_file+0x51/0x350 [ 1546.135310] sysfs_add_file_mode_ns+0x221/0x560 [ 1546.136617] internal_create_group+0x324/0xb30 [ 1546.137889] ? sysfs_remove_group+0x170/0x170 [ 1546.139128] ? lockdep_init_map_type+0x2c7/0x780 [ 1546.140449] ? blk_queue_flag_set+0x22/0x30 [ 1546.141636] ? __loop_update_dio+0x2d2/0x690 [ 1546.142852] loop_configure+0x953/0x1410 [ 1546.143998] lo_ioctl+0xa57/0x16b0 [ 1546.144986] ? avc_has_extended_perms+0x7f1/0xf40 [ 1546.146319] ? loop_set_status_old+0x250/0x250 [ 1546.147582] ? avc_ss_reset+0x180/0x180 [ 1546.148642] ? find_held_lock+0x2c/0x110 [ 1546.149647] ? __lock_acquire+0xbb1/0x5b00 [ 1546.150740] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1546.152028] ? generic_block_fiemap+0x60/0x60 [ 1546.153114] ? lock_downgrade+0x6d0/0x6d0 [ 1546.154113] ? build_open_flags+0x6f0/0x6f0 [ 1546.155167] ? loop_set_status_old+0x250/0x250 [ 1546.156288] blkdev_ioctl+0x291/0x710 [ 1546.157220] ? blkdev_common_ioctl+0x1930/0x1930 [ 1546.158390] ? selinux_file_ioctl+0xb6/0x270 [ 1546.159488] block_ioctl+0xf9/0x140 [ 1546.160382] ? blkdev_read_iter+0x1c0/0x1c0 [ 1546.161442] __x64_sys_ioctl+0x19a/0x210 [ 1546.162429] do_syscall_64+0x33/0x40 [ 1546.163332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.164579] RIP: 0033:0x7f28825338d7 [ 1546.165481] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.169965] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1546.171844] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1546.173576] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1546.175322] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1546.177070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1546.178816] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1546.180586] CPU: 1 PID: 9902 Comm: syz-executor.7 Not tainted 5.10.240 #1 14:56:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 1) 14:56:45 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:56:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) tgkill(0x0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100da00180000002f7b0ab76c568d61cbc3987d023635f868676f68c5aa10025fc8ff52b3aee468fc652819f3542653746d9cdc0611e8d12b7e4cc4f5852c0139a8f28ab1543b90ef31cef19751790b19cbea4a6f985c265a6b4b5409ac0b9fa85ec2328c0b5a96377ce019e54084881cef1a60f7d9b987c0f6bd9614d653ccbdda723d17f36f67656255329ff7cbde8637d787fd52579717fdd47b69835ef2d0686f96100cff6ea951550d", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') writev(r2, &(0x7f0000000380)=[{&(0x7f0000000040)='3', 0x1}], 0x1) openat(r2, &(0x7f0000000080)='./file0\x00', 0x383240, 0x68) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000080)=0x5) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000440), 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0x50004001}) 14:56:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1546.181404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.182523] Call Trace: [ 1546.182939] dump_stack+0x107/0x167 [ 1546.183373] should_fail.cold+0x5/0xa [ 1546.183825] ? __do_sys_memfd_create+0xfb/0x450 [ 1546.184352] should_failslab+0x5/0x20 [ 1546.184782] __kmalloc+0x72/0x390 [ 1546.185182] __do_sys_memfd_create+0xfb/0x450 [ 1546.185694] ? ksys_write+0x1a9/0x260 [ 1546.186127] ? memfd_file_seals_ptr+0x170/0x170 [ 1546.186666] do_syscall_64+0x33/0x40 [ 1546.187092] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.187674] RIP: 0033:0x7f5114850b19 [ 1546.188106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.190204] RSP: 002b:00007f5111dc5f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1546.191075] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f5114850b19 [ 1546.191888] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f51148aa0fb [ 1546.192700] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1546.193513] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1546.194323] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 [ 1546.197588] FAULT_INJECTION: forcing a failure. [ 1546.197588] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.198884] CPU: 1 PID: 9893 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1546.199663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.200617] Call Trace: [ 1546.200918] dump_stack+0x107/0x167 [ 1546.201335] should_fail.cold+0x5/0xa [ 1546.201776] ? shmem_alloc_inode+0x18/0x40 [ 1546.202255] should_failslab+0x5/0x20 [ 1546.202691] kmem_cache_alloc+0x5b/0x310 [ 1546.203156] ? shmem_destroy_inode+0x70/0x70 [ 1546.203659] shmem_alloc_inode+0x18/0x40 [ 1546.204129] ? shmem_destroy_inode+0x70/0x70 [ 1546.204642] alloc_inode+0x63/0x240 [ 1546.205057] new_inode+0x23/0x250 [ 1546.205457] shmem_get_inode+0x15e/0xbc0 [ 1546.205926] __shmem_file_setup+0xb8/0x320 [ 1546.206409] ? _copy_from_user+0xfb/0x1b0 [ 1546.206886] __do_sys_memfd_create+0x275/0x450 [ 1546.207408] ? memfd_file_seals_ptr+0x170/0x170 [ 1546.207955] do_syscall_64+0x33/0x40 [ 1546.208382] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.208966] RIP: 0033:0x7f7d9522cb19 [ 1546.209391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.211496] RSP: 002b:00007f7d927a1f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1546.212376] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f7d9522cb19 [ 1546.213191] RDX: 00007f7d927a2000 RSI: 0000000000000000 RDI: 00007f7d952860fb [ 1546.214010] RBP: 0000000000000000 R08: 00007f7d927a1ff8 R09: ffffffffffffffff [ 1546.214824] R10: 00007f7d927a1ffc R11: 0000000000000246 R12: 0000000020000080 [ 1546.215640] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000380 [ 1546.219318] loop5: detected capacity change from 0 to 262144 [ 1546.237307] loop2: detected capacity change from 0 to 262144 [ 1546.241191] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1546.242245] EXT4-fs (loop2): group descriptors corrupted! 14:56:45 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1546.261033] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1546.262922] EXT4-fs (loop5): get root inode failed [ 1546.263504] EXT4-fs (loop5): mount failed 14:56:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:56:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 40) [ 1546.327449] loop2: detected capacity change from 0 to 262144 14:56:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 2) [ 1546.333782] FAULT_INJECTION: forcing a failure. [ 1546.333782] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.335170] CPU: 1 PID: 9915 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1546.335960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.336907] Call Trace: [ 1546.337212] dump_stack+0x107/0x167 [ 1546.337636] should_fail.cold+0x5/0xa [ 1546.338071] ? __kernfs_new_node+0xd4/0x860 [ 1546.338567] should_failslab+0x5/0x20 [ 1546.338999] kmem_cache_alloc+0x5b/0x310 [ 1546.339464] __kernfs_new_node+0xd4/0x860 [ 1546.339947] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1546.340483] ? kernfs_add_one+0x36e/0x4d0 [ 1546.340956] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1546.341507] ? wait_for_completion_io+0x270/0x270 [ 1546.342060] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1546.342663] kernfs_new_node+0x18d/0x250 [ 1546.343127] __kernfs_create_file+0x51/0x350 [ 1546.343629] sysfs_add_file_mode_ns+0x221/0x560 [ 1546.344175] internal_create_group+0x324/0xb30 [ 1546.344702] ? sysfs_remove_group+0x170/0x170 [ 1546.345214] ? lockdep_init_map_type+0x2c7/0x780 [ 1546.345760] ? blk_queue_flag_set+0x22/0x30 [ 1546.346251] ? __loop_update_dio+0x2d2/0x690 [ 1546.346754] loop_configure+0x953/0x1410 [ 1546.347222] lo_ioctl+0xa57/0x16b0 [ 1546.347630] ? avc_has_extended_perms+0x7f1/0xf40 [ 1546.348191] ? loop_set_status_old+0x250/0x250 [ 1546.348713] ? avc_ss_reset+0x180/0x180 [ 1546.349167] ? find_held_lock+0x2c/0x110 [ 1546.349642] ? __lock_acquire+0xbb1/0x5b00 [ 1546.350149] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1546.350744] ? generic_block_fiemap+0x60/0x60 [ 1546.351252] ? lock_downgrade+0x6d0/0x6d0 [ 1546.351729] ? build_open_flags+0x6f0/0x6f0 [ 1546.352226] ? loop_set_status_old+0x250/0x250 [ 1546.352743] blkdev_ioctl+0x291/0x710 [ 1546.353173] ? blkdev_common_ioctl+0x1930/0x1930 [ 1546.353718] ? selinux_file_ioctl+0xb6/0x270 [ 1546.354219] block_ioctl+0xf9/0x140 [ 1546.354630] ? blkdev_read_iter+0x1c0/0x1c0 [ 1546.355121] __x64_sys_ioctl+0x19a/0x210 [ 1546.355584] do_syscall_64+0x33/0x40 [ 1546.356013] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.356599] RIP: 0033:0x7f28825338d7 [ 1546.357023] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.359121] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1546.360005] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1546.360813] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1546.361624] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1546.362433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1546.363244] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 14:56:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) tgkill(0x0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100da00180000002f7b0ab76c568d61cbc3987d023635f868676f68c5aa10025fc8ff52b3aee468fc652819f3542653746d9cdc0611e8d12b7e4cc4f5852c0139a8f28ab1543b90ef31cef19751790b19cbea4a6f985c265a6b4b5409ac0b9fa85ec2328c0b5a96377ce019e54084881cef1a60f7d9b987c0f6bd9614d653ccbdda723d17f36f67656255329ff7cbde8637d787fd52579717fdd47b69835ef2d0686f96100cff6ea951550d", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') writev(r2, &(0x7f0000000380)=[{&(0x7f0000000040)='3', 0x1}], 0x1) openat(r2, &(0x7f0000000080)='./file0\x00', 0x383240, 0x68) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000080)=0x5) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000440), 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0x50004001}) 14:56:45 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}]}) (fail_nth: 5) [ 1546.370265] loop5: detected capacity change from 0 to 262144 [ 1546.386840] FAULT_INJECTION: forcing a failure. [ 1546.386840] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.389652] CPU: 0 PID: 9919 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1546.391314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.391908] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1546.393324] Call Trace: [ 1546.393352] dump_stack+0x107/0x167 [ 1546.393374] should_fail.cold+0x5/0xa [ 1546.394377] EXT4-fs (loop2): group descriptors corrupted! [ 1546.395005] ? create_object.isra.0+0x3a/0xa20 [ 1546.395024] should_failslab+0x5/0x20 [ 1546.399636] kmem_cache_alloc+0x5b/0x310 [ 1546.400634] create_object.isra.0+0x3a/0xa20 [ 1546.401717] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1546.402962] __kmalloc+0x16e/0x390 [ 1546.403840] __do_sys_memfd_create+0xfb/0x450 [ 1546.404928] ? ksys_write+0x1a9/0x260 [ 1546.405852] ? memfd_file_seals_ptr+0x170/0x170 [ 1546.406996] do_syscall_64+0x33/0x40 [ 1546.407906] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.409148] RIP: 0033:0x7f5114850b19 [ 1546.410060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.414563] RSP: 002b:00007f5111dc5f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1546.416430] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f5114850b19 [ 1546.418175] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f51148aa0fb [ 1546.419928] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1546.421686] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1546.423434] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 [ 1546.434319] FAULT_INJECTION: forcing a failure. [ 1546.434319] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.435689] CPU: 1 PID: 9921 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1546.436480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.437425] Call Trace: [ 1546.437731] dump_stack+0x107/0x167 [ 1546.438149] should_fail.cold+0x5/0xa [ 1546.438583] ? create_object.isra.0+0x3a/0xa20 [ 1546.439104] should_failslab+0x5/0x20 [ 1546.439532] kmem_cache_alloc+0x5b/0x310 [ 1546.440012] create_object.isra.0+0x3a/0xa20 [ 1546.440507] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1546.441086] kmem_cache_alloc+0x159/0x310 [ 1546.441560] ? shmem_destroy_inode+0x70/0x70 [ 1546.442063] shmem_alloc_inode+0x18/0x40 [ 1546.442525] ? shmem_destroy_inode+0x70/0x70 [ 1546.443026] alloc_inode+0x63/0x240 [ 1546.443439] new_inode+0x23/0x250 [ 1546.443844] shmem_get_inode+0x15e/0xbc0 [ 1546.444309] __shmem_file_setup+0xb8/0x320 [ 1546.444794] ? _copy_from_user+0xfb/0x1b0 [ 1546.445271] __do_sys_memfd_create+0x275/0x450 [ 1546.445792] ? memfd_file_seals_ptr+0x170/0x170 [ 1546.446331] do_syscall_64+0x33/0x40 [ 1546.446759] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.447340] RIP: 0033:0x7f7d9522cb19 [ 1546.447772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.449853] RSP: 002b:00007f7d927a1f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1546.450719] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f7d9522cb19 [ 1546.451535] RDX: 00007f7d927a2000 RSI: 0000000000000000 RDI: 00007f7d952860fb [ 1546.452358] RBP: 0000000000000000 R08: 00007f7d927a1ff8 R09: ffffffffffffffff [ 1546.453170] R10: 00007f7d927a1ffc R11: 0000000000000246 R12: 0000000020000080 [ 1546.453980] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000380 14:56:45 executing program 0: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001180)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x40008, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x3b0f, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x111}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000001300)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4109, 0x100d}], 0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a7, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000002a40)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001240)=0x80, &(0x7f0000001280)=@phonet}, 0xfd) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0xe60) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x8, 0xfffffffe, 0x388}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6ee2, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000001200)=@IORING_OP_WRITE={0x17, 0x3, 0x4007, @fd, 0x7, 0x0}, 0x0) [ 1546.477375] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1546.480264] EXT4-fs (loop5): get root inode failed [ 1546.480836] EXT4-fs (loop5): mount failed 14:56:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:56:45 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1546.532180] loop7: detected capacity change from 0 to 262144 [ 1546.570023] loop2: detected capacity change from 0 to 262144 [ 1546.571921] EXT4-fs error (device loop7): ext4_fill_super:4967: inode #2: comm syz-executor.7: iget: bad extended attribute block 229 [ 1546.580832] EXT4-fs (loop7): get root inode failed [ 1546.582108] EXT4-fs (loop7): mount failed [ 1546.590304] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1546.591379] EXT4-fs (loop2): group descriptors corrupted! 14:57:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 41) 14:57:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000000700)=""/4096, 0x1000) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup2(r2, r1) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @mcast2, 0x3f}, 0x1c) r4 = accept4$packet(r3, 0x0, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000200)={0x3, 0x1}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 14:57:02 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:57:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xa) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = fsopen(&(0x7f00000006c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000002400)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/71, 0x47}, {&(0x7f0000000080)=""/20, 0x14}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000700)=""/142, 0x8e}, {&(0x7f00000007c0)=""/236, 0xec}, {&(0x7f00000008c0)=""/141, 0x8d}, {&(0x7f0000000980)=""/160, 0xa0}, {&(0x7f0000000a40)=""/193, 0xc1}], 0x6, &(0x7f0000000bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000001f80)=[{&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/81, 0x51}, {&(0x7f0000001e80)=""/227, 0xe3}, {&(0x7f0000000680)=""/37, 0x25}], 0x5, &(0x7f0000002000)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000002080)=@abs, 0x6e, &(0x7f0000002100), 0x0, &(0x7f0000002140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000002200)=@abs, 0x6e, &(0x7f0000002380)=[{&(0x7f0000002280)=""/254, 0xfe}], 0x1, &(0x7f00000023c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x5, 0x1, &(0x7f0000002540)) setsockopt(r2, 0xffffff00, 0x9eb, &(0x7f0000002580)="fa874db0a8bf6e753dbebdd0b4afd74b2741476553a6700210e1b7eda97e9051a048334ddb18291f2df3c6d504dbeefa35881669e7dc218b6fd28f4dc379fc78560d83dbecbdb8aac670a87d1a64457e5aadc8715e9b801a03be0085e4595fdbb4ff5218fa3b200e3ba379e0a665793b09901fda51a04cb9446749974869d60ab220a24d250ec01cfed4", 0x8a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x20000, &(0x7f0000000500)=ANY=[@ANYBLOB="3576177c3908951ab3e3778310f02c3237d6916d3d8f74f3a8c6c8ee001b1d59eb7a9b622d9aa6bf76abfbd92ceabbbf539588b985483d26f5cf97562252724964a0dfcc59b53368a366b7491fe6b29f2ebce1dddc23cdfdc2c28a2e31b78efd26b1627721b367374199d5dd208c6eaf511342fde71cf504d31ff5e8b790b4f3e0bd8b8f4e883c80090a5a18924c1fe7241041d32fb7a9ffb5995740b0dfda086193a78422f6d658ea278060fec199bc76930bfd65beac5f553c8f89e8b2a8e052cd8b9ee1b387017536aae3db6095872cd710632ede74ecb6cc48277461557ea836480c929ed613595c30d98e98370b", @ANYBLOB]) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0xfffffffffffffffd, 0x2, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000000)={&(0x7f00000002c0)=""/228, 0xe4, 0x0, 0x66}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r4) close(r3) r5 = syz_open_dev$usbmon(&(0x7f0000000100), 0x1, 0xe4000) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000200)={0xb66, 0x9, 0x9, 0x3, 0x8}) 14:57:02 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}]}) (fail_nth: 6) [ 1563.379646] FAULT_INJECTION: forcing a failure. [ 1563.379646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1563.382266] CPU: 1 PID: 9955 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1563.383708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1563.385480] Call Trace: [ 1563.386044] dump_stack+0x107/0x167 [ 1563.386815] should_fail.cold+0x5/0xa [ 1563.387625] _copy_from_user+0x2e/0x1b0 [ 1563.388657] __do_sys_memfd_create+0x16d/0x450 [ 1563.389630] ? memfd_file_seals_ptr+0x170/0x170 [ 1563.390632] do_syscall_64+0x33/0x40 [ 1563.391423] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1563.392518] RIP: 0033:0x7f5114850b19 [ 1563.393297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1563.397176] RSP: 002b:00007f5111dc5f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1563.398773] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f5114850b19 [ 1563.400289] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f51148aa0fb [ 1563.401794] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1563.403289] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1563.404797] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 [ 1563.412486] FAULT_INJECTION: forcing a failure. [ 1563.412486] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.415272] CPU: 0 PID: 9957 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1563.416842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1563.418703] Call Trace: [ 1563.419320] dump_stack+0x107/0x167 [ 1563.420162] should_fail.cold+0x5/0xa [ 1563.421034] ? create_object.isra.0+0x3a/0xa20 [ 1563.422062] should_failslab+0x5/0x20 [ 1563.422900] kmem_cache_alloc+0x5b/0x310 [ 1563.423805] create_object.isra.0+0x3a/0xa20 [ 1563.424794] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1563.425942] kmem_cache_alloc+0x159/0x310 [ 1563.426866] __kernfs_new_node+0xd4/0x860 [ 1563.427800] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1563.428868] ? kernfs_add_one+0x36e/0x4d0 [ 1563.429808] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1563.430894] ? wait_for_completion_io+0x270/0x270 [ 1563.432043] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1563.433227] kernfs_new_node+0x18d/0x250 [ 1563.434144] __kernfs_create_file+0x51/0x350 [ 1563.435133] sysfs_add_file_mode_ns+0x221/0x560 [ 1563.436199] internal_create_group+0x324/0xb30 [ 1563.437227] ? sysfs_remove_group+0x170/0x170 [ 1563.438253] ? lockdep_init_map_type+0x2c7/0x780 [ 1563.439325] ? blk_queue_flag_set+0x22/0x30 [ 1563.440317] ? __loop_update_dio+0x2d2/0x690 [ 1563.441317] loop_configure+0x953/0x1410 [ 1563.442249] lo_ioctl+0xa57/0x16b0 [ 1563.443058] ? avc_has_extended_perms+0x7f1/0xf40 [ 1563.444164] ? loop_set_status_old+0x250/0x250 [ 1563.445207] ? avc_ss_reset+0x180/0x180 [ 1563.446111] ? find_held_lock+0x2c/0x110 [ 1563.447044] ? __lock_acquire+0xbb1/0x5b00 [ 1563.448062] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1563.449249] ? generic_block_fiemap+0x60/0x60 [ 1563.450262] ? lock_downgrade+0x6d0/0x6d0 [ 1563.451199] ? build_open_flags+0x6f0/0x6f0 [ 1563.452195] ? loop_set_status_old+0x250/0x250 [ 1563.453228] blkdev_ioctl+0x291/0x710 [ 1563.454089] ? blkdev_common_ioctl+0x1930/0x1930 14:57:02 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r6}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:57:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:57:02 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 3) [ 1563.455165] ? selinux_file_ioctl+0xb6/0x270 [ 1563.456414] block_ioctl+0xf9/0x140 [ 1563.457237] ? blkdev_read_iter+0x1c0/0x1c0 [ 1563.458216] __x64_sys_ioctl+0x19a/0x210 [ 1563.459148] do_syscall_64+0x33/0x40 [ 1563.460010] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1563.461182] RIP: 0033:0x7f28825338d7 [ 1563.462028] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1563.466216] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1563.467956] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1563.469577] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1563.471199] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1563.472827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1563.474450] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1563.478098] FAULT_INJECTION: forcing a failure. [ 1563.478098] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.480662] CPU: 0 PID: 9965 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1563.482217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1563.484106] Call Trace: [ 1563.484704] dump_stack+0x107/0x167 [ 1563.485538] should_fail.cold+0x5/0xa [ 1563.486402] ? security_inode_alloc+0x34/0x160 [ 1563.487439] should_failslab+0x5/0x20 [ 1563.488317] kmem_cache_alloc+0x5b/0x310 [ 1563.489245] security_inode_alloc+0x34/0x160 [ 1563.490248] inode_init_always+0xa4e/0xd10 [ 1563.491204] ? shmem_destroy_inode+0x70/0x70 [ 1563.492212] alloc_inode+0x84/0x240 [ 1563.492468] udc-core: couldn't find an available UDC or it's busy [ 1563.493026] new_inode+0x23/0x250 [ 1563.493053] shmem_get_inode+0x15e/0xbc0 [ 1563.493081] __shmem_file_setup+0xb8/0x320 [ 1563.493100] ? _copy_from_user+0xfb/0x1b0 14:57:02 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 4) 14:57:02 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1563.493123] __do_sys_memfd_create+0x275/0x450 [ 1563.493148] ? memfd_file_seals_ptr+0x170/0x170 [ 1563.494584] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1563.495245] do_syscall_64+0x33/0x40 [ 1563.502526] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1563.503687] RIP: 0033:0x7f7d9522cb19 [ 1563.504876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1563.509231] RSP: 002b:00007f7d92780f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1563.510971] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f7d9522cb19 [ 1563.512606] RDX: 00007f7d92781000 RSI: 0000000000000000 RDI: 00007f7d952860fb [ 1563.514222] RBP: 0000000000000000 R08: 00007f7d92780ff8 R09: ffffffffffffffff [ 1563.515843] R10: 00007f7d92780ffc R11: 0000000000000246 R12: 0000000020000080 [ 1563.517470] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000380 [ 1563.546181] autofs4:pid:9958:autofs_fill_super: called with bogus options [ 1563.651047] loop5: detected capacity change from 0 to 262144 14:57:02 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r4}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1563.675716] loop2: detected capacity change from 0 to 262144 [ 1563.693102] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1563.695281] EXT4-fs (loop2): group descriptors corrupted! [ 1563.710652] FAULT_INJECTION: forcing a failure. [ 1563.710652] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.713166] CPU: 1 PID: 9972 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1563.714920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1563.717065] Call Trace: [ 1563.717769] dump_stack+0x107/0x167 [ 1563.718690] should_fail.cold+0x5/0xa [ 1563.719641] ? shmem_alloc_inode+0x18/0x40 [ 1563.720747] should_failslab+0x5/0x20 [ 1563.721756] kmem_cache_alloc+0x5b/0x310 [ 1563.722618] ? shmem_destroy_inode+0x70/0x70 [ 1563.723664] shmem_alloc_inode+0x18/0x40 [ 1563.724687] ? shmem_destroy_inode+0x70/0x70 [ 1563.725846] alloc_inode+0x63/0x240 [ 1563.726756] new_inode+0x23/0x250 [ 1563.727620] shmem_get_inode+0x15e/0xbc0 [ 1563.728677] __shmem_file_setup+0xb8/0x320 [ 1563.729742] ? _copy_from_user+0xfb/0x1b0 [ 1563.730769] __do_sys_memfd_create+0x275/0x450 [ 1563.731992] ? memfd_file_seals_ptr+0x170/0x170 [ 1563.733144] do_syscall_64+0x33/0x40 [ 1563.734063] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1563.735369] RIP: 0033:0x7f5114850b19 [ 1563.736341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1563.741035] RSP: 002b:00007f5111dc5f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1563.742951] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f5114850b19 [ 1563.744602] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f51148aa0fb [ 1563.746093] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1563.747811] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1563.749665] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 [ 1563.767490] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1563.784413] EXT4-fs (loop5): get root inode failed [ 1563.786014] EXT4-fs (loop5): mount failed 14:57:03 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}]}) (fail_nth: 7) 14:57:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1563.878839] udc-core: couldn't find an available UDC or it's busy [ 1563.880491] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 14:57:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 42) [ 1563.923083] FAULT_INJECTION: forcing a failure. [ 1563.923083] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.925523] CPU: 1 PID: 9980 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1563.926875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1563.928511] Call Trace: [ 1563.929046] dump_stack+0x107/0x167 [ 1563.929766] should_fail.cold+0x5/0xa [ 1563.930516] ? create_object.isra.0+0x3a/0xa20 [ 1563.931415] should_failslab+0x5/0x20 [ 1563.932173] kmem_cache_alloc+0x5b/0x310 [ 1563.932979] create_object.isra.0+0x3a/0xa20 [ 1563.933842] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1563.934833] kmem_cache_alloc+0x159/0x310 [ 1563.935670] security_inode_alloc+0x34/0x160 [ 1563.936524] inode_init_always+0xa4e/0xd10 [ 1563.937330] ? shmem_destroy_inode+0x70/0x70 [ 1563.938169] alloc_inode+0x84/0x240 [ 1563.938865] new_inode+0x23/0x250 [ 1563.939545] shmem_get_inode+0x15e/0xbc0 [ 1563.940338] __shmem_file_setup+0xb8/0x320 [ 1563.941162] ? _copy_from_user+0xfb/0x1b0 [ 1563.941960] __do_sys_memfd_create+0x275/0x450 [ 1563.942863] ? memfd_file_seals_ptr+0x170/0x170 [ 1563.943814] do_syscall_64+0x33/0x40 [ 1563.944563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1563.945584] RIP: 0033:0x7f7d9522cb19 [ 1563.946320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1563.949966] RSP: 002b:00007f7d927a1f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1563.951449] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f7d9522cb19 [ 1563.952864] RDX: 00007f7d927a2000 RSI: 0000000000000000 RDI: 00007f7d952860fb [ 1563.954247] RBP: 0000000000000000 R08: 00007f7d927a1ff8 R09: ffffffffffffffff [ 1563.955635] R10: 00007f7d927a1ffc R11: 0000000000000246 R12: 0000000020000080 [ 1563.957021] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000380 14:57:03 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r4}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:57:03 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001500)='/proc/locks\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001780)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf25050000000c00040006000000000000000c00040001000000010000000c0005000b000000000000000c00060001000000000000005400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="3b0d350d0aa008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xfffffffffffeffff, 0x5, &(0x7f0000001580)=[{&(0x7f0000000200)="ea15efedfc8412ab919f5bc194290443254f61689596e910a460abfeb191f0628139e67dce769fae94ff43a36a1d7075e8eac23196323aef8719a28b7354a20176ed0163cd203023c01f3bd86b6814ba763be06a665161ca24d320a12a9643ddcf495efa4a35d7dc0f895bbb49c30cf2233f9021d8950204e6e7db6c7dbc3d276fc3cacfd3669783c05b16a7c932c59c122c971df9549ab159645869b6", 0x9d, 0xb800000000000000}, {&(0x7f00000002c0)="a0376b69b0deb0bb15be4a4edd991732232c8504306501b690ff9701ec6d6f1467baa20d89b2fe5d83551522e2e68e2777a6209f123f8c7dab724f542d0cb6a394cab5cb82e7ceed8e4e410d815bd37c1655b6fd6d426f4945cbb3db4b4b249cf318bebb6655fddb10ece74cea8d98a8d2ebbbefe197de3617ddc5477dc8189cb992e167d7e7b2535954079ca6e69adc064e4cab854aa05e0941610a44eedda027ac8a052c3021a5713bc35097f7691433dee5211a17b20627918544841f73c1c9ba5d6dc1b2c795adae06aa7b6f0fbbf6fba846dbd7a1de7b3a7cbf5265", 0xde, 0x5}, {&(0x7f00000003c0)="ba53ac2daa3945c6b14a8a0a5a2605222a651f669e046f9109faa8152ded93ce40a100fd9483ce3f6ad0264878bd78d5dcf7c51cbbd14429c27a210e337428d2eaaa606d3fec4b6c8c5357cd8ff6e3fe8b679f6d6d499cca6a81520e76bb2fd5483fe6073e20e5b2ea301238608148eeca0a55c538b2632992ca31a5798349595e3120d4928c653700250ef93e4e52a58255ea364522c93273fdb551fd21a3303943680e0bf92ad4c86b63d40f2545c2c6b9050795b27ae5d70a05029749bf2e7fcad45442366b477425bb1cd6894af78ccd0bbb6028c0d4aaa3fab48e9f794a1f5bd85588fa1bda6d2f182174b80efeb21548cf942bd5201a1ea3bb399e12634b4c8ac93e6c13f18d5569fb4a90ac3150bcc9992e0e0665f6d40baa4632916e37e5dc5b46096ac1f3d41f7b36ce172a121d71495b8fcd041747e0afa433063be1cf1a05acdcaad92cc76008e99ff1e50f121a23380ec0b2041014b2e337bf16c32779cb058a42f0641bdbb767df720751ae054996201b50f6c8d14aa4ca32279f861f13108790fd41c5ee5e2b7db4ae5a15c1206b9478d3a7148dc99c4bd705a3e0d93f4b6805afc19a745b719d33e2bdb6efdb5d5f27368a6bff2e8adba82d90b4485448a334d6b854215ab994b7029dc810a0081d81b76b1118d3db91ef9ff568ddf7a3ad124e6c5375e66f7d8011295572b61ad078e3f209e8aa03dc8ff6b1056f9dd630d2bbbbf624f207e5245d04aa56cb2b48b101cf2d7c15854fbcdc53f62d055d7ea5fece0b07ea8f684da9203e0d6ee08a8d8a34b49dd9d9a390c9f1a7ca1f50050a3d13d23edb57ea0fddddc04a55816c2f0fbb0e6f6542c74dac39bc3fc55c7dd471fc8e1b6ed9e959ea7ce38d18cf741b4ceb0c3108a4faaeb2a851ac99cc655f86201d1149081c9f0f1f64a2dae554b1537863d321d254509e59bb82000cb7010526fee11cc07f4a626c424d4789e8326f3113a9ea17a1727b21a3bd2dfc431111679da360afd3c97337e6798106accdc6a0eaf99ade02ee1533be9da32c6d5482dc7a0a57222d3671f5df9e231a6cdf864b21a4730712aeb95592647eaf45a4404e56def8d0499f56b0b70d054f5016aac5c0f9bc3bc713a327d9ff9801969025278a4a529ed04748aa5eb18e2d1e5250a1c9bf968909b36c05f8939569fb65fbb94dd51291e8a142df3a775f4b2526245cb78d777a694e5b2a678a88c2945dbc652409b9f5eff99e6902566dd363e2cb45083861a06a5790d0593ed4213a360e200a8867d7bb24c0d01a9b07299a6976cd00ccb57d0e5881de396a4fb78f2edd1ad96cbdc1c43960b173debb0fcc6905153ab0c45380960d8ae60e52d1cbd8968b0cca11ca8aa8c32a26ec544d189308d938e8482be2fa69f956f98a0896a90e8c8f48241792b1492bf5de0937a541fb966943a6a2f933da51cf1eea8b201ca021c07d15103bf56b70446dc2ddd67c2fab4e8468d37876300af80b55a88326cefee71bb350f2c9b16c387907b6834dfb36405e25e48d6f3cb18856553c406cbfa317af2f140a1adcc277aeae66e1df5705a2f7d9ee21df53484ed74d8f1ee1e11b81a9945d9fc652058032b5d173962deae23a8f09b2cc4c959608b3ec7962b1d74df2c7caee1477ceddc71f5eaec46ac2bee3620a678516689a39eb0d33d87d490bdc239f8dec3542288febbbe79feaec8a3eae850f70721cf0393b38e43e669330a889adad6b12f118fedec7ed18c3a3bd156f0b793c5115d6c0b9b9ad9eb425eb82f064cbf119ce9b30dedfbae922715fb01a7867310b04aef6ebc138aa68fa77860426ed5c9f1d9f16a7d2bd8f4db4caaa94b783b7160e2e726a05efe8e3cd4faf333b9debad1684791202754ac7b8f881f9b63e08fd6f09dba6750b052a75409780531aff641c4fab71c11bc6b7e1478ab742c2c4706e26f55ef30b212eade39ac7228d778f0a5653279da5c8a7a1153de45c7142ee2b0518344b6198beb73435d85f50fb77ab472535d13fc9047a97e37cd07d5a196f6273301bc3a97eb798d0754bacaa6450dff9851133583434d783578deee8179cccb1518019a3040ef643349d7fadd975725d0c9f1baf836ecc9249f4043e3b6b2fec2019fdfc38ce2c24ec2a303a0d6cb0dee95423246cb5f2a000ffbd4ccf5338ebe86e0e9704fbde1d71deb2c7e27ee26905b72a3dc0a2aa3cda84bcfae7862bf1e773ab541b5a7fdb751f6047e23dfb82bf8299f8c21bb698da163606e5040f0e82a8ac84d656001d988c678733f34d13134cb6069c93b9e73a7a86f550343b3a3691debce8785f5d9bf2372d34b5dce8d3356f3bcd7c324b6e4099be828816acfbabc474c78ebdc88ed72522af26a50ccfb7995dcffe16591965cf8dacff019c61763eff6d1b2ac6f886eb5a1d911e11d912fa1baf21af72bf972a00f3b3282d89a3f21474b6dd6ce1f65340ee97cf8182c516468de748854ce66acb43707d264a8501cc87d161945c37087c0d19334f4bcede68bff6b28f2f54b046a2a7a59ceb1d2ca06e779215408decf28ef8e323a6cf0df8838e398ca2814f25e4d2b71ea2e9f591d1f04b34ea87efcfecff850ab9d48c6ff8d86feee7ee5cb25cb9feb53c6d214d1ead9ea6fda50750d48034eeee3d92cef636071b9600bd728be2e938d44bf61e01141abe0d27d62612f04ae30df4202c71b222f4141eaa4e3c632746eec31d53081d2c65870b2c47d4060228ae71f68c2dbf0fb77ecddf2391b9024c81dabdc4d2109697ac346434aafcab725e7d3df6e0b5a6e108ba4a5cc844877d05e43428c992bc77944c0fba0b49064fcb2f6c99b689f3c2c85239426cf3b003cde45ed5fec21c21e59de2e1778a95b3f8894f05471eb4dd65da9221ec708c646a0e785c2057c728dadcfe149782a12bae1e7660d445fbe9a32f75038f5ba934a4bf72120779d26e2a212f299b5630c4bebd9979ff9d839529efc62b3b1beca523b6d1c53d24fd5c181728691e0d97e8095f918d03104e9ea6baf2d7a40d6b1d5cfcd497c9d45379f949c8a0f16e4beef0ff89b6c1ab50f442ca22bead3ee23157b9483c86f08e981374668c8b37e5e6c987bbdf6fbeb5067cbd12114be41585d15af5cce32edda843e6541316dfcc159838e159588cf7d1123329b568e537e2043c3a256e3f1241d43fe87f11a52c5ab2751f01a5fbde2ab82e0a914221f502fb90a4342873518199ee74e86911ff7fbb67412dd4141b3687b52b8fe17926f7293688bc2171e4ad635034afb20a8266766529277ecfc986bf04ddf1c7bfb02bcfa132ea17b2b1dce0f66f639a5fdc2cfaba0500f950ff1e5594ed7299187d7a49bf8a204a6132dfcd316bd3456e6b3774021f90bbf0b32db0c95ecb10c3a9820535ffff0595268f2b92ad81cf873112ec6af558250360f5fa486ead72a98deed8e6905ba70de03b7b32990ebd32489b06e3284014f6de75866f26c2458aed2154ead5da8d0d65b2ac830ee79280d203c26328eb03eb4973a90159e0f50018a1618f57e26d724a04f9e9593ca5b2c944d62568abd7903427607e8d24e238eb1b1ecfc8281fd1616636e475df98454aa374f11cd1f4372ad04e791106a16b5d8159782b143d6aacc86aebe9d58b8cec8474672c6971c753ed68aeacfdf33a87874baa8ef3ba3a475ed3cfbee83bce0f7b5b3c3be9730a74792f1a39db574b62aa10589004c21571e5bc377564fc2fcb750499c5d13eff3f97ba5f535744d1d3d645ed5f3fe883188e09aeddf54eb2ef57a17c96d344007fc9bea1963cdc79bcd5d15f7cfcd2f7728b1729710903a36d4bab716090f82aa2092a425ed52aaad86c52d7a866651252f78dafd844cfdc72f681e677d9ebdbac0c6d9e5ab2f4fe9d2f0097faf2bf566442bc72a14a4f41ef08a0ea46188ebe668dcf1ca7067a87e420fd1f61ef9b6628479cc60b195cc71eb4a3d9af38e7d5d8dd2348f6c1c3adca1bfe69be00ffd1e06eb6a38c28e56e81f6b93bd283a0353cbefb94a152bbc26ff0c1ae8c9aa98408272d502dbda220943afd6bac33ee9865ff8dde60010930d00a0bff70635cc58c0d67a403a2ed56ca1d1151856418de4cf89be7c656dd2326f5ac8c55e74323aca2e8ef0f0662c638493b6f15dd0fb109d792e7a0a5b4fedebef8d466ad85f6dd60c02d05319bb9a5b690d75f754cd216c71f049b0b22811db70b3691aaf12b0a6f3b9616a34496e14c6f71686456193f03c0eb7ae908795f782b80e67c6e126ad79e1a202a3925108999f5ef20f6204c5f8b2b1f14f4dc2fc7ef3045ed266ff9e2c0692b6439c323eb03256075e67adbafb6c38950a449e9739e79b43c464d8884613230894196b18c7e2755c1eb4945896f0f848129fe0fe285101d3ff5eb3a36a755d14705840645152a59642bddab69a6bb750ff58e3cb209c694cb054fff9be402bdf94654d444fb28d0649a8795db8678aaa40e4ad824963d66c3cfc5a7b7e485bd52e3caa89b5cd8f5c7ae9611145194ed0240ea4e84f3c962cf175610dca651cfdb74c47939fa34bddab8f96f0c7bfa095c7cfe63b60e20db228bbdb7d2ff9569983aeef72150d108d0aa30c2c5cf8fed5a75176c273aceb050e76ea749b29ee0c89bf8d101f4c2542b7ceedb28783557fda4f5fbe2e815f2c21868ab6389fd3423b76228db394fc13e18c87824241f3e560e113075c3ac8cc6873972685e8f08592d16406a5916529f17f259f523bbe42487dec6b12379191517508b01fb115ad3c31806b0cdcb29acfe5b7809524e5c4bcfeaa404657619f5ca5424482fb1d5d1d71443df8cb9fe7ba0dd2c22e4dbc381a6116fd2aeb928d0357bf64c7f13a190139040916068c106f90b83a24c85d7781452ba6949e9739e4bb7be3e657e528f23d5244bef9ffd51687d569dba0753d90c45ce84386b971a9f4507d6b07e9cf6b3471c75089484f401d7b653bac6ec47bc61e3a3aea6b84cf457d3aab4de955021ae60a7974fabc001f1463a30524495c779b7cad55a6fd9215a4f9c567d66f3b64aac8bb9488b3e942e2fcb67250856a4d4193311cbfab2692238b4ba3ac282ecf05e9fe72b11e2dfc73c3254d97811d28d8f6beb3f92c1b182c9f80f44e61d4a98675fa713990f3663af172c1a254eb0f2e0f6e112b94f1bf73d39727eb3950ef2d5a82ac5ecff70a604db0bb902791bc188e25941f544c928628d5414640517589eeef9037a14197b04655b0495ca8e2372c6a27ea8b6f233412af81dcddcfc1b98cf93a34d9f7cf72065f9da8e481e5f882e12836b03a067183ba07801992de089caac08cf32a135218e4f5b23ab418b6bb2b36e5853b9a88f9ad87718cf1164fc407ba36d66e2056c243fa1e1d63b6f325471f91ec31612ceed8bff2eb85940b2b2fe933528d39066ca965fdae2f11a00baac956a16fc4c012e61d0bd43449bf66a041a9ca5e32ce80743a895389a5818986d977bf8518710eed135a21409a38e832e3f6a0fb08daa422d67418b13467a507599d5b277e1c63814613ddcb0d9cd1946a251d118941b6258b0d4c2a73f689955b68b7438e20e636a141230905b2ce1f8abe10d37221d86493939ece3dd0ac16713199264a47c0077b6d858e395d33f91cc2aa6126b3d947955689cc6a020fd46ad9918f3a13f5017cfac655d613f15e811ff0be1cd8afc1664f9a8ab9db33883d5d805ad9781a0a1f1ec363b821dcb1b7475515f3d4adb20afef2d22cbce4629ef42b81da144d1a3923104ab60bb21f36f4b87406db089f5ded93bfd", 0x1000, 0x9}, {&(0x7f00000013c0)="6ddb67174833568d290e90094f30896beeb39fbcf44d1779a4283ea411bd6690fcb7d69ce6d8f8b6e6faffafe719577dea98c1404115cb698dc06d64de9e198b69ff2901c0945af7d5c0d1349801d869e0a7ad2e5e1cb8e2b1ca0cdfe54154bbf45148d59c1b33c0b205de4fc466996b3b7515633ce225e4bd1fc717208a6d938f011b2dca305784854b3db1d501224ff614bca91b9c05884ac38cb4524a1b459e50a4af122cea778f9c494ac232ad09bef87c4b091948c726e5439856de55c934445bdf117b691100498bac3cfee9f180b2fddda4", 0xd5, 0x3}, {&(0x7f00000014c0)="49c32b6785a16743f8ee8ceb49ba9a62ea778ebfb03d063eac31da4f64338fcea55e73ebee59a85101f678071c87f272f3", 0x31}], 0x10000, &(0x7f0000001600)={[{@fat=@dos1xfloppy}], [{@smackfstransmute={'smackfstransmute', 0x3d, ',]\\\xe6'}}, {@uid_lt={'uid<', 0xee01}}, {@subj_role={'subj_role', 0x3d, '/dev/sg#\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/sg#\x00'}}]}) fsmount(0xffffffffffffffff, 0x0, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/asound/seq/clients\x00', 0x0, 0x0) [ 1564.023213] loop2: detected capacity change from 0 to 262144 [ 1564.030104] FAULT_INJECTION: forcing a failure. [ 1564.030104] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.032238] CPU: 1 PID: 9986 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1564.033524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1564.035083] Call Trace: [ 1564.035584] dump_stack+0x107/0x167 [ 1564.036271] should_fail.cold+0x5/0xa [ 1564.036982] ? __kernfs_new_node+0xd4/0x860 [ 1564.037781] should_failslab+0x5/0x20 [ 1564.038488] kmem_cache_alloc+0x5b/0x310 [ 1564.039257] __kernfs_new_node+0xd4/0x860 [ 1564.040031] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1564.040910] ? kernfs_add_one+0x36e/0x4d0 [ 1564.041687] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1564.042587] ? wait_for_completion_io+0x270/0x270 [ 1564.043486] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1564.044461] kernfs_new_node+0x18d/0x250 [ 1564.045211] __kernfs_create_file+0x51/0x350 [ 1564.046014] sysfs_add_file_mode_ns+0x221/0x560 [ 1564.046865] internal_create_group+0x324/0xb30 [ 1564.047700] ? sysfs_remove_group+0x170/0x170 [ 1564.048541] ? lockdep_init_map_type+0x2c7/0x780 [ 1564.049428] ? blk_queue_flag_set+0x22/0x30 [ 1564.050221] ? __loop_update_dio+0x2d2/0x690 [ 1564.051045] loop_configure+0x953/0x1410 [ 1564.051814] lo_ioctl+0xa57/0x16b0 [ 1564.052504] ? avc_has_extended_perms+0x7f1/0xf40 [ 1564.053399] ? loop_set_status_old+0x250/0x250 [ 1564.054262] ? avc_ss_reset+0x180/0x180 [ 1564.054998] ? find_held_lock+0x2c/0x110 [ 1564.055771] ? __lock_acquire+0xbb1/0x5b00 [ 1564.056617] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1564.057588] ? generic_block_fiemap+0x60/0x60 [ 1564.058411] ? lock_downgrade+0x6d0/0x6d0 [ 1564.059186] ? build_open_flags+0x6f0/0x6f0 [ 1564.059992] ? loop_set_status_old+0x250/0x250 [ 1564.060833] blkdev_ioctl+0x291/0x710 [ 1564.061542] ? blkdev_common_ioctl+0x1930/0x1930 [ 1564.062416] ? selinux_file_ioctl+0xb6/0x270 [ 1564.063235] block_ioctl+0xf9/0x140 [ 1564.063907] ? blkdev_read_iter+0x1c0/0x1c0 [ 1564.064719] __x64_sys_ioctl+0x19a/0x210 [ 1564.065473] do_syscall_64+0x33/0x40 [ 1564.066163] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1564.067103] RIP: 0033:0x7f28825338d7 [ 1564.067800] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1564.071204] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1564.072604] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1564.073912] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1564.075218] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1564.076528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1564.077833] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1564.082466] loop5: detected capacity change from 0 to 262144 [ 1564.089960] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1564.091644] EXT4-fs (loop2): group descriptors corrupted! [ 1564.149620] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1564.155320] EXT4-fs (loop5): get root inode failed [ 1564.156260] EXT4-fs (loop5): mount failed [ 1564.200502] udc-core: couldn't find an available UDC or it's busy [ 1564.201703] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1578.821292] FAULT_INJECTION: forcing a failure. [ 1578.821292] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.822714] CPU: 0 PID: 10005 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1578.823556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1578.824572] Call Trace: [ 1578.824899] dump_stack+0x107/0x167 [ 1578.825344] should_fail.cold+0x5/0xa [ 1578.825810] ? create_object.isra.0+0x3a/0xa20 [ 1578.826366] should_failslab+0x5/0x20 [ 1578.826834] kmem_cache_alloc+0x5b/0x310 [ 1578.827331] create_object.isra.0+0x3a/0xa20 [ 1578.827863] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1578.828489] kmem_cache_alloc+0x159/0x310 [ 1578.828996] ? shmem_destroy_inode+0x70/0x70 [ 1578.829531] shmem_alloc_inode+0x18/0x40 [ 1578.830027] ? shmem_destroy_inode+0x70/0x70 [ 1578.830557] alloc_inode+0x63/0x240 [ 1578.831001] new_inode+0x23/0x250 [ 1578.831424] shmem_get_inode+0x15e/0xbc0 [ 1578.831920] __shmem_file_setup+0xb8/0x320 [ 1578.832441] ? _copy_from_user+0xfb/0x1b0 [ 1578.832946] __do_sys_memfd_create+0x275/0x450 [ 1578.833500] ? memfd_file_seals_ptr+0x170/0x170 [ 1578.834076] do_syscall_64+0x33/0x40 [ 1578.834527] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1578.835150] RIP: 0033:0x7f5114850b19 [ 1578.835599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1578.837847] RSP: 002b:00007f5111dc5f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1578.838773] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f5114850b19 [ 1578.839644] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f51148aa0fb [ 1578.840517] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1578.841380] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1578.842246] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000080 14:57:18 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) 14:57:18 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) keyctl$get_security(0x11, r0, 0x0, 0x0) getuid() keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f00000000c0)='%\x00', 0xfffffffffffffffa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "9116d307cc958ca62044a5ab78e3d37b9acf8478f8eb4d2a354758f0465416444b30cb200b9cba322c9a84347f45930ba59b31bb01f9ff19070d95b64000e9dc"}, 0x48, 0xffffffffffffffff) request_key(&(0x7f0000000300)='.request_key_auth\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='keyring\x00', r3) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000002c0)={0x5, 0x10001, 0x3, 0x1, 0xff, 0xdb7a}) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 14:57:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5c59d28c053698cbb7d779492adb112b0f6fa467c69f115b1", 0x81, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 43) 14:57:18 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x7a, r4}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x104f}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "5da54aeb96d9d5532b9055ce39b9493b31c41acff9964ab0911da3561f737f87f82793f643046b6bd044175d7fd1324143624186053a1aeb878b36daef4bbeb203cc0b6360ad254be3794f84271ef5156a6428b695955c5783a2b80b986d022824a9c95b30397f0ae4b1fadd4a3d435298dc13ae1df775c3881f5802d464d0"}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:57:18 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) (fail_nth: 5) 14:57:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000000700)=""/4096, 0x1000) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup2(r2, r1) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @mcast2, 0x3f}, 0x1c) r4 = accept4$packet(r3, 0x0, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000200)={0x3, 0x1}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 14:57:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) 14:57:18 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}]}) (fail_nth: 8) [ 1578.871232] FAULT_INJECTION: forcing a failure. [ 1578.871232] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.873642] CPU: 1 PID: 10010 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1578.875098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1578.876842] Call Trace: [ 1578.877402] dump_stack+0x107/0x167 [ 1578.878173] should_fail.cold+0x5/0xa [ 1578.878982] ? create_object.isra.0+0x3a/0xa20 [ 1578.879945] should_failslab+0x5/0x20 [ 1578.880752] kmem_cache_alloc+0x5b/0x310 [ 1578.881613] create_object.isra.0+0x3a/0xa20 [ 1578.882532] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1578.883603] kmem_cache_alloc+0x159/0x310 [ 1578.884494] __kernfs_new_node+0xd4/0x860 [ 1578.885371] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1578.886363] ? kernfs_add_one+0x36e/0x4d0 [ 1578.887239] ? __mutex_unlock_slowpath+0xe1/0x600 14:57:18 executing program 4: r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) pkey_mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000925000/0x3000)=nil, 0x3000, 0x2000004, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1030, r0, 0x6132d000) [ 1578.888272] ? wait_for_completion_io+0x270/0x270 [ 1578.889437] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1578.890547] kernfs_new_node+0x18d/0x250 [ 1578.891407] __kernfs_create_file+0x51/0x350 [ 1578.892348] sysfs_add_file_mode_ns+0x221/0x560 14:57:18 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x3, 0x2}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x0, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x80, 0xff, 0x9, 0x1f, 0x0, 0x81, 0xc90, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0x101, 0x8, 0xc3, 0xffffff21, 0x5, 0x0, 0x81, 0x0, 0x1ff}, r0, 0x3, r1, 0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000240), 0x100000001) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffffffe8}, 0x1, 0x0, 0x0, 0x28d1}, 0x48015) io_setup(0x2d47, &(0x7f0000000000)) [ 1578.893342] internal_create_group+0x324/0xb30 [ 1578.894448] ? sysfs_remove_group+0x170/0x170 [ 1578.895404] ? lockdep_init_map_type+0x2c7/0x780 [ 1578.896428] ? blk_queue_flag_set+0x22/0x30 [ 1578.897336] ? __loop_update_dio+0x2d2/0x690 [ 1578.898290] loop_configure+0x953/0x1410 [ 1578.899170] lo_ioctl+0xa57/0x16b0 [ 1578.899927] ? avc_has_extended_perms+0x7f1/0xf40 [ 1578.900968] ? loop_set_status_old+0x250/0x250 [ 1578.901942] ? avc_ss_reset+0x180/0x180 [ 1578.902790] ? find_held_lock+0x2c/0x110 [ 1578.903675] ? __lock_acquire+0xbb1/0x5b00 [ 1578.904644] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1578.905751] ? generic_block_fiemap+0x60/0x60 [ 1578.906700] ? lock_downgrade+0x6d0/0x6d0 [ 1578.907578] ? build_open_flags+0x6f0/0x6f0 [ 1578.908506] ? loop_set_status_old+0x250/0x250 [ 1578.909469] blkdev_ioctl+0x291/0x710 [ 1578.910274] ? blkdev_common_ioctl+0x1930/0x1930 [ 1578.911278] ? selinux_file_ioctl+0xb6/0x270 [ 1578.912229] block_ioctl+0xf9/0x140 [ 1578.912997] ? blkdev_read_iter+0x1c0/0x1c0 [ 1578.913912] __x64_sys_ioctl+0x19a/0x210 [ 1578.914774] do_syscall_64+0x33/0x40 [ 1578.915562] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1578.916656] RIP: 0033:0x7f28825338d7 [ 1578.917438] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1578.921336] RSP: 002b:00007f287faa8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1578.922937] RAX: ffffffffffffffda RBX: 00007f288257d970 RCX: 00007f28825338d7 [ 1578.924437] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1578.925926] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1578.927435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1578.928957] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 1578.932695] FAULT_INJECTION: forcing a failure. [ 1578.932695] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.934192] CPU: 0 PID: 10021 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1578.935050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1578.936046] Call Trace: [ 1578.936294] loop5: detected capacity change from 0 to 262144 [ 1578.936421] dump_stack+0x107/0x167 [ 1578.938073] should_fail.cold+0x5/0xa [ 1578.938546] ? __d_alloc+0x2a/0x990 [ 1578.938990] should_failslab+0x5/0x20 [ 1578.939470] kmem_cache_alloc+0x5b/0x310 [ 1578.939962] ? trace_hardirqs_on+0x5b/0x180 [ 1578.940507] __d_alloc+0x2a/0x990 [ 1578.940939] d_alloc_pseudo+0x19/0x70 [ 1578.941401] alloc_file_pseudo+0xce/0x250 [ 1578.941919] ? alloc_file+0x5a0/0x5a0 [ 1578.942391] ? shmem_get_inode+0x55c/0xbc0 [ 1578.942915] __shmem_file_setup+0x144/0x320 [ 1578.943456] ? _copy_from_user+0xfb/0x1b0 [ 1578.943961] __do_sys_memfd_create+0x275/0x450 [ 1578.944524] ? memfd_file_seals_ptr+0x170/0x170 [ 1578.945103] do_syscall_64+0x33/0x40 [ 1578.945564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1578.946184] RIP: 0033:0x7f7d9522cb19 [ 1578.946636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1578.948874] RSP: 002b:00007f7d927a1f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1578.949809] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f7d9522cb19 [ 1578.950682] RDX: 00007f7d927a2000 RSI: 0000000000000000 RDI: 00007f7d952860fb [ 1578.951547] RBP: 0000000000000000 R08: 00007f7d927a1ff8 R09: ffffffffffffffff [ 1578.952429] R10: 00007f7d927a1ffc R11: 0000000000000246 R12: 0000000020000080 [ 1578.953293] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000380 [ 1578.959785] loop2: detected capacity change from 0 to 262144 [ 1578.972775] udc-core: couldn't find an available UDC or it's busy [ 1578.973729] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1578.981292] loop7: detected capacity change from 0 to 262144 [ 1578.992085] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1578.994043] EXT4-fs (loop2): group descriptors corrupted! [ 1579.005486] ------------[ cut here ]------------ [ 1579.006395] WARNING: CPU: 0 PID: 10031 at include/linux/fs.h:525 hugetlb_split+0x320/0xc50 [ 1579.007497] Modules linked in: [ 1579.007924] CPU: 0 PID: 10031 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1579.008767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1579.009807] RIP: 0010:hugetlb_split+0x320/0xc50 [ 1579.010400] Code: 00 00 31 f6 48 81 c7 e0 00 00 00 e8 0a de 7c 02 31 ff 41 89 c6 89 c6 e8 be d8 d5 ff 45 85 f6 0f 85 5e fe ff ff e8 60 df d5 ff <0f> 0b e9 52 fe ff ff e8 54 df d5 ff 48 8d 43 50 48 89 c2 48 89 44 [ 1579.012662] RSP: 0018:ffff888049cafad8 EFLAGS: 00010216 [ 1579.013341] RAX: 00000000000000fa RBX: ffff88801d35bf00 RCX: ffffc90003c09000 [ 1579.014233] RDX: 0000000000040000 RSI: ffffffff816aeed0 RDI: 0000000000000005 [ 1579.015124] RBP: 0000000020800000 R08: 0000000000000000 R09: ffff8880397ce2bf [ 1579.016018] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff11009395f64 [ 1579.016914] R13: ffffffff8567a47c R14: 0000000000000000 R15: 0000000000000001 [ 1579.018554] FS: 00007f5c05566700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1579.021305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1579.023607] CR2: 0000001b2d221000 CR3: 0000000048fe2000 CR4: 0000000000350ef0 [ 1579.025915] DR0: 0000000000000000 DR1: 0000000100000000 DR2: 0000000100000000 [ 1579.027668] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000011d062a [ 1579.028554] Call Trace: [ 1579.028904] ? follow_hugetlb_page+0x10c0/0x10c0 [ 1579.029493] ? vm_area_alloc+0x110/0x110 [ 1579.030017] __vma_adjust+0xbe8/0x2510 [ 1579.030499] ? anon_vma_clone+0x3d0/0x590 [ 1579.031026] __split_vma+0x41a/0x4e0 [ 1579.031486] split_vma+0x99/0xe0 [ 1579.031929] mprotect_fixup+0x669/0x8c0 [ 1579.032436] ? change_protection+0x1ad0/0x1ad0 [ 1579.033019] ? down_write_killable_nested+0x180/0x180 [ 1579.033644] ? vmacache_find+0x55/0x2a0 [ 1579.034165] do_mprotect_pkey+0x518/0x940 [ 1579.034676] ? mprotect_fixup+0x8c0/0x8c0 [ 1579.035207] ? find_mergeable_anon_vma+0x250/0x250 [ 1579.035811] __x64_sys_pkey_mprotect+0x93/0x100 [ 1579.036410] do_syscall_64+0x33/0x40 [ 1579.036896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1579.037519] RIP: 0033:0x7f5c07ff0b19 [ 1579.037991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1579.040274] RSP: 002b:00007f5c05566188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1579.041220] RAX: ffffffffffffffda RBX: 00007f5c08103f60 RCX: 00007f5c07ff0b19 [ 1579.042116] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020800000 [ 1579.043008] RBP: 00007f5c0804af6d R08: 0000000000000000 R09: 0000000000000000 [ 1579.043892] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1579.044764] R13: 00007ffda19b88cf R14: 00007f5c05566300 R15: 0000000000022000 [ 1579.045676] irq event stamp: 709 [ 1579.046111] hardirqs last enabled at (719): [] console_unlock+0x92d/0xb40 [ 1579.047159] hardirqs last disabled at (728): [] console_unlock+0x839/0xb40 [ 1579.048220] softirqs last enabled at (296): [] asm_call_irq_on_stack+0x12/0x20 [ 1579.049327] softirqs last disabled at (245): [] asm_call_irq_on_stack+0x12/0x20 [ 1579.050424] ---[ end trace b2313359458708dd ]--- [ 1579.051056] ------------[ cut here ]------------ [ 1579.051637] WARNING: CPU: 0 PID: 10031 at include/linux/fs.h:525 hugetlb_split+0x320/0xc50 [ 1579.052675] Modules linked in: [ 1579.053099] CPU: 0 PID: 10031 Comm: syz-executor.4 Tainted: G W 5.10.240 #1 [ 1579.054124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1579.055167] RIP: 0010:hugetlb_split+0x320/0xc50 [ 1579.055748] Code: 00 00 31 f6 48 81 c7 e0 00 00 00 e8 0a de 7c 02 31 ff 41 89 c6 89 c6 e8 be d8 d5 ff 45 85 f6 0f 85 5e fe ff ff e8 60 df d5 ff <0f> 0b e9 52 fe ff ff e8 54 df d5 ff 48 8d 43 50 48 89 c2 48 89 44 [ 1579.058007] RSP: 0018:ffff888049cafad8 EFLAGS: 00010216 [ 1579.058655] RAX: 0000000000019c8f RBX: ffff88801d35bf00 RCX: ffffc90003c09000 [ 1579.059545] RDX: 0000000000040000 RSI: ffffffff816aeed0 RDI: 0000000000000005 [ 1579.060443] RBP: 0000000020c00000 R08: 0000000000000000 R09: ffff8880397ce2bf [ 1579.061337] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff11009395f64 [ 1579.062229] R13: ffffffff8567a47c R14: 0000000000000000 R15: 0000000000000001 [ 1579.063126] FS: 00007f5c05566700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1579.064146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1579.064852] CR2: 0000001b2d221000 CR3: 0000000048fe2000 CR4: 0000000000350ef0 [ 1579.065751] DR0: 0000000000000000 DR1: 0000000100000000 DR2: 0000000100000000 [ 1579.066643] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000011d062a [ 1579.067537] Call Trace: [ 1579.067890] ? follow_hugetlb_page+0x10c0/0x10c0 [ 1579.068485] ? vm_area_alloc+0x110/0x110 [ 1579.069008] __vma_adjust+0xbf3/0x2510 [ 1579.069492] ? anon_vma_clone+0x3d0/0x590 [ 1579.070039] __split_vma+0x41a/0x4e0 [ 1579.070502] split_vma+0x99/0xe0 [ 1579.070944] mprotect_fixup+0x669/0x8c0 [ 1579.071433] ? change_protection+0x1ad0/0x1ad0 [ 1579.072016] ? down_write_killable_nested+0x180/0x180 [ 1579.072650] ? vmacache_find+0x55/0x2a0 [ 1579.073166] do_mprotect_pkey+0x518/0x940 [ 1579.073676] ? mprotect_fixup+0x8c0/0x8c0 [ 1579.074208] ? find_mergeable_anon_vma+0x250/0x250 [ 1579.074812] __x64_sys_pkey_mprotect+0x93/0x100 [ 1579.075402] do_syscall_64+0x33/0x40 [ 1579.075862] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1579.076519] RIP: 0033:0x7f5c07ff0b19 [ 1579.076998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1579.079265] RSP: 002b:00007f5c05566188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1579.080225] RAX: ffffffffffffffda RBX: 00007f5c08103f60 RCX: 00007f5c07ff0b19 [ 1579.081121] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020800000 [ 1579.082016] RBP: 00007f5c0804af6d R08: 0000000000000000 R09: 0000000000000000 [ 1579.082914] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1579.083784] R13: 00007ffda19b88cf R14: 00007f5c05566300 R15: 0000000000022000 [ 1579.084698] irq event stamp: 1195 [ 1579.085152] hardirqs last enabled at (1205): [] console_unlock+0x92d/0xb40 [ 1579.086216] hardirqs last disabled at (1214): [] console_unlock+0x839/0xb40 [ 1579.087283] softirqs last enabled at (296): [] asm_call_irq_on_stack+0x12/0x20 [ 1579.088394] softirqs last disabled at (245): [] asm_call_irq_on_stack+0x12/0x20 [ 1579.089493] ---[ end trace b2313359458708de ]--- 14:57:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="000000c97b30ea65d3", 0x9, 0x640}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000000280)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000405fd2917d07e768ce0b55a805884e02bf627e676c8335d77de16b14dab57b4c5294b330d9ddd57bec1aa28b44276dc0c4d26faeccc4fb18c59880a7d478db195ad25d049538fdcca06c9d0e5", 0x69, 0x2100}], 0x0, &(0x7f0000000080)) [ 1579.102268] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: bad extra_isize 177 (inode size 256) [ 1579.103164] EXT4-fs error (device loop7): ext4_fill_super:4967: inode #2: comm syz-executor.7: iget: bad extended attribute block 229 [ 1579.108453] EXT4-fs (loop5): get root inode failed [ 1579.109590] EXT4-fs (loop5): mount failed [ 1579.127045] EXT4-fs (loop7): get root inode failed [ 1579.127680] EXT4-fs (loop7): mount failed 14:57:18 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x6084, &(0x7f0000000380)={[{'\\'}]}) (fail_nth: 9) [ 1579.220326] FAULT_INJECTION: forcing a failure. [ 1579.220326] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.222777] CPU: 1 PID: 10038 Comm: syz-executor.1 Tainted: G W 5.10.240 #1 [ 1579.224528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1579.226272] Call Trace: [ 1579.226833] dump_stack+0x107/0x167 [ 1579.227604] should_fail.cold+0x5/0xa [ 1579.228420] ? create_object.isra.0+0x3a/0xa20 [ 1579.229385] should_failslab+0x5/0x20 [ 1579.230189] kmem_cache_alloc+0x5b/0x310 [ 1579.231054] create_object.isra.0+0x3a/0xa20 [ 1579.231978] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1579.233065] kmem_cache_alloc+0x159/0x310 [ 1579.233948] __d_alloc+0x2a/0x990 [ 1579.234688] d_alloc_pseudo+0x19/0x70 [ 1579.235491] alloc_file_pseudo+0xce/0x250 [ 1579.236371] ? alloc_file+0x5a0/0x5a0 [ 1579.237181] ? shmem_get_inode+0x55c/0xbc0 [ 1579.238087] __shmem_file_setup+0x144/0x320 [ 1579.238998] ? _copy_from_user+0xfb/0x1b0 [ 1579.239884] __do_sys_memfd_create+0x275/0x450 [ 1579.240863] ? memfd_file_seals_ptr+0x170/0x170 [ 1579.241859] do_syscall_64+0x33/0x40 [ 1579.242645] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1579.243727] RIP: 0033:0x7f7d9522cb19 [ 1579.244519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1579.248413] RSP: 002b:00007f7d927a1f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1579.250013] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f7d9522cb19 [ 1579.251514] RDX: 00007f7d927a2000 RSI: 0000000000000000 RDI: 00007f7d952860fb [ 1579.253023] RBP: 0000000000000000 R08: 00007f7d927a1ff8 R09: ffffffffffffffff [ 1579.254526] R10: 00007f7d927a1ffc R11: 0000000000000246 R12: 0000000020000080 [ 1579.256025] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000380 VM DIAGNOSIS: 14:57:18 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822e257c RDI=ffffffff879f5140 RBP=ffffffff879f5100 RSP=ffff888049caf490 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3ea75 R14=fffffbfff0f3ea2a R15=dffffc0000000000 RIP=ffffffff822e25d0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5c05566700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d221000 CR3=0000000048fe2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000100000000 DR2=0000000100000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=00000000011d062a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f5c080d77c000007f5c080d77c8 XMM02=00007f5c080d77e000007f5c080d77c0 XMM03=00007f5c080d77c800007f5c080d77c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000004049b36df64 RBX=0000000000000001 RCX=00000000000006e0 RDX=0000000000000404 RSI=ffff88806cf27980 RDI=0000000000003e4f RBP=ffff88806cf27980 RSP=ffff88804a1b78e0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000003e4f R13=0000000000000000 R14=0000016f9db6cac0 R15=0000000000000000 RIP=ffffffff810e1141 RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558fea1400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd3e645d18 CR3=000000004a1bc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff000000000000ff0000000000ff00 XMM01=630033656e6f6c6300656e6f6c630065 XMM02=00010000000000000000000000000000 XMM03=7d1f3397f0f459402e2be3541793daa6 XMM04=d064d402581f88c375f71dae13dc9852 XMM05=433d4addfab1e40a7f39305bc9a92428 XMM06=026d980bb8a283575c9595b628646a15 XMM07=f51e27844f79e34b25ad60630bcc03b2 XMM08=8954df5b8dbad234a239c1bdc294615d XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000