0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:17:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040), 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) [ 1028.465453] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:17:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f0000", 0x16, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:17:08 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0xae5}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:17:08 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf265", 0xf, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:17:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) [ 1028.667334] EXT4-fs error (device loop0): ext4_fill_super:4962: inode #2: comm syz-executor.0: iget: special inode unallocated [ 1028.669977] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1028.672813] EXT4-fs (loop0): get root inode failed [ 1028.673983] EXT4-fs (loop0): mount failed [ 1028.676183] EXT4-fs (loop6): get root inode failed [ 1028.677426] EXT4-fs (loop6): mount failed [ 1028.719643] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:17:22 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x46}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:17:22 executing program 2: mknod$loop(&(0x7f0000001d40)='./file0\x00', 0x6000, 0x0) acct(&(0x7f0000000080)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x40, &(0x7f0000000180)={[], [{@dont_measure}, {@appraise_type}, {@measure}]}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0x20, 0x40, 0x5, 0x0, 0x20, 0x12, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe0b9, 0x2, @perf_config_ext={0x0, 0x6}, 0x40000, 0xffffffffffffffc1, 0x5, 0x9, 0x6, 0x9, 0x400, 0x0, 0x6, 0x0, 0x7f}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 00:17:22 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:17:22 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:17:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:17:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f0000", 0x16, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:17:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/i2c_algo_bit', 0x100, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000180)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xa8b9, @loopback}, 0x1c) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001080), 0x400, 0x0) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000010c0), &(0x7f0000001100)=0x4) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x800) 00:17:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) [ 1042.390504] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1042.392561] tmpfs: Unknown parameter 'dont_measure' [ 1042.407810] tmpfs: Unknown parameter 'dont_measure' [ 1042.418026] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1042.428946] EXT4-fs error (device loop0): ext4_fill_super:4962: inode #2: comm syz-executor.0: iget: special inode unallocated [ 1042.442091] EXT4-fs (loop0): get root inode failed [ 1042.443286] EXT4-fs (loop0): mount failed 00:17:22 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x20001bba}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:17:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:17:22 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x53b, 0x0, 0x0, 0x1000000, 0x0) lgetxattr(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)=@known='com.apple.FinderInfo\x00', &(0x7f0000000180)=""/91, 0x5b) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x20, 0x5, &(0x7f00000014c0)=[{&(0x7f00000002c0)="d803aa6792eb8efb2d7ab879f1c34d152e5d618a0ae6c71938109dc1558a38722f38333420c13b2fbf03a81b541939bde882a35b3e71eefa5b85825c6157e47933c0bc8eff14023cdabe923ee89c73a3cf1ee2e106c88bec02993301c3be33ed1f718bb231307b8b10abd13a610091f3dbb4d50756b167105030c0667c55ec426a09021fd6ea0e66d6b0b8b0faa51b089466274d8dc226f52e6853682c", 0x9d, 0xffffffffffffffff}, {&(0x7f0000000380)="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", 0x1000, 0x200}, {&(0x7f0000001380)="95861a4a99d8991f682a81ebc63fcf75426fbaf72bb244a4c96b9ea331331cfa23b716e4a85947bf567ce7d8c907d44776d3db2531a26c9ffc8b495c92c101478c9147a1fa36b274e7c8d4aa4d5865eda46ff36e8812977a97a6f5c02ebd24d08f11aabdee3e28a85fbbffe74f8e3176106eaf5165a5bd", 0x77, 0x7f}, {&(0x7f0000001400)="9e209281bc91bbb729a206cd69b4d674285e2b2224bfa6468053b05c7e527d4605977700152f9cb3a213eb3e2552e3cff5a13e723bfa9ea0ddecd7d32f1a330b1918e90d8fffe9e1768f9e155636b8e0c371ccdfe79d63ca9b6d9862c2609d58255caf94a5551ac5412d0f2d2120da95ac540e313461", 0x76, 0x7}, {&(0x7f0000001480)="e00939823bf368a072ce6a6f6196fba24bb595fa784a89989a8c819fb70af07625c033fdebc1371950fb6a", 0x2b, 0x400}], 0x40080, &(0x7f0000001640)=ANY=[@ANYBLOB="61626f72742c7375626a5f747970653d636f6d2e6170706c652e46696e646572496e666f002c636f6e744ecffba1726f6f742c61756469742c00a9818635977f15597c620d1e6ee030b42e8585dc345e0adfee9ba500b6ebd3044ddfe7831f9de1715e9d657802f47e8d558f60b2bbea3659196daac60d13859d6290d7138904fea30cec9dfbb93baa79040000000000000057693f859d0484c480ea16be5f0753443a54045ace60311715493705d946b536fb828c9d58620709d02c1279"]) rmdir(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x124) openat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x210000, 0x0) [ 1042.565188] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:17:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000000040)) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_mr_cache\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) 00:17:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:17:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:17:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f0000", 0x16, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:17:22 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:17:22 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r3 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000f000000100000001800018014000200776c616e3000000000000000000000000800060000000000"], 0x34}}, 0x0) clone3(&(0x7f0000001900)={0x80810000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000002c0), {0x34}, &(0x7f0000000300)=""/1, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=[0x0, 0x0], 0x2}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r5 = dup2(r2, r0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone3(&(0x7f00000016c0)={0xb94d200, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600), {0x14}, &(0x7f0000000640)=""/18, 0x12, &(0x7f0000000680)=""/4096, &(0x7f0000001680)=[0x0, r3, r3, 0x0, r3, 0x0, 0x0], 0x7}, 0x58) accept4$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14, 0x80000) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x110, r5, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000400)=@IORING_OP_WRITE={0x17, 0x1, 0x2000, @fd_index=0xa, 0x44e, &(0x7f0000000340)="c8b63e72edf9ad0bf6af703333083230c7b95c4b2bc3c7da6b50668adf99b7ddd47c9e8e5eb63b82ac5d3dcf63dd15672ac9f617c5b7e449448b93fa065daf6968c92656fbbda4b7772bbf941ce45a03ba8780dfd42e34352d60cdca628a80f44a0244209546d05a510a0596aaa455b3d842f64490ca3ac97d308c01e412543425e8d94cfa0f0c1c70f2a3d27327e044a1", 0x91, 0x3}, 0x10000) mount$cgroup2(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0xb26451, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"]) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:17:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) [ 1042.722035] EXT4-fs error (device loop0): ext4_fill_super:4962: inode #2: comm syz-executor.0: iget: special inode unallocated [ 1042.768635] EXT4-fs (loop0): get root inode failed [ 1042.769722] EXT4-fs (loop0): mount failed 00:17:22 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7fffefe1}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1042.887682] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1042.889824] EXT4-fs (loop1): group descriptors corrupted! 00:17:40 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:17:40 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:17:40 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00), 0x10}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:17:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:17:40 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:17:40 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x440080, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(r0, &(0x7f0000000280)='./file1\x00', 0x484000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r4, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000140)='\x00', &(0x7f0000000180)='ceph\x00', 0x10, &(0x7f00000001c0)='^\x00') getdents(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20d315) 00:17:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4", 0x2e, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:17:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000", 0x1a, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1061.175929] EXT4-fs error (device loop0): ext4_fill_super:4962: inode #2: comm syz-executor.0: iget: special inode unallocated [ 1061.188310] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1061.199660] EXT4-fs (loop0): get root inode failed [ 1061.200780] EXT4-fs (loop0): mount failed [ 1061.208681] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 00:17:55 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:17:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000", 0x1a, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:17:55 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001f0020002cff0f00000000000001000004d20a0000000003000000000000000000800000000000000000000000f276dd5e25621b30d0fa5e5397cffae35422e87c262ae7c9bbeac349da3283b66d479f0027466dcc9df222808a6f84023df91c522b2ebe80e508a5"], 0x40}}, 0x4000041) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in6=@private0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @extra_flags={0x8, 0x18, 0xfd}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@remote, 0xa, 0x8, 0x80}}, @lastused={0xc}]}, 0x184}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x84}}, 0x24000091) dup(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x44, r3, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x44) creat(&(0x7f0000000080)='./file0\x00', 0x0) 00:17:55 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00), 0x4000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:17:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4", 0x2e, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:17:55 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:17:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:17:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000008f2050000000000"], 0x34}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000001080), 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/i2c_algo_bit', 0x100, 0x0) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000180)=0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xa8b9, @loopback}, 0x1c) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x800) [ 1075.580357] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1075.601913] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 00:17:55 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:17:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4", 0x2e, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) [ 1075.657467] EXT4-fs error (device loop0): ext4_fill_super:4962: inode #2: comm syz-executor.0: iget: special inode unallocated 00:17:55 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1075.667373] EXT4-fs (loop0): get root inode failed [ 1075.668008] EXT4-fs (loop0): mount failed [ 1075.765208] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:17:55 executing program 7: r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:17:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = getpgid(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001300)={0x0, 0x0}) clone3(&(0x7f00000013c0)={0x2000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0xc}, &(0x7f0000000240)=""/167, 0xa7, &(0x7f0000000300)=""/4096, &(0x7f0000001380)=[r0, r0, r0, r0, r0, r1, r2, r0], 0x8}, 0x58) r3 = getpgid(0x0) r4 = epoll_create(0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)) kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r4, &(0x7f0000000040)={r4, r5}) syz_open_procfs(0x0, 0x0) 00:17:55 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:17:55 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001f0020002cff0f00000000000001000004d20a0000000003000000000000000000800000000000000000000000f276dd5e25621b30d0fa5e5397cffae35422e87c262ae7c9bbeac349da3283b66d479f0027466dcc9df222808a6f84023df91c522b2ebe80e508a5"], 0x40}}, 0x4000041) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in6=@private0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @extra_flags={0x8, 0x18, 0xfd}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@remote, 0xa, 0x8, 0x80}}, @lastused={0xc}]}, 0x184}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x84}}, 0x24000091) dup(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x44, r3, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x44) creat(&(0x7f0000000080)='./file0\x00', 0x0) 00:17:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000", 0x1a, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:17:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53", 0x39, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:17:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) [ 1075.964032] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:17:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53", 0x39, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:17:55 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:17:55 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00), 0x100000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1076.074588] EXT4-fs error (device loop0): ext4_fill_super:4962: inode #2: comm syz-executor.0: iget: special inode unallocated [ 1076.093610] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1076.131943] EXT4-fs (loop0): get root inode failed [ 1076.133099] EXT4-fs (loop0): mount failed 00:17:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53", 0x39, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:17:56 executing program 7: r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1076.288103] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:17:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:17:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00), 0x40000000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:18:11 executing program 7: r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:18:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:18:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f0000000000000600", 0x1c, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:18:11 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00), 0x10000000000000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:18:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) shutdown(r0, 0x1) shutdown(r0, 0x1) bind(r0, &(0x7f00000000c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x6260f2e51b1796b6, 0x0, 0x7, 0x8, 0xffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x81000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) connect$packet(r3, &(0x7f00000001c0)={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r5}) accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000180)={@private2, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7a, r6}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@empty, r6}, 0x14) 00:18:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:18:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:18:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00), 0x100000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1091.471202] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 1091.472645] EXT4-fs (loop0): mount failed [ 1091.490040] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1091.492086] EXT4-fs (loop1): group descriptors corrupted! 00:18:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:18:25 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:18:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:18:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:18:25 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00), 0x4000000000000000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:18:25 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000140)) 00:18:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f0000000000000600", 0x1c, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:18:25 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:18:25 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffe}, [{}], "", ['\x00', '\x00']}, 0x278) [ 1106.051089] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 1106.051816] EXT4-fs (loop0): mount failed [ 1106.083635] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1106.085808] EXT4-fs (loop1): group descriptors corrupted! 00:18:25 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000001840)) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) io_setup(0x5, &(0x7f0000000080)=0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) io_submit(r3, 0x2, &(0x7f0000000180)=[&(0x7f0000000200)={0x0, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001e00)={{}, 0x0, 0xa, @unused=[0x3, 0x8, 0x4, 0xb4], @name="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"}) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x842, 0x2e) syz_io_uring_complete(0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010101}, 0xc) r5 = dup(0xffffffffffffffff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(0xffffffffffffffff) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f00000001c0)={{}, 0x0, 0x0, @unused=[0x5, 0x9], @subvolid}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x1ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:18:26 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002e00210c00000020000040000000020008000000", @ANYRES32, @ANYBLOB="03e7e9657ee0937ebd16492c5d1f008b00008455fa"], 0x24}}, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) splice(r3, &(0x7f00000000c0)=0x81, r4, &(0x7f0000000100)=0x4, 0x0, 0x6) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) write$sndseq(r5, &(0x7f00000002c0)=[{0x40, 0x19, 0x6, 0x5, @tick=0x3ff, {0x8, 0x9}, {0x1, 0x5}, @note={0x1, 0x4, 0x1, 0x80, 0xffffffff}}, {0x4, 0xfe, 0x4, 0x1, @tick=0x5, {0x6, 0x1}, {0x8c, 0x1}, @connect={{0x0, 0x40}, {0x80, 0x8}}}, {0x8, 0x1, 0x7, 0x7f, @time={0x20, 0x642}, {0x80, 0x6}, {0x80, 0x98}, @queue={0x1f, {0x200, 0xae3e}}}, {0x4, 0xc8, 0x6, 0x8, @tick=0xb02f, {0x1, 0x6}, {0x9, 0xf9}, @ext={0x61, &(0x7f0000000200)="5998cfd13f48429e10060ef4e3e6dd96aa699e3284d572f5d777f05572496d228c7a24fdd815198970ca569362a4438756d92f90ff7d18750fab7c5230c7e022162de4050cc9b62a69a8929cd93bd07c9a036890af6473ba7e15ac2ca32a8bf629"}}, {0x4, 0x9, 0x2, 0x5, @time={0x9}, {0x7, 0x3}, {0x45, 0xff}, @connect={{0x3f, 0x7f}, {0x6, 0x63}}}, {0x3f, 0x80, 0x8, 0x3, @tick=0x8001, {0x6, 0x9}, {0x2, 0x8}, @addr={0x1f, 0x9}}, {0x73, 0x4, 0x7e, 0x80, @tick=0x6, {0x0, 0xef}, {0x0, 0x80}, @connect={{0x7f, 0x40}, {0xfe, 0x5}}}, {0x20, 0x40, 0x59, 0x4, @tick=0x5, {0x5, 0xfd}, {0x8, 0x1}, @time=@time={0x1800000, 0xdb}}, {0x7, 0x81, 0x3f, 0x0, @time={0x1f00, 0x1f}, {0x1, 0x1}, {0x8, 0x46}, @queue={0x1, {0xd90, 0x5}}}], 0xfc) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f00000003c0)={0x1000, 0x0, 0x1000, 0x2, 0x6, 0x1000}) 00:18:26 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:18:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f01", 0x35, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:18:26 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00), 0xffffffff00000000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:18:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f0000000000000600", 0x1c, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:18:26 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1106.293295] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:18:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0xfffffffffffffe18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7f, 0x1, 0x25, 0x80, 0x0, 0x1ff, 0x8, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0x3, 0x2}, 0x50804, 0xff, 0xffffffc1, 0xd, 0x492b, 0xed0, 0x8, 0x0, 0x206, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x181142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000080)) sendfile(r2, r3, 0x0, 0x100000001) r4 = openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) fcntl$getown(r4, 0x9) 00:18:26 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:18:26 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1106.399177] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 1106.399819] EXT4-fs (loop0): mount failed 00:18:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:18:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:18:41 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:18:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:18:41 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:18:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f01", 0x35, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:18:41 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:18:41 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1121.321709] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1121.349642] EXT4-fs error (device loop0): ext4_fill_super:4962: inode #2: comm syz-executor.0: iget: special inode unallocated [ 1121.374204] EXT4-fs (loop0): get root inode failed [ 1121.375297] EXT4-fs (loop0): mount failed 00:18:41 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:18:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f01", 0x35, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:18:41 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:18:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:18:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff", 0x38, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:18:41 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) renameat2(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x3) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{r2, r3/1000+10000}}) r4 = syz_io_uring_setup(0x76a0, &(0x7f00000001c0)={0x0, 0xb249, 0x4, 0x2, 0x3c5}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0xa, &(0x7f00000002c0)=[{0x3ff, 0x5, 0x9, 0x9c4}, {0x9, 0x7d, 0xfd, 0x8}, {0x3ff, 0x80, 0xf, 0x6}, {0x5, 0x3f, 0x8, 0x1}, {0x6, 0xfa, 0x0, 0x7}, {0x0, 0x7f, 0x7, 0x4}, {0x1f, 0x88, 0x0, 0x7}, {0x1ff, 0x9, 0x7, 0x6}, {0x40, 0x1f, 0x1f, 0x4}, {0x3f, 0xff, 0x83, 0x8bf6}]}) syz_io_uring_submit(r5, 0x0, &(0x7f0000000380)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, r6}, 0xfffff89c) syz_io_uring_setup(0xe08, &(0x7f00000003c0)={0x0, 0x43a, 0x8, 0x2, 0x81, 0x0, r4}, &(0x7f0000d4a000/0x2000)=nil, &(0x7f0000e23000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000004c0)={0x0, 0x2, r7, 0x9}) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000500)=0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x810, r4, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000580)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r7, 0xfff, 0x0, 0x9, 0x0, 0x1, {0x0, r11}}, 0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000005c0)={0x2, 0x0, 0x8, 0x0, 0x9, 0x4, 0x40}, 0xc) connect$unix(r8, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x4, 0x2911, 0x0, 0x9, 0x0, 0x0, {0x0, r11}}, 0x0) [ 1121.737722] EXT4-fs error (device loop0): ext4_fill_super:4962: inode #2: comm syz-executor.0: iget: special inode unallocated [ 1121.748236] EXT4-fs (loop0): get root inode failed [ 1121.749333] EXT4-fs (loop0): mount failed 00:18:41 executing program 6: r0 = syz_mount_image$iso9660(&(0x7f0000001340), 0x0, 0x2, 0x44, 0x0, 0x1020409, 0x0) r1 = syz_mount_image$iso9660(0x0, &(0x7f0000001980)='./file0\x00', 0x3dd, 0x3, &(0x7f0000001c80)=[{0x0}, {0x0, 0x0, 0x2}, {0x0}], 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="6f7614b66fb86465726f636b7065726d2c6f76657272696465726f636b7065726d2c66736e616d653d7375626a5f726f6c652c736d41c93979736861743d69736f39363630002c61707072616973652c66756e633d4d4d41505f434845434b2c00"]) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000002c0)={0x14, 0x0, 0x1}, 0x14}}, 0xfdadc35f89299da4) linkat(r0, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xa4}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0x120, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}}, 0x4008000) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000100000001800018014000200776c616e3000000000000000000000000800060000000000"], 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00le0\x00']) 00:18:41 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:18:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff", 0x38, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:18:41 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:18:41 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1122.007639] perf: interrupt took too long (6385 > 6357), lowering kernel.perf_event_max_sample_rate to 31000 [ 1122.206548] perf: interrupt took too long (7997 > 7981), lowering kernel.perf_event_max_sample_rate to 25000 00:18:57 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:18:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:18:57 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:18:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff", 0x38, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:18:57 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:18:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:18:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x180010, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') r0 = creat(&(0x7f0000000200)='./file1\x00', 0x2) chroot(&(0x7f0000000280)='./file2\x00') umount2(&(0x7f0000000480)='./file2\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat(r0, &(0x7f0000001a00)='./file1\x00', 0x42, 0x4) accept(0xffffffffffffffff, 0x0, &(0x7f0000000540)) io_setup(0x5, &(0x7f0000000040)=0x0) chroot(&(0x7f0000000440)='./file2\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, 0x0, r2, 0x0}]) openat$incfs(r2, &(0x7f0000000300)='.pending_reads\x00', 0xc6000, 0x8) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) 00:18:57 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1137.902461] EXT4-fs error (device loop0): ext4_fill_super:4962: inode #2: comm syz-executor.0: iget: special inode unallocated [ 1137.910045] EXT4-fs (loop0): get root inode failed [ 1137.912488] EXT4-fs (loop0): mount failed [ 1137.924568] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:18:57 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:18:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53", 0x39, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:18:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:18:57 executing program 6: ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000180)={0x6, 0x5, 0xfbc, 0x3, 0x4, 0xf6e}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./mnt\x00', 0x0, 0x0, 0x0, 0x3a4c4a1, &(0x7f0000000140)=ANY=[@ANYBLOB="7092", @ANYRESHEX, @ANYBLOB=',\x00']) 00:18:57 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1138.098171] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1138.099885] devpts: called with bogus options [ 1138.100045] EXT4-fs (loop0): group descriptors corrupted! [ 1138.123947] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:18:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53", 0x39, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:18:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1138.283294] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1138.284374] EXT4-fs (loop0): group descriptors corrupted! [ 1138.356165] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:19:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53", 0x39, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:19:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:19:11 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:19:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000140)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)=']$-\x00'], 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x6, 0x0) ftruncate(r0, 0x1000003) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x40, 0x9a) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xfffffffffffffea3) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) creat(&(0x7f0000000480)='./file0\x00', 0xa6) socket$netlink(0x10, 0x3, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x8) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9bb12466e6c15d66, @perf_config_ext={0xed14, 0xffffffff80000000}, 0x1000}, 0x0, 0xffffffffffffffff, r2, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) write$binfmt_elf64(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/4472], 0x1178) 00:19:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:19:11 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:19:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:19:11 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x80, 0x2, 0x0, 0x4307, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580)}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)=' ', 0x1}], 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='environ\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x381100, 0x24, 0x6}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000400)) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000004e800)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "7b1733cb0bb767"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004f800)={{0x0, 0x3ff, 0x3, 0x2f34, 0x2, 0x401, 0xe0a7, 0x1, 0x9, 0x0, 0x3f, 0x7, 0x9, 0x7, 0x9}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f8c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004fac0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r4}, {0x0, r5}], 0x8d, "3f56d69886c6fc"}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/225, 0xe1}, {&(0x7f0000000480)=""/213, 0xd5}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x2) pwrite64(r6, &(0x7f0000000240)="f20588a93ccdf68c71124f09846c998f0d940faf75ff44828282f31a5f0ece737f42eec7c6ff415f419a72a021445f89ea80f16271c02641d435f8dd622f4dc8b6edc464747f7d573927f71b9f05979fb56f6fb1cb022cf0267e0ca18c", 0x5d, 0x0) readv(r2, &(0x7f0000000280), 0x1000000000000048) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r8 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x14, 0x2, &(0x7f0000001480)=[{0x0, 0x0, 0x5}, {&(0x7f0000000480)}], 0x0, 0x0) dup2(r7, r8) [ 1151.841787] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1151.843022] EXT4-fs (loop0): group descriptors corrupted! [ 1151.885796] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:19:11 executing program 6: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0xe3}}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r4, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs(r5, &(0x7f0000000180)='attr/keycreate\x00') syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000380), 0x2202450, &(0x7f00000003c0)={'trans=unix,', {[{@mmap}, {@uname={'uname', 0x3d, 'mounts\x00'}}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@debug={'debug', 0x3d, 0x2}}, {@uname={'uname', 0x3d, '](!'}}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@privport}, {@access_any}], [{@dont_hash}]}}) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) unshare(0x48020200) 00:19:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:19:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:19:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:19:11 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = inotify_init1(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000002203fbc7317e463c72fe4a00c8b7ad0b62f2bfe3a089b57355083ce3f2e9ebb3c0abb87636fd28125e154a1084216230b0c7830897b000e6eab5aad77a0c5792c6dc58ac4f5c2b3ba5ec90168d62c7f48296202356530a290e145cb766e850bea7354691863e6cb85aefb946d08e6ae71b029c90e28258c3c4b776db53a0f0e97c022967f4935d157dca50594a2445ee3784ccf3702e0740fdb0b2db6b4b11c864b8e796f28032988e322415fcc643bf7c8f2b2f3c32180d37ce0cc73b83b74f693e7973770d37779782a6e4d6cdda495886e90c9e8ffb9be6d47cafe1ed1a607b9502dfe66211593fd82f20ac7018ec", @ANYRES16=r3, @ANYBLOB="01000000000000000000100000001800018014000200776c616e3000000000000000000000000800060000000000"], 0x34}}, 0x0) open_tree(r0, &(0x7f00000000c0)='./file1\x00', 0x8000) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r4, r1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000000)=0xfffffffffffffff9) [ 1152.047277] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1152.048416] EXT4-fs (loop0): group descriptors corrupted! 00:19:11 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:19:11 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1152.127153] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:19:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) signalfd4(r0, &(0x7f00000003c0)={[0x4]}, 0x8, 0x800) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x3, 0x0, 0x9, 0x2, 0x0, 0x1, 0x6801, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000040), 0xe}, 0x10000, 0x0, 0x7fffffff, 0x7, 0xffffffffffffffe1, 0x10000, 0x8001, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x0, @tid=r1}, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xc3, 0xf4, 0x4, 0xf8, 0x0, 0x3, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x1000, 0x7, 0x5, 0x0, 0x5, 0x41, 0x8007, 0x0, 0x8, 0x0, 0x80000001}, r1, 0xb, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x44) close(r0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) [ 1152.206025] perf: interrupt took too long (10015 > 9996), lowering kernel.perf_event_max_sample_rate to 19000 00:19:27 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:19:27 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:19:27 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:19:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) signalfd4(r0, &(0x7f00000003c0)={[0x4]}, 0x8, 0x800) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x3, 0x0, 0x9, 0x2, 0x0, 0x1, 0x6801, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000040), 0xe}, 0x10000, 0x0, 0x7fffffff, 0x7, 0xffffffffffffffe1, 0x10000, 0x8001, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x0, @tid=r1}, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xc3, 0xf4, 0x4, 0xf8, 0x0, 0x3, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x1000, 0x7, 0x5, 0x0, 0x5, 0x41, 0x8007, 0x0, 0x8, 0x0, 0x80000001}, r1, 0xb, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x44) close(r0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) 00:19:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:19:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:19:27 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:19:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) [ 1167.256639] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:19:27 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1167.286657] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1167.287788] EXT4-fs (loop0): group descriptors corrupted! 00:19:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:19:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1167.368544] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:19:27 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x4000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:19:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:19:27 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x100000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1167.469321] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1167.471262] EXT4-fs (loop0): group descriptors corrupted! 00:19:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, 0x0) 00:19:40 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:19:40 executing program 2: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_none}], [{@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@seclabel}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) fsmount(r0, 0x0, 0x70) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400300001400010000000200040000000a00000008000000", @ANYBLOB="1d0001"], 0x340}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB='\x00\a\x00\x00\x00\r\f\x00\x00\x00\x00\x00\x00e0\x00']) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @mcast2, 0x19e}, 0x1c) syz_io_uring_complete(0x0) 00:19:40 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:19:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:19:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:19:40 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x40000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:19:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:19:40 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x10000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1181.010728] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1181.012743] EXT4-fs (loop0): group descriptors corrupted! [ 1181.022016] 9pnet: Insufficient options for proto=fd 00:19:40 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x4000000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:19:40 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fo=\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9p2000,access=any,\x00']) 00:19:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, 0x0) [ 1181.174102] 9pnet: Could not find request transport: fo= 00:19:56 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:19:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, 0x0) 00:19:56 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:19:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) [ 1196.693494] netlink: 'syz-executor.6': attribute type 4 has an invalid length. [ 1196.696701] mac80211_hwsim hwsim11 wlan1: refused to change device tx_queue_len 00:19:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0xffffffff00000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:19:56 executing program 2: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') ioprio_set$uid(0x0, r0, 0x2007) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dns_resolver', 0x28200, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, 0x14, 0x100, 0x70bd28, 0x25dfdbff, {0x8, 0xf}, [@INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "7c62c259b16d400becee3c78235cdc9c52e8390cb9c40e76576c5bc9758205836b1abf364ea503af6a64fbd7d77b75725c675d0a4840b525596a44b76e4db29e777ace14579698d1a4c81e79ee1b5f946dfb1da09ce0849d2f91995a1a21ba8ef9e8d4509247a1506283c643515b9549bf6d068a6e67e26c81d864b6d8ffe98afd2a160be3414d889e36e224aeaa7d688ea77d18e5a3a3cc2d8e6145742dad5efa79bbed68eb"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40040}, 0x4) 00:19:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:19:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e00)=ANY=[@ANYBLOB="340000001000010000000000000000000000000005000000000000000c00008008000d00ac1414000c0004000005"], 0x34}}, 0x20008004) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2) fcntl$dupfd(r1, 0x0, r0) [ 1196.697669] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1196.710946] netlink: 'syz-executor.6': attribute type 4 has an invalid length. [ 1196.714440] mac80211_hwsim hwsim11 wlan1: refused to change device tx_queue_len [ 1196.715538] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1196.725151] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1196.727154] EXT4-fs (loop0): group descriptors corrupted! 00:19:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000009840)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f0000001e80)=0x80, 0x800) sendmsg$nl_generic(r0, &(0x7f000000aa00)={&(0x7f00000098c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f000000a9c0)={&(0x7f0000009900)={0x10a8, 0x2b, 0x4, 0x70bd26, 0x25dfdbfd, {0x1f}, [@generic="754c1ce01fa8d9a323066c92ccf776d3850607086a8f6a449137282920e1d714dbe7548ade1407467f6c5a2a34fce736af077a48286e740b79695bbe4b4d2d88b2d7dd2e571937d3e69c4fb33fe42d72f50486ee849acd28655c3864edd211cd6609b6ad76b400c4c3a6c807a4a130f11a82dd44560af1b5bd6937c354469e6383be54f17c590804a5874dfe5bb45604b2295caa730876a9566f986bf796228fb41002c2132645f18423a2e33baaa0380de07133afa4660ca2d132b2846dc58ea4d373e989f4746edf73090e0d7d87e42b13ff3df6c8b08046ae18643e9245947f3b89206964417ffb827bd32166168cbe41ef0c7427ea6918840c533adcf26a63ce372f49b2abd9b6c345b3f299f3ce52ec72748f64b5affd2e4dc7360654469f75c81e4901bc355662e6af87f0a7eeaa876602c6f7cd543f329064895b549a900f1ac893410e99352edd66e0e29f7285f32ecafbd48ec119eb39d12b62b36b66ba188261e44bd09b9841a76b0ef0d24066c58f0b9987ef301e005cdb409cf83441d9bcbe89a4c137d9d379c00336992c008d2ccbe4c80dd2a8094404a8ec7abd0bdd5633f5818db317d8f84b106edad2eb09cbd6613514a3effa16ca51da49a4b2ff7f01b94c2a43b8a609b3a19c905e62795e3cca63d29ea2728eca7d868b30ae97d62ee94c5e541ce19debe4ad13063afe4551d842b3cde7120570bba035cfd30a4b7d77c7eb93f7bf6cbb83b1f44a708969721b7c8169e8c7a180f5ad78fa21799ada903435dd32319f1befce41de72788eb2e939be672f3cc5c8e6fc3ef4f6b8312e72c0b28e804d745f529290b6f4e25f308a953f98a525608677a415bea1d34d72d477b1c7867d05c8a13638716dc28211cc28dd08c4c162884223ccb994f1a3a413df065c8a483458c2764c00ae8a022b33951d2a92981fc7ee8be8700a2ee54602b8aea9225c4828321be27e43fa62f1011ee6eaeb7cc6cb5dded5e389987f80d725f8ba6cf69fb7fa43f4cc82f65589f26f09937a7cfb4f52051f4fb254f6b744cf095aeba0cd43208238b48c590adea592a3cdec87d8340d74622308fd116b97c9c6d770ca4daf10f4ad164007b9f0e3846abdc5aa43d9801156c7be59135ee7895cf472f7d51e08d9d98cfa5f6f638b117be3f697703160844d7c6792e2f2f4693440e2025d2cdf73ba80e3032c5818dbd8379bd4885152bcf55eee242c12dc644b03dd5817fa7946f602311563b1288375e0154db40b1ce8d5ae3a8b0c84ce027f3fef7349533030ce532097b79a71671f39eceed18fad5d075b1b761e4339cdca4c08f97801666010db9ed429b9d4c4d29ae2f388abdb9d819c96c65b463dd2b97e2b92e7d4bb2f1f3ca819a41907c65516bac9d1df53f27735a53fb4df2db4a6e267f33cfe85eb311fdddf1fdb8052a1b2632fa5762f9a3f4392e38d005f3245bba6e4d3e9a2e8464d2cd4d373a1ab6cb5d287949f8a5a996015c008733c0ec72263ce5de575116fb9411c96ddc1ba28ff6601c152a594098823d08d58b0ea6597c4938355de748a877bade4ba35a8371b52e87319cc15428d8a2e80a420046ed0f6078f0b02460665e85797478f5dcd33ca7fd90ca8f240177bcbf0f3e65d61a711b468a3d95ec74827c93ef6bd8c6aae7cb43c2f4f6f25c50c51c5295b23f6a086614d23223e14fc3e7ba7a8d879657071687ff0a67c1fb2afec47fe31868c5818e7bb29e2140fef5f19d7286f1bdb7e408e1b29f888e9b42d4bbdb8f80e22df5eef2194569ff326c0a86ae8744bde397b86ba2b8a6d5c3b4ec22622932ffbc30eab58d7911219833df4d58f1e461c31376caf30c877cbd0e5ac54aa989965d9ab713e8ee27e261b566b4afbe246a1429e5e1eafeb9560220d37d4dbaccb14139f3444e2d5dd4896e12dae32ea53b7521e9dc791c9409792848d197b83fb7fa8e6a098840d7a2b8395441e64288ac1347a3ae1101d590dc4bffbb57fd1eb52402a9f9ee2e6817e3a77eb2f7b046140573f82e5c92727db2eda09bb325ff2cd4db0d9e01ca20aef08c839aade05335a92740fb39fe0179d02216b8d840d247c43c98963f8369c7e50c8129e7081a666a2a5ccf3d811b7c24a7a6b9da62bee5bcaf289e14c5ac6dc0a4be4e62f2018470fce307fcff15dfb0e9cdeeba3b53f98e732f388218c9a49fb10787cfbe766caddb79657337513aeb049993b1261d8c548c41e416b60e7b474e989c55c71eeb020a27d5192815ab4cc5a0b4b78af89290935db5ca39b1cb43e022d12542d4e7d774345aa747d1421db7a6e2e0e65300f5e36f2866a79108ec4675800ba27f0b0522f7a4022dea7da41449db85b72f0ac2403d82056218c124ee056d97739f9eab842ecf24376f009a10a0444e06569f804ebc2d7c43db2ae56dcbfc3f1da960e203624f3ad31e5977a3749ddcae274035199031bb6e6e67d8559b8b31ce2db5747c2a2950beb77b4fa1cb80584cde34e78560e70cc37d8ffe913b9615b32959cd77f2eb931bb7f8ce85b110e415216b8ce711b54a10d055a3a894487c41c1ab00a50b1e42e9dab4df9e75876ae8173bee2c573c0394785020dc920c2aa2d3c5605d6df4739f3499be1bfa642be6a94ce0f10c411a73274807474c4f3c0c38ec3a48ff007e611f75803002850a68428118c239b1d3c8696985fd04ffd4c54826146cae6234ee244e07371bc0399548dc95cc36e0823a104c231ad8e989aa114324b8321880bec82af2086b43186434e0d8aec87cec721bf87eacfb9372e331dbb17a1b353a005d54533e4f53b46ec5a3ff4c1cea800275c682dbf56ad0655a4a87d8c7a14380ff3ab3d810f388407341c82e660857c8c69b22be64b340ae50e3b8dfa3cd898f41207daf2cfecc14d00e34db1604b5b3bab87542106f01475ada82cde24bb34b9aa087ba516c994e8995e7993b3aa1bcb1cfb150c85c8f855e71664aeb84bd2f109cf7d7867c6ed988907488fb82ba200d054e7c6a6d562d6b2a39c408f9303052e831d536068a8005c75f598181293815bf3697b7d23370c4e06c9237ace934f3546e1f90b625f241aca25640b52833696b9c9fd3718748805ad6bda15008a7e55d01d3cf8064824ca1d6827dfc52328a1c1b14e98095fd4c1c551d096fb4bdc439a0159fdc89c5f437bf209281dccb0939aac8ce4af62379dac6e6e01f186a8019eacca77b120f701c8ac56acd136c522428b935a87717ef2ec5e6ed9a4fb6c960bbd302a2b9a74de132650d100164aa369e39ab6c0c7575c201971a40d7c40d325bf9effd0d38879ff4230f9daa11a363062345833ab7040e0211c29be9593801617ce120996dba35f6c731e8583abf1f3e237dac3f9833560867748e9e7218cb8aff8d5e828798f8114b89430a1095f680c62da2485c3b066c5a77c47b03ecf55dac2f12ba5abca30cb3ce3b3161852421002bbb6909c7b20a105ac4546cdd17779703ff583095614bd30ebbc33fffeca45e22fb9cad6e76ead592ec6d71b80a4c1da9e3f8e88e64de8ecedd382e174a26b5157491c1ec08946d92d77001191060c688f7e03ef00fa70dc7725928b6a334b3b63115335294d4bcddeb7bdb97442c840c5e1cbbf8b7dd9e53da1c5bbf481db7767595fb830f5b5daa37206eb8fd64dd9d5fdad219650e2e819a534d9a900e4154c06257731f78bbc4431e995c573b1716cdd3bdf8cc3c781a1a54bff45acfd63031cefa5163159a94bb67996b3cbe5b1239b11fa678211e6c2a42493a9e1dab6e9e95dd621bc5f3974c8e94c11da0e232b6f0d1e212af978529813cc3ae561608ae9808cc12fde8388b6a51fe7d0bb78c9a94f19a3c4af59314e451622b93e1f46a1cc36acf3544dc3efc161821c1da54bd8b9264bdd06c66bc248330eea1f3ffed64bdc8eaf7163bb8023b728569c76b4b66e37e9e6ee522cb1ad96ca5b0443810406089d6cd485dd01a3e85c886f4441ab361e5292752b9301df5e7a2690614a25b68c85dd4d70e1887d0856f6dad83f04b8a23422ffddf8702399863c63328837344ace05bee3d9a04d367856ca5bc76cfd2740dd4d388d7bf70bd851070cf9de5c2dccea32a0269d12e10b03dd278f9e90cdb83d812baa61001cff97659c71eaf36d1b81f3b6f43fe5f7b8687fd986bc71d6d664ed581316e3207c730f6656d6df4eff43462336e82b93e352b4736a21c524ec2ea2fd090b619613c907953bc32d8479293bf8431870d2cfd1b213076f1a5cb7c1ace97d65f820ca8f7ef7cad09c6a8d1084830d1c001888e9ac106aa382160d5aeb5417d19875fa3958572d4452ea578aeb9b97727f7e0e43cc4338040d5d1d5a9cc0411101a1b2a16b9ffd0c811d8c00eba4f26a1d60023b012fa0d8ad9cda6ec93a43636af2abc14732225b23782c7afc2c54f882b49f92a4f2b08c2735453fe236086c2bb86ac3912d6d1aa127758cab2bef4b346c4ea192cceec49ee8aaa5cf6f41eb590662e67a4480ef57c0c36e17259db04d90f34d703b991e0b8abdfd690c5b29198ef89d7dcbe0ac33a3cd6120328afdaca8932ee57c4491b66b11c6c5e8c881e87140e0b5b88f59c6dc5546d8edb382a11462f97a2a304dbd94068b0ffe9c67ab19b3a9889bfc65463c1816fb20b167b109fbd8b2a966d7efbe948788d71b21e83bfdea4937faeb304345ecde730bbcf17f46b5b122017c5df5ae06e41ceadd89a1384c6312e5053bba5072a860af037283bed046b678b733ccfb93c657663b9d2c4b217b0005ecb53c4c4bd185bb661b93484738fbe891930c5e1bcc28dd018f4c0fa4d625f7b694c4a219c4c037ac548841d907d3d8a338f4b9ebb73e2dcfa9ae93df02dcf1a45123c5f816b1f8bff4affc3dbfb94938918be3c24b0f95c049d3cc567ff972ce69da8f7ce043ada96091e5c2f94538ddd474801b9aaead810984fa9b3bdf5aa0bf83564367eb86db63f3741d08455620277f19d771824eb49fa0abc795ec1424bad915f942043d825f648133830f586e3b1ca0056f0e3694872e7d0b3f09804625ee01dbaabfbf47b5cc8db15db359bf0f1c72e7e9e77f6c5204494d4bede52f00d71ee9ff27355ab05873ea606a820061f27bfc5b26c5a7233d123cc710871422c0dd7f16d47367532615f732e5a48703c39738a0e95754dc15cca19f653f3a7bea974ab6649b5c809d90dce70e2a0413b21f3ed906d1394e0729ac7805df5ac1c5f4a48faaa84a2facea940ea3b59f402b918e33591463b1a071436fe1156cb1be06dfeea0071775e966714930859903ae1972b2e9afd962ca5476f0675fd9044a002b4689f9e1ed57258c6729a4f8886a2926b3a8d7dfe1c6daee628834ade0eaed30fc0f339b4492ee1b022e0a20ae77d67f069e2d56115802ffff63bb8c11097ec138f90ce23d1b5c6387849a37b237b5c6c47341a7b8f5ad4369ed0c209b65634ad59d692081b4fdc3787c3aa3c406632ee79c8fe1736401fb865dd0c83c7a09761d0d8d77b11f15c5e62ee876d2b647665732f55ca250105e2f2cd0d5cb48af75acaba548d422cb7ec3a0e19d302af07b66a14224fdb8eaf3eecd1465be6424c79f880a44bc0cd76f62f1bd1226bc59bbfcf5e546767bce659513906adc8d766314eec030f6fae7a93f5873a87910d9d308cca29664858d3c9740e61a5ea5c8de32ea950461a3a35c49c90b98cebd35b8697459a3908037286859cdf51c4d623fd7ab68cb8fdd0499a7acc1c639c4ac394092cf7d6f11e96d1475fd73fa3ef4b7c2b4478de7f61bfb", @generic, @generic="251870e57b156738b79742e12459ba087b1cb14a4ea59b2c13b588c00d33a0b43dd4cd245108c12c7c93af8ca0f57cd900a532251eef45f597850adecb0ce5dd80788553a215a52f2a55ce67750e65d492f2251679ab2830026e1188ebe0f23d30995c2b17f84d1d70166ba9cfe2744f14efa29cfbf27c70a34b5e71cd75583a6080ed65302e81cf499f80e905dfd3033c70"]}, 0x10a8}, 0x1, 0x0, 0x0, 0x80}, 0x8040) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) r1 = gettid() recvmmsg(0xffffffffffffffff, &(0x7f0000009680)=[{{&(0x7f00000002c0), 0x80, &(0x7f0000000340)=[{&(0x7f000000aa40)=""/4105, 0x1009}], 0x1, &(0x7f0000001900)=""/68, 0x44}, 0x7da5}, {{&(0x7f0000001f40)=@phonet, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001fc0)=""/243, 0xf3}, {&(0x7f00000020c0)=""/252, 0xfc}, {&(0x7f0000004300)=""/176, 0xb0}, {&(0x7f0000000380)=""/50, 0x32}, {&(0x7f0000001880)=""/6, 0x6}], 0x5, &(0x7f00000043c0)=""/114, 0x72}, 0x3}, {{&(0x7f0000004440)=@sco={0x1f, @none}, 0x80, &(0x7f00000056c0)=[{&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/39, 0x27}, {&(0x7f00000054c0)=""/122, 0x7a}, {&(0x7f0000005540)=""/207, 0xcf}, {&(0x7f0000005640)=""/106, 0x6a}], 0x5, &(0x7f0000005740)=""/239, 0xef}, 0x9}, {{&(0x7f0000005840)=@nfc_llcp, 0x80, &(0x7f0000006f00)=[{&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/184, 0xb8}, {&(0x7f0000006980)=""/249, 0xf9}, {&(0x7f0000006a80)=""/120, 0x78}, {&(0x7f0000006b00)=""/192, 0xc0}, {&(0x7f0000006bc0)=""/223, 0xdf}, {&(0x7f0000006cc0)=""/184, 0xb8}, {&(0x7f0000006d80)=""/249, 0xf9}, {&(0x7f0000006e80)=""/77, 0x4d}], 0x9, &(0x7f0000006fc0)=""/107, 0x6b}, 0x8}, {{&(0x7f0000007040)=@nfc, 0x80, &(0x7f0000001e80), 0x0, &(0x7f00000070c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f00000080c0)=@isdn, 0x80, &(0x7f0000009500)=[{&(0x7f0000008140)=""/166, 0xa6}, {&(0x7f0000008200)=""/4096, 0x1000}, {&(0x7f0000009200)=""/48, 0x30}, {&(0x7f0000009240)=""/133, 0x85}, {&(0x7f0000009300)=""/8, 0x8}, {&(0x7f0000009340)=""/130, 0x82}, {&(0x7f0000009400)=""/240, 0xf0}], 0x7, &(0x7f0000009580)=""/211, 0xd3}, 0x7ff}], 0x6, 0x62, &(0x7f0000009800)) timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r1}, &(0x7f0000000040)) timer_create(0x2, &(0x7f0000001700)={0x0, 0x24, 0x4, @thr={&(0x7f0000001580)="d366c6092f92003bd0eeb5854b7d70af2dee4767bff1690fe2680a73311aac3b90d945410e15752a24081e9ec7bb0c26af7c268c2f75feb0b6c813445692f8e4e034b5f63b72d0f3be27e18a213ca923ac7deecfda67139ab43f3721d28efad7df99d9a2e10b31d9c2db14b188415e6b779682b0bded2625bce0cd96d0a144a6ed462da3847232b48e5173767cebec76b3d7169bcd2d49dbeada719f36fb23ab15", &(0x7f0000001640)="806f9d4555f38434d66fb5c336281d3b5c2e9a94a9261128ef3186b6d3c1c496c4109be99942900750691382a6b154f6ab1f029dd3c12e1ee548f60802d107d3490d5d45d0d193ddcdc2319c159d79dc0a22b9e2178dd26f69a04a80762eea2f3c40f2dab64ef14d669eaddec38049fa4687fd2eb3aae9c0435dbebc4f9fd1121ff8f6a12c921bcb766d43e262924643fb16d33790762658af450dd65a0b475ba4395dd0cbefc21740962dca12"}}, &(0x7f0000001740)) process_vm_readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000000080)=""/192, 0xc0}], 0x2, &(0x7f0000001500)=[{&(0x7f0000000180)=""/155, 0x9b}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000001780)=""/207, 0xcf}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x7, 0x0) 00:19:56 executing program 6: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004680), 0x0, 0x2, &(0x7f0000004800)={0x77359400}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 00:19:56 executing program 2: openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000500)='cpu.pressure\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000540)) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x81021}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x0, 0x0, "4fa2f8201eed6e500c32342a227989f18a88ab65bad4c23a441d66f462f1df77bc777d160562da8c50431b2a204f36c6ed27b00215909d75417aa68c9029c5fd", "176764fe8c2ff71a1633d53dafbecd823af97cf5831be9a6fed5449e9f77dd92"}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x11d000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000004c0)={0x0, r1, 0x0, 0x36b, 0x9}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) lseek(0xffffffffffffffff, 0x9e46, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000003c0)=ANY=[@ANYBLOB="010010000100000018000000", @ANYRES32=r0, @ANYBLOB="07ddffffe21000002e2f66696c653000"]) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000600)=""/4096, 0x1000, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000900)) faccessat2(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x102, 0x200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/llc/core\x00') ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000380)={0x0, 'wg0\x00', {0x2}, 0x5}) unlinkat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) 00:19:56 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:19:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) [ 1197.010833] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1197.012755] EXT4-fs (loop0): group descriptors corrupted! 00:19:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:19:56 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:19:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:19:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x100) 00:19:56 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1197.292993] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1197.294643] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 00:19:57 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:19:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x65, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=@getae={0x204, 0x1f, 0x8, 0x70bd2a, 0x25dfdbff, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0xa, 0x2b}, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x2}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x41}, @algo_crypt={0xed, 0x2, {{'ecb-twofish-3way\x00'}, 0x528, "385381f9bbf3c58cea3c9ed72a27603733486d4cbdff716a3428be6d8299f98b7dcd17e0a403cbe0130a38a52f2f48dd0e239c4c34312512717ae2f02c2edd810127cd7d08ae542ab4646bcbc25816222f05626cffc3322bb11b4fc21175405b41305137405cf0f52232eccc26948e8cc15e67ff4405292bda94de3048c37636e4d4310f6b9fc9dedb94e0cfd99599a019dbf5736087acfad1fe34280644e8c5fda83ab292"}}, @algo_crypt={0xba, 0x2, {{'salsa20\x00'}, 0x390, "1f09f9d18b1830128f16f29440709520a7bcfaf0a00daa8b558adf4d821c6332392cf3c4f43ecb1b47495894d5d5883bf01a732e2b85ce1b8d280a3e8d822077ebaffe4cc4ab3c9d8143f3032b7eb8489295a36589d82c5e8702b5a48f031bcb0e6ab93fc7f30a2222386f74a44895b368c1"}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd2d, 0x2}}]}, 0x204}, 0x1, 0x0, 0x0, 0x48c0}, 0x4000044) 00:19:57 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r1}, &(0x7f0000000040)) process_vm_readv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/65, 0x41}, {&(0x7f00000000c0)=""/207, 0xcf}, {&(0x7f00000001c0)=""/173, 0xad}, {&(0x7f0000000280)=""/76, 0x4c}], 0x4, &(0x7f0000000880)=[{&(0x7f0000000340)=""/16, 0x10}, {&(0x7f0000000380)=""/70, 0x46}, {&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/168, 0xa8}, {&(0x7f0000000400)}], 0x7, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:19:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="0200000003", 0x5, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1197.364959] audit: type=1400 audit(1197.241:28): avc: denied { module_load } for pid=8779 comm="syz-executor.2" path="/syz-executor.2" dev="sda" ino=15935 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=system permissive=1 [ 1197.374783] Module has invalid ELF structures 00:19:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) finit_module(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18}, './file0\x00'}) open(&(0x7f0000000040)='./file0\x00', 0x4000, 0xa8) [ 1197.386726] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1197.388956] EXT4-fs (loop0): group descriptors corrupted! [ 1197.392008] Module has invalid ELF structures 00:20:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 1) 00:20:14 executing program 6: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004680), 0x0, 0x2, &(0x7f0000004800)={0x77359400}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 00:20:14 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:20:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000003c0), &(0x7f0000001600)=0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000380), &(0x7f0000000400)=0x4) close(r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r5) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8041) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) sendmsg$sock(r1, &(0x7f0000000240)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @private=0xa010102}, 0x4, 0x1, 0x4, 0x4}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="1ae27b1bd0f43927cbb778fca53a5f242746351658a871bd63c914c34dedc9de012613ef3d8b7b0cae792e91b1c5c1eb2963e86b812fc0fb3175908eb9346aefdfc63c9a73d5ac8cbcebb9246af2b72335ebacddca414abff9205d883b26cd12e8e03c4d6678cfd313b892593cc601a845a5fb85ccf5dd2737988c58cb5d704218afb9d690cae60f874032d222d666f1275c0d7a3642968e848271800da4df8a0870cdf1c555bbefba8f809015f322ff0c1f9a30e1e7f568cefda0bd6a3b943b4133943391d0981f7daa95cb32df9fd8e2e515eb0cba", 0xd6}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x88f2}}], 0x48}, 0x80) [ 1215.157475] FAULT_INJECTION: forcing a failure. [ 1215.157475] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.158970] CPU: 1 PID: 8813 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1215.159859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1215.160964] Call Trace: [ 1215.161327] dump_stack+0x107/0x167 [ 1215.161813] should_fail.cold+0x5/0xa [ 1215.162323] ? __do_sys_memfd_create+0xfb/0x450 [ 1215.162962] should_failslab+0x5/0x20 [ 1215.163469] __kmalloc+0x72/0x390 [ 1215.163943] __do_sys_memfd_create+0xfb/0x450 00:20:15 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f00000000c0)=""/163, 0xa3}, {&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f0000000280)=""/159, 0x9f}], 0x9) 00:20:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="0200000003", 0x5, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:20:15 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:20:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) [ 1215.164547] ? ksys_write+0x1a9/0x260 [ 1215.165167] ? memfd_file_seals_ptr+0x170/0x170 [ 1215.165803] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1215.166506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1215.167204] do_syscall_64+0x33/0x40 [ 1215.167710] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1215.168418] RIP: 0033:0x7ff2477d4b19 [ 1215.168922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1215.171421] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1215.172458] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007ff2477d4b19 [ 1215.173401] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007ff24782e0fb [ 1215.174363] RBP: 0000000000000003 R08: 0000000000000800 R09: ffffffffffffffff [ 1215.175339] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1215.176267] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000140 [ 1215.189041] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1215.190272] EXT4-fs (loop0): group descriptors corrupted! 00:20:15 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:20:15 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r1}, &(0x7f0000000040)) process_vm_readv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/65, 0x41}, {&(0x7f00000000c0)=""/207, 0xcf}, {&(0x7f00000001c0)=""/173, 0xad}, {&(0x7f0000000280)=""/76, 0x4c}], 0x4, &(0x7f0000000880)=[{&(0x7f0000000340)=""/16, 0x10}, {&(0x7f0000000380)=""/70, 0x46}, {&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/168, 0xa8}, {&(0x7f0000000400)}], 0x7, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:20:15 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:20:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="0200000003", 0x5, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:20:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4302, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffd, r0, 0xa) r3 = gettid() process_vm_readv(r3, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0xfffffffffffffba4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1215.443543] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1215.444670] EXT4-fs (loop0): group descriptors corrupted! 00:20:30 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0x20001a21}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:20:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:20:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r1}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x420}, 0x0, {0x0, r1}}, 0x3) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r2, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1e3, 0x6a}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000240)=0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000140)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x6609, 0x0) getpid() faccessat2(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x80, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) [ 1230.521958] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1230.523960] EXT4-fs (loop0): group descriptors corrupted! 00:20:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000", 0x7, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:20:30 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/13, 0xd}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000000500)=""/151, 0x97}], 0x6, &(0x7f0000001ec0)=[{&(0x7f0000000140)=""/101, 0x65}, {&(0x7f0000000640)=""/184, 0xb8}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/222, 0xde}, {&(0x7f0000000080)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:20:30 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:20:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:20:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 2) [ 1230.535665] FAULT_INJECTION: forcing a failure. [ 1230.535665] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.538064] CPU: 0 PID: 8849 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1230.539470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1230.541150] Call Trace: [ 1230.541691] dump_stack+0x107/0x167 [ 1230.542442] should_fail.cold+0x5/0xa [ 1230.543242] ? create_object.isra.0+0x3a/0xa20 [ 1230.544194] should_failslab+0x5/0x20 [ 1230.544991] kmem_cache_alloc+0x5b/0x310 [ 1230.545829] create_object.isra.0+0x3a/0xa20 [ 1230.546736] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1230.547809] __kmalloc+0x16e/0x390 [ 1230.548541] __do_sys_memfd_create+0xfb/0x450 [ 1230.549453] ? ksys_write+0x1a9/0x260 [ 1230.550230] ? memfd_file_seals_ptr+0x170/0x170 [ 1230.551246] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.552352] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1230.553413] do_syscall_64+0x33/0x40 [ 1230.554185] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1230.555238] RIP: 0033:0x7ff2477d4b19 [ 1230.555990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1230.559800] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1230.561340] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007ff2477d4b19 [ 1230.562784] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007ff24782e0fb [ 1230.564246] RBP: 0000000000000003 R08: 0000000000000800 R09: ffffffffffffffff [ 1230.565706] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1230.567158] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000140 00:20:30 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:20:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1e8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_CT={0x14, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x79}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x405}]}, @NFQA_PAYLOAD={0xc7, 0xa, "7b682f87ef2708b871e13d0521d1659e0daa5244d83f160ed7ab10d1b0db6208ce16bde2ba110f4789799c5b13e5b6ce638e5199ce45902212b4295ae5477f507305c354f09f28446493a80fbe5faeb6b0047a69907829b9a99c6c0bbcd8769ef7160da5549bd1290882ca2fabe8feceaefa6eae79b895171c132267f0e7a44ba81d8b0e9aeb96d974d3fac8207baa2bb18fa6ce9558d90486e2e096aa91f860635db281c62e713336b23c1813cc65112e1c71a6ee1493678251d1102d404821d7507b"}, @NFQA_CT={0xb0, 0xb, 0x0, 0x1, [@CTA_TUPLE_MASTER={0x68, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_ID={0x8}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x6, 0x5]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xf0d9}]}, @NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}]}, @NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4}, 0x4004004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1230.702204] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1230.704212] EXT4-fs (loop1): group descriptors corrupted! 00:20:30 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:20:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @private0, 0x3f}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYBLOB="01000000000000000000100000001800018014000200776c616e3000000000000000000000000800060000000000"], 0x34}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000002ec0)=0x1, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r3, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xef}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x8805) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x32e, 0x0, 0x1000}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x3f, 0x8001, 0xf}}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 00:20:30 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:20:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 3) [ 1230.821719] FAULT_INJECTION: forcing a failure. [ 1230.821719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1230.824110] CPU: 0 PID: 8872 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1230.825501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1230.827211] Call Trace: [ 1230.827753] dump_stack+0x107/0x167 [ 1230.828541] should_fail.cold+0x5/0xa [ 1230.829321] _copy_from_user+0x2e/0x1b0 [ 1230.830126] __do_sys_memfd_create+0x16d/0x450 [ 1230.831052] ? memfd_file_seals_ptr+0x170/0x170 [ 1230.831990] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.833044] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1230.834086] do_syscall_64+0x33/0x40 [ 1230.834858] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1230.835888] RIP: 0033:0x7ff2477d4b19 [ 1230.836635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1230.840330] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1230.841856] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007ff2477d4b19 [ 1230.843295] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007ff24782e0fb [ 1230.844723] RBP: 0000000000000003 R08: 0000000000000800 R09: ffffffffffffffff [ 1230.846153] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1230.847601] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000140 00:20:30 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() fallocate(r0, 0x0, 0x20, 0x9) process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:20:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000", 0x7, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:20:30 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1230.904370] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1230.906249] EXT4-fs (loop0): group descriptors corrupted! 00:20:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:20:30 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:20:30 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}], 0x2, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:20:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 4) [ 1231.100809] FAULT_INJECTION: forcing a failure. [ 1231.100809] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.103204] CPU: 0 PID: 8889 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1231.104596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.106280] Call Trace: [ 1231.106825] dump_stack+0x107/0x167 [ 1231.107586] should_fail.cold+0x5/0xa [ 1231.108360] ? shmem_alloc_inode+0x18/0x40 [ 1231.109222] should_failslab+0x5/0x20 [ 1231.109997] kmem_cache_alloc+0x5b/0x310 [ 1231.110816] ? shmem_destroy_inode+0x70/0x70 [ 1231.111707] shmem_alloc_inode+0x18/0x40 [ 1231.112519] ? shmem_destroy_inode+0x70/0x70 [ 1231.113404] alloc_inode+0x63/0x240 [ 1231.114137] new_inode+0x23/0x250 [ 1231.114865] shmem_get_inode+0x15e/0xbc0 [ 1231.115698] __shmem_file_setup+0xb8/0x320 [ 1231.116573] ? _copy_from_user+0xfb/0x1b0 [ 1231.117416] __do_sys_memfd_create+0x275/0x450 [ 1231.118346] ? memfd_file_seals_ptr+0x170/0x170 [ 1231.119307] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1231.120370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1231.121421] do_syscall_64+0x33/0x40 [ 1231.122183] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1231.123235] RIP: 0033:0x7ff2477d4b19 [ 1231.123996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.127725] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1231.129261] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007ff2477d4b19 [ 1231.130698] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007ff24782e0fb [ 1231.132144] RBP: 0000000000000003 R08: 0000000000000800 R09: ffffffffffffffff [ 1231.133576] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1231.135001] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000140 00:20:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000", 0x7, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1245.890810] FAULT_INJECTION: forcing a failure. [ 1245.890810] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.892186] CPU: 1 PID: 8913 Comm: syz-executor.1 Not tainted 5.10.200 #1 00:20:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:20:45 executing program 6: ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x485b, 0x10001, 0x1ff, 0x5, 0x9, 0x3ff, 0x8}) 00:20:45 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) r1 = syz_io_uring_setup(0x184c, &(0x7f0000015080)={0x0, 0xcf22, 0x10, 0x3, 0x211, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000015100)) syz_io_uring_setup(0x7597, &(0x7f0000015400)={0x0, 0x594, 0x4, 0x0, 0x320}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000015200)=0x0, &(0x7f0000015300)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)=0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000340)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x3) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r0, 0x10000000) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r10, &(0x7f0000015380)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x101, &(0x7f0000015340)=[r3, r1], 0x2}, 0x7fffffff) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000015180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x81) ioctl$TIOCSSOFTCAR(r11, 0x541a, &(0x7f0000000040)=0x4) write$char_usb(r0, &(0x7f0000000000)="419d63cfa5128f831183f5bfd25db7766bc060e2abe722b9c261a556d1204d353af06514abfb10b01f7cac376d140559d48922a11409116733c1038a94dc6b79492c84ef7af26c176dbf57c869fc7242375998e9df33e8f17e8094dc0e654b2a984947829bb13dc7bb0c101fbaaab790614bb458a0d2dbbec6ca5769a37d26abcc83831ddaa6bab19399fca0029d71c0ee442d728d01e2ed1bc93b4845ba5194141f5d2cc1eba023f8b66957abbd0c0c4d436e74a4c41f55a6a7be015d31d61ff7d3314242aa26e4697d80f01ef01022f038db985aaf42322f7e8991efe80d6add25d46e210088a6f8354f8fe567ce8e3a39a3452b3b3de96927d66077dd1d7181e882994e2020bdc42fa300299e5d211a721eb8c6ca5c9fa8f8793aef9edfc24e157c9313f3811fd5c08f22b6d1ecfade56527d5e6810eb73f571e6e337ab9b6ba76dd0c83b18196d6df9645a81ed7b534eaf775af7763c9c37bf8a2812e675802662b52812ffa50bbac03af195ba54bfb77a126e3053f348735e87c8c61550eb6b9f9f474adea07052fb7a60ddd24748f4d248ff64ce40e87751d9a6c10e69a73d062b688cb99067b9c8e8c51b1dcc8e66c08cd29876f319b4016ac566835864882af73d61a457890f87f25c8e2aabe4bcb8923cc109e3ff1708cd9d2fa5336bbab5d00cc99a2f6c2439069acda4f8ac00"/512, 0x8000000) 00:20:45 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}], 0x2, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:20:45 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:20:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 5) 00:20:45 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x454200, 0xf) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1245.893182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1245.894453] Call Trace: [ 1245.894778] dump_stack+0x107/0x167 [ 1245.895307] should_fail.cold+0x5/0xa [ 1245.895849] ? create_object.isra.0+0x3a/0xa20 [ 1245.896395] should_failslab+0x5/0x20 [ 1245.896837] kmem_cache_alloc+0x5b/0x310 [ 1245.897321] create_object.isra.0+0x3a/0xa20 [ 1245.897935] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1245.898651] kmem_cache_alloc+0x159/0x310 [ 1245.899156] ? shmem_destroy_inode+0x70/0x70 [ 1245.899697] shmem_alloc_inode+0x18/0x40 [ 1245.900260] ? shmem_destroy_inode+0x70/0x70 [ 1245.900891] alloc_inode+0x63/0x240 [ 1245.901320] new_inode+0x23/0x250 [ 1245.901728] shmem_get_inode+0x15e/0xbc0 [ 1245.902233] __shmem_file_setup+0xb8/0x320 [ 1245.902790] ? _copy_from_user+0xfb/0x1b0 [ 1245.903323] __do_sys_memfd_create+0x275/0x450 [ 1245.903865] ? memfd_file_seals_ptr+0x170/0x170 [ 1245.904541] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1245.905299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1245.905953] do_syscall_64+0x33/0x40 [ 1245.906435] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1245.907052] RIP: 0033:0x7ff2477d4b19 [ 1245.907506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1245.910114] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1245.911038] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007ff2477d4b19 [ 1245.911874] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007ff24782e0fb [ 1245.912810] RBP: 0000000000000003 R08: 0000000000000800 R09: ffffffffffffffff [ 1245.913829] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1245.914675] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000140 [ 1245.930792] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1245.931988] EXT4-fs (loop0): group descriptors corrupted! 00:20:45 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:20:45 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x400, 0x0) r0 = creat(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0xfff, 0x8e) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000002100)={{r1}, "44b6e7ba3e3cc9e7c290110173033fb0cbe3041f5e156e863e454569f124bd897f73c41f25e2794fb25db6bfa31970581c6b330dc27c67ccfd6dfe0097d079bca23401afaa84f20dddeb2e4d7a1438bb53f12bd75e0445e124103be47bb3092d760f091f001afa576726af3657d57e8a53a7a6255d770c0d2a69cc337689b8177699333941c66abf1660dabb346a28aa194477cb1f8167bcd17f2d02ba31237fdf81421273ff5de544bc659394e70ff379284da6eec888f92474352019af0a31ecbf4b8545107658437796ea0241aec4b39e0d7686f8c0dc44178bd69dd67fd7311db4d20a7de406841965cdc04e91e096a902b9d52f6183b0502c9fa2e1b5232d07685d64b7aaf6aa305abd4fbf21ad9a7a768cfe671439b2e307cdbe1d0725c3a78a33aa661c7998a70d15334775335c67dea8ebbe1fd0415b4941e32eefabdb024279198b7a3440f5f8a38fff85b8052df7a713aabcce9adff6260fb97864bc1ee3d78316475640ad9a4d53f7e33be99ea12ca3195b9fb1326c5a4c0912ec49b626319e9b3769d1a2087a4a34cfb0c73e9f6508fbea6477156ff6cffec3c07cd289662a0955d704b005e1d5c9d066e28faeb234adfa3e9f3026d88f0d40c01dcdd54966dd915d1bee3beeccece3d9c9379bfb5a0ce62f8582f376189a4a927441c2e0d30286e3e9d917453c0b3c8b7b2e35e458e3f3b2db0d88c012947c3ffea50acd4e5b0d8274fe98878484afe5f3de9f584055f88e403fb5fc60d2b4538256e6c68af57c9da153a2b1e54248e9b475b412c2ec5c8f8874bdff5f9b8dde75c03bbcc45709d45a76cb14d58bd1bca931a9257a27a82b5325ead281fa7bca6fece736e3dc917e5fabe169294f6a4347c13d41ecf29c859b86168b72108163aeadbdc60e1d680dfd68f21074bc622f577dc3e8ad056734d6cfa3a04bc3f172e4c9ed4ae9fb08c74fa662ea0a07b916b1a8aae86a70eb7ae740958194def74675ecaeafcd2f0561654f677dad0e979367c4f332c172ebbbc6e822b17884045a73fc71dcc2c4ccfd905f3e27e0414563d6eb0ce1623abf586216dcd1775f8b1c0dbe40a8e3b5c9386f41a11da72188f5674b4cf895d65431f6aa1eb1368eb59ba43e63e569b7ae3b06d629b83e0f9768f190cc6cbe4ad2c1b42c294087651a79066948be90a7f3e0a9ee417e4df07b2487787910ec26dab92586156df68aafffc4128f0ddc241d535cade23992a2a81645e578e69df815446266799f8630742eebd1f5e8a8096c352da99b4ad3e743ddca8d56a8852eeeaa6846aad53e63673d3299f7dc73283aa829cf72329fd17cf69fdb7101f4a5c9a3a745cc72a4826c7535957f2efeb1c62c27818de8797719e1e4161952c828ceb793d1aab487c0fae14a8ef591cef8dbbd5ecf636ce54834cc98126179d8ac294313ff560d26a401c135605237ebb712c40868f7b19b47c66eabbc717456ddf469699519312be7e2a6c23d94b2d6273370203199ea9e1a677ed3403abef250e634befa4d425288a10ba9b4719f6f452ebb9acb71664bc4f195a73c4da0a28459ceee32ae5413ca2f7ac99246c86cf9a84fb8bd0e9af2a570a2dd636bd063d4b35d9211a9430c46f62a6c2bac02dc1995b79705185ee2ce1a29a4a0e4b7d50499f5a9eaa8fae561c5b99e05491b008e024820345b7f611020116fdcbe71041c538dce14a2f42d1b9cebe2861154dd8624294e88aef6c10ec6b33772d76c209a3762b23d0d00f9fbdac88ea1dd27703135cb1f86e21e70e9f0515f0e76a297352cb28c0270ae30d6ba1995865d4b74e17378ea75e96115dfbbb36adf49bca7d732f9049eea8c8f938d3b5a5a6b3ea35b3f59b8d113c73fc37b4a6ab5705625c2e2fa5843e3126fa374db7b441cfc82be4e7693fc222d8498eb78f7b595d3da2f9e90d2769de8c6d7e0fe54e8e531566cbdc810904f56769bbf97c6168bdb9fc02b9ffad66f4528a74114e14148d5871210b934bccae752a3aee7bb39986a4daedb49e3c1459fc3fc482193ec5f755ec8e542e4eb69f6eb61854d3218163541da4827cf36a2510a100fe423ffe99b96216fb03bb14e3496d531e1d05a6caf4df3ca8790c8283527363cb2852c5b7f758dd0640b4e88e0e73dd9a555e54a62565edb9e12c95c2082d82723ea56ebe9cbd1de5682ff35107faccc5af4068751f13e841bbeb6e88de48155f048ea0d476e6d03597b92876404a974725273ad34667212d22b63859a8739a5c5d860473e4e007f41cabbb0c85aa36f0ceddcbdf5a8ac026176ea0a48d2855a20d949ec818becf4a6f9ca28392f8c458cbbc55d3b0f4ad6275e29c17b3e584182d45bc86102d3314bd093c10d5f902614541bff3a256d46ceb381ff1d6ff4ae589b2cd908b07b6a751554279163b492f05de08c02fab897d475933f7cc01adc4fdf78e0822eea2900e5ddd094f77ab3ed488ecf4d704a7e02c1e4f45a7b8cff9e0d7c5d48c8e3aa628ca8260a044160e15269e330830e827a4fb4496d42adf777aa9f014af159a7fcd26e49be30a2e997ffa9c8ef061e5fad6b24f3622b1b98aee1065b64d81667d3a36daca99caa358c631f562ee2a6cfb5978892805fdf720314309b1d669c3e32590d81f684788a04d34e02de747ab30c443b6ae09f15bd04924a2832d61c24ecd75f4b20278e38c40022069458bde6f845e456b7ccbdc8a0e6270301974ea48ff871f0013eb9a2ab3844b1ed24e5ce8a8eb4a530b0d46ba159711782f973e4d9cbd5af83b55a6da60d3100b3374e0c3cecb33ded6843b3e6d84312e36eb781a764c5e9b5177fb1a2666a5480435a8923d75422f93b398f952e9063565f8003b3bf8bcb47fd2a74bbd7a5e7abf7a32d8e23d247ea064c63f3cdb2df42f869516665b9aa34cfc8fb298fc1d542253980763374bf53cf40870d97e9445f1075cf9a5eb9598a375dfd69094eb5a858a29df79bcba2d4e0d95dbab8be9eccbcb20adb041f697abd3884c8e95f92f27b413a51fbb52d03cfac9b755bbe38cdb053d1350b794bea8d6c6fb10b1a9c19705a37e3a3bfed2fa17d7f80ae0e6a74015b16618bcc485a6141301b14935c6a73a921cff27e0c783ae37e7b0b7f82ffeea32799463e7c00d420e0597e1666c02efbd55ac4d61d81090f7b47f0fab38ba02bf5060714ec6d7aaed06eac357e212d45dedfd02640270e590286fd2ecc575374a55ab79861828a624de4b02ecb89c4a54eb734bfa83b3cac8210e7b1ae9827611942e24b63aa9f993dc1d45ab4d9fb903dc6faa4356a4fac18daa17043042d4f3a66530409b7ce822dcf9c6736b4a98f77907e5214d41637fb0ae667977e8c0305299fc2d5a61540bab0249cee21db3f2c5a8f4d8cab27b4b02f68eaaa844b223e0dbf45745ea6b8449a1e23ae3eec0f003c5afedb7605251a50b8667e742fd82edb5150698adad70ae29f053d4c1ad111ade91d4da839d444444bafb0c206b2db7adc747491f0c5e752c90e5df77aa2af6bd4b01f1c15912473a4a6493cdd53e7acba0ff6451041d37c6af68e0b4986243beb5dccb92b424eb696b0361570d2d4d750c1277ee0b1053acaaf1cf03c22fe340e5cc91256f603a656c8b1c4fda87f1a8de3425e96a9539042e864e6e7349e06f52039ccee527f1504e63d23917c38a28be35a4dea004e7e45f5f0865eb67211ba76fd45f05e185c5f00bd9634ad42371c4a9912ff8bf2d2b0ce128e22b99128fce7acdcf37834876203dfe78b2ca6911339825c7422de3ff03d2ccfbdcc9871827f98439f2dc6db836282bfb3bca95ef5b38813d3038f249e6d0fd717ccd0caa6f32449643791c3a13dd1f9fe25ad15cc53970be1be9c2da4dea22c044003d7300a78433d8b3a431101dc0d4a4bd8bbe51f9aac888443308d41bfb99715378b6ba73e98c38fc2828bd46a90675fe8af0733b82dfa5b5e634af21aaabf92a1c6555d3961615f2c10b94dae0b9464bb45738b5d9d32365081bdbc89dfc0d20243f0ab654c6d12f1438bf5730512dc3aa51ae28db37bbfc12c4b82086b686f5b09c8cc0a68a6ec864cad124c44fa04102aa91cf888a73e42c98b2b89823b836477f6c586d5bf819bda835f663af03bfb747460914c75313908e216ddda78c8f3a03649a3d1088cfd7fb03342591ef832ec758b3667c6ccfc6242ba172c4e2b4c28b00a889f4ace0d758c35ec9bda1df66f8c7c9a398a1ee7b55f905fac392b803c6359ffbfc091ed04174e62ed4e424ec31ca5691efc82265966bf40c91c4a8732b9c096a0d2a3d4fb960cb6ef92c6f088dbd532196fcd716187c8208562780dd2cd55dcf2013ea0a913fbb4215d9b0d7e3bcaee2a2749b2f51f164428ae44d08ff692a7722e57aaf42706f96633a87ebc53e6f1758d418e5b391a00bc8c37172503e79bb9f6ca7558dc8298793d3d47accaef4aeb19ab2651fbca038966f9381f87722f4e7eaae498923cf0872bbb9df25a39231c7f1212dec2e8454d6e8e41f194ad2c809ff5473eef1f3a6e57b06a7f8391978dd2570a4375a0b9a0109109ec6273d026c5de295c6200504bd9916269734a1c872a3da1be439fc30e546b45f35739598eb2bea64ab93f78ebd8dfbd9476e5b673e29ed1dd42441e20b9e7b3d042b5e8094cc25daabce97ef385c6a87de542d369a361c87369a5e4cdbc6290977bff1f96500090139f58c21faa0f8eda256560bdb09e6c4487b527b86260733d89b30e2cb6618cc3f7fc248e7486ffb5af903f30f672873835e7c0917b6a33ea64927eb4054fc3192fa4aa671c74e61f59bc149514542dc04af72d580bdf049d0a0451ac4b45bcdf9fa9d597ee213eabaae4106185ce2ba2551b1cb0592dff8e9ec085912e70559dd336ee572aa9345cd42260a83f612192c0f88aa3ddb2b9334b8ef93d7a59a3b855c2e4b4a421bcb3085afb776408a8b488ec838ccf3e08582ef920db08c618251daad9b44a50dfba53e985cfbfecc78861961af0b3cc7ff4dd1ab7bfffdf1e8110849e3d18ebd3295b781dafd54825a065d315cd1fd2ef59876de11e38b1d754a85541beeab3d21c141638a9b538b6f0a3ff05fb4a2a4bf1342424204e9da38393eaa276fbb02390e3f3d10baedcbbf38337c641d9fbb8b975453112d3cb6d1e45ebd752576cf20ebf97abee8177b14ae24f290ce02a46b47435ae16d4b4fe40bbfe198af4185e3f68f82e78f6fd3bdcf6e3d284dcbeb1343e52563fb92fc353a94f824f59d8ea52748f3513d2bdcc8fb7d4f37a8e42cf374370db5772b5b9fe155971c8e0255f8422967913e9a0aa9e82584c4baedc40432538a8792149a13af17873ae486d3063925216a0ed1aa5da0e62f747428c427467806924c4062ab6a89b0471a01e4b038574a889160a239321ca24aece22d8369c2b9fe38effa587a1b61fef5f823b63a4a3f40c5bda701af36c64962a30a629556da5eb685b836f2f1beadeda08bec1d7eb9706be207be5c8b10a5b5eaf806646cbfc1ece0c8777dd012b4b0881789efb49afd5739b3ed7c429b993b5e7036e0ddf2dfcee118a51a3a46ed31b6e056b19d4f35fb540f985f5e3b77beb6756e8f27725e4da82c133d81b72460adc7460c57e824db14168f83b69e0feba8cc24ee4f3433b6395d7fb33623c0fef756128f35805f0ab9f7603f643b17da7e4c269887442c559a6804a4857f03a6dec88ea2736992d484debf7560d29cddb47fbce2317e4451043b87810fcba22f077e81796c728a986e699ebae333ee2245a5197"}) mount$cgroup(0x0, &(0x7f0000001900)='./file0/file0\x00', &(0x7f0000001940), 0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="05000000000000002c"]) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000140)={0x0, 0x5, 0x2}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x21, &(0x7f0000000440), &(0x7f0000000480)=0x4) [ 1245.985821] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1245.988061] EXT4-fs (loop1): group descriptors corrupted! 00:20:45 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}], 0x2, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1246.041148] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1246.042351] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 1246.043355] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 1246.044205] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 40 00 00 40 00 [ 1246.045218] blk_update_request: critical target error, dev sr0, sector 256 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 0 [ 1246.049650] cgroup: Unknown subsys name '' [ 1246.065575] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1246.066830] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 1246.067675] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 1246.068682] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 00 00 00 40 00 [ 1246.069527] blk_update_request: critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 0 [ 1246.071876] cgroup: Unknown subsys name '' [ 1246.086689] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1246.088124] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 1246.089066] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 1246.089895] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 80 00 00 40 00 [ 1246.090729] blk_update_request: critical target error, dev sr0, sector 512 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 0 [ 1246.107514] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1246.108789] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 1246.109738] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 1246.110577] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 c0 00 00 40 00 [ 1246.111427] blk_update_request: critical target error, dev sr0, sector 768 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 0 [ 1246.127553] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1246.128544] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 1246.129322] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 1246.130165] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 00 00 00 40 00 [ 1246.130925] blk_update_request: critical target error, dev sr0, sector 1024 op 0x1:(WRITE) flags 0x8800 phys_seg 32 prio class 0 00:20:46 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:21:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 6) 00:21:01 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x5, 0x4010, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x44, 0x1, @perf_bp={&(0x7f0000000040), 0x3}, 0x8222, 0xfff, 0x3f, 0x0, 0x2, 0x2, 0x1000, 0x0, 0x6, 0x0, 0x8000000100}, r0, 0xffffffffffffffff, r1, 0x1) process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1261.181349] FAULT_INJECTION: forcing a failure. [ 1261.181349] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.183340] CPU: 1 PID: 8942 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1261.184430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1261.185748] Call Trace: [ 1261.186170] dump_stack+0x107/0x167 [ 1261.186754] should_fail.cold+0x5/0xa [ 1261.187374] ? security_inode_alloc+0x34/0x160 [ 1261.188105] should_failslab+0x5/0x20 [ 1261.188705] kmem_cache_alloc+0x5b/0x310 [ 1261.189351] security_inode_alloc+0x34/0x160 [ 1261.190050] inode_init_always+0xa4e/0xd10 [ 1261.190720] ? shmem_destroy_inode+0x70/0x70 [ 1261.191432] alloc_inode+0x84/0x240 [ 1261.192013] new_inode+0x23/0x250 [ 1261.192623] shmem_get_inode+0x15e/0xbc0 [ 1261.193295] __shmem_file_setup+0xb8/0x320 [ 1261.194171] ? _copy_from_user+0xfb/0x1b0 [ 1261.194935] __do_sys_memfd_create+0x275/0x450 00:21:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:21:01 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:21:01 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {0x0}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:21:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x200}, 0x0, 0x0, 0x0, 0x0, 0x6aa1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(0xffffffffffffffff, 0x3, 0x900500, 0x30000000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000"], 0x1c}}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="0025f01510b7c800000000000000ad6a696585d057abe8d883747d90d0508a7463daa7b8724c2a032ea61c69069a6584a47024adfc5c95697d79c8bb37501a12f377a93b3db2add177c894e78c11940f9ed16cbad6c3f5ac83101365643c992b9f397d73c218ff1046039ba9356c42ba8159fdfa6d2451e3389f2bd07cecba6d17ffee6bcce3b5d6453cb8bd740dc47755dee8e8f78519e68b68959462d10c2bea39c2509e5d9b448c6bb7e0ad7595799c2e5e76"], 0xe) socket$netlink(0x10, 0x3, 0xe) fallocate(0xffffffffffffffff, 0x3, 0x900500, 0x30000000000) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) dup3(r0, r2, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) close(r2) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000380)={0x0, {}, 0x0, {}, 0x6, 0x4, 0x3, 0x4, "51d68d962cd48a46b4499817f37fc3db437cc29c3521379bde681b850a24f8bb4b0291b71e91115d742eee4e7dc21951a8d29fb2c2c258fe6b5489d6796d8072", "6354972fef2722adc5581bf7473fe9e1845978f64a3e1738dc3629305ab52849", [0xffff, 0x8aa]}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x84) 00:21:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000, 0x4, 0x0, 0x0, 0x0, 0xc0000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x2d0d) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20602, 0x11f) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)) r4 = accept4$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000380)=0x6e, 0x80000) fallocate(r4, 0x44, 0xbe00, 0x81) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x6, 0xb0, 0x5}) openat$incfs(r2, &(0x7f0000000240)='.pending_reads\x00', 0xf0540, 0x88) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x6, 0x40, 0x2, 0x1, 0x0, 0x2, 0x10, 0x11, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x4, 0x3}, 0x19008, 0x3, 0x6, 0xe, 0x9, 0xfffffff9, 0x5405, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x2) sendfile(r0, r1, 0x0, 0x100000001) 00:21:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1261.195854] ? memfd_file_seals_ptr+0x170/0x170 [ 1261.196705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1261.197556] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1261.198400] do_syscall_64+0x33/0x40 [ 1261.199004] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1261.199859] RIP: 0033:0x7ff2477d4b19 [ 1261.200467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1261.203462] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1261.204695] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007ff2477d4b19 [ 1261.205854] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007ff24782e0fb [ 1261.207013] RBP: 0000000000000003 R08: 0000000000000800 R09: ffffffffffffffff [ 1261.208171] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1261.209319] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000140 00:21:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 7) [ 1261.291551] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1261.293725] EXT4-fs (loop0): group descriptors corrupted! [ 1261.296588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8956 comm=syz-executor.6 [ 1261.339695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8961 comm=syz-executor.6 [ 1261.368869] FAULT_INJECTION: forcing a failure. [ 1261.368869] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.370916] CPU: 1 PID: 8965 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1261.372082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1261.373483] Call Trace: [ 1261.373939] dump_stack+0x107/0x167 [ 1261.374568] should_fail.cold+0x5/0xa [ 1261.375210] ? create_object.isra.0+0x3a/0xa20 [ 1261.375992] should_failslab+0x5/0x20 [ 1261.376636] kmem_cache_alloc+0x5b/0x310 [ 1261.377329] create_object.isra.0+0x3a/0xa20 [ 1261.378063] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1261.378986] kmem_cache_alloc+0x159/0x310 [ 1261.379747] security_inode_alloc+0x34/0x160 [ 1261.380522] inode_init_always+0xa4e/0xd10 [ 1261.381262] ? shmem_destroy_inode+0x70/0x70 [ 1261.382022] alloc_inode+0x84/0x240 [ 1261.382665] new_inode+0x23/0x250 [ 1261.383284] shmem_get_inode+0x15e/0xbc0 [ 1261.383997] __shmem_file_setup+0xb8/0x320 [ 1261.384730] ? _copy_from_user+0xfb/0x1b0 [ 1261.385447] __do_sys_memfd_create+0x275/0x450 [ 1261.386244] ? memfd_file_seals_ptr+0x170/0x170 [ 1261.387085] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1261.388011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1261.388911] do_syscall_64+0x33/0x40 [ 1261.389568] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1261.390461] RIP: 0033:0x7ff2477d4b19 [ 1261.391107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1261.394315] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1261.395635] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007ff2477d4b19 [ 1261.396867] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007ff24782e0fb [ 1261.398098] RBP: 0000000000000003 R08: 0000000000000800 R09: ffffffffffffffff [ 1261.399348] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1261.400588] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000140 00:21:01 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {0x0}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1261.448411] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1261.450634] EXT4-fs (loop1): group descriptors corrupted! 00:21:01 executing program 6: init_module(&(0x7f0000001f40)='\xff\xff', 0x2, &(0x7f0000001f80)='\x00') setxattr(0x0, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000002040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20040, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) capset(0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x6}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') capset(&(0x7f0000001fc0)={0x20080522, 0xffffffffffffffff}, &(0x7f0000002000)={0x1, 0x5, 0x5, 0xfffffdb7, 0x1, 0xffffffff}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) vmsplice(r1, &(0x7f0000003140)=[{&(0x7f0000001140)="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", 0xe00}, {&(0x7f0000002140)="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", 0xc00}], 0x2, 0x8) 00:21:01 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:21:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1261.620556] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1261.622207] EXT4-fs (loop0): group descriptors corrupted! 00:21:01 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:21:01 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x2d, &(0x7f0000000040)={0x3c, 0x4, 0x7}) process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:21:01 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {0x0}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:21:17 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {0x0}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:21:17 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(0x0, 0x0, 0x9, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYRESHEX=0xee01, @ANYBLOB="f5f58116"]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r1, r0, &(0x7f0000000100)=0xe9, 0x8000) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000001840)) r2 = socket$inet(0xa, 0x3, 0xff) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180), 0x4) r4 = dup(r3) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000180), 0x4) openat(r4, &(0x7f00000000c0)='./file1\x00', 0x842, 0x2e) syz_io_uring_complete(0x0) r5 = dup(0xffffffffffffffff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(0xffffffffffffffff) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f00000001c0)={{}, 0x0, 0x0, @unused=[0x5, 0x9], @subvolid}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:21:17 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:21:17 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1880, 0x0, 0x0, 0x0, 0x10001, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r9, r4, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x0, 0x0, 0x5f1b8110c4d1129b, {0x0, r5}}, 0x5) process_vm_readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000600)=""/226, 0xe2}, {&(0x7f0000000700)=""/186, 0xba}], 0x3, &(0x7f0000000bc0)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000240)}, {&(0x7f00000007c0)=""/137, 0x89}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000900)=""/181, 0xb5}, {&(0x7f00000009c0)=""/195, 0xc3}, {&(0x7f0000000400)=""/128, 0x80}, {&(0x7f0000000ac0)=""/227, 0xe3}], 0x8, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1fb, 0x0, 0x2000, 0x0, 0x0, {0x0, r5}}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r10, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x9, 0x432}) 00:21:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 8) 00:21:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:21:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001980)=""/161, 0xa1}], 0x2, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:21:17 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1277.741041] FAULT_INJECTION: forcing a failure. [ 1277.741041] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.743377] CPU: 0 PID: 9005 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1277.744790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1277.746442] Call Trace: [ 1277.746971] dump_stack+0x107/0x167 [ 1277.747718] should_fail.cold+0x5/0xa 00:21:17 executing program 2: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000080)=0x8) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r2) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1bc4451e1f202122232425262728292a2b32333400083723c8081953e7c5383b3a3b3c3d3e3f40000000000000"], 0x48, r1) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}, 0x1000, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1277.748484] ? __d_alloc+0x2a/0x990 [ 1277.749378] should_failslab+0x5/0x20 [ 1277.750141] kmem_cache_alloc+0x5b/0x310 [ 1277.750954] ? trace_hardirqs_on+0x5b/0x180 [ 1277.751846] __d_alloc+0x2a/0x990 [ 1277.752565] d_alloc_pseudo+0x19/0x70 [ 1277.753326] alloc_file_pseudo+0xce/0x250 [ 1277.754150] ? alloc_file+0x5a0/0x5a0 [ 1277.754909] ? shmem_get_inode+0x55c/0xbc0 [ 1277.755770] __shmem_file_setup+0x144/0x320 [ 1277.756624] ? _copy_from_user+0xfb/0x1b0 [ 1277.757451] __do_sys_memfd_create+0x275/0x450 [ 1277.758391] ? memfd_file_seals_ptr+0x170/0x170 [ 1277.759320] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1277.760369] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1277.761397] do_syscall_64+0x33/0x40 [ 1277.762138] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1277.763153] RIP: 0033:0x7ff2477d4b19 [ 1277.763910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1277.767556] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1277.769065] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007ff2477d4b19 [ 1277.770479] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007ff24782e0fb [ 1277.771913] RBP: 0000000000000003 R08: 0000000000000800 R09: ffffffffffffffff [ 1277.773321] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1277.774731] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000140 00:21:17 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:21:17 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x348, 0x18, 0xc21, 0x70bd2c, 0x0, {0x7}, [@nested={0xc, 0x6f, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @uid=r2}]}, @typed={0x14, 0x20, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @typed={0x8, 0x7d, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x1ee, 0x90, 0x0, 0x1, [@generic="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", @generic="587c6f722e415062961bbcd091e2cad07add3a05514e4f838bff40f0c0847b7b3da46c1c3753af16a3d6cd7bf0553be5fc", @typed={0x14, 0x44, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x94, 0x0, 0x0, @fd=r3}, @generic="f1d9d67bb23f4e01d2172437d7f96416027cd80a8dc0e7ffec6c109a56b136717783704023576c9fbf09be623c948578257ae8df1e20eb2c76a20a2a4e6f19e38821a3c90945bfcef9cd9b731faa97c67908963179147b44dd119f355bde78466e"]}, @typed={0x8, 0x61, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x114, 0x28, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @uid=r6}, @generic="fefda3b5f47c6792ac2c1eeea9bd298d2e322b3a855255470b622da4821c6bb83ba5fd4eaf142a6caefefa15fd6a06", @generic="620c2cb8a38a4745217997d36d1440f285e4eac858a079424975ffcf719d73374501a4e5cbc36c4b19bf54adbdee734d2ad5e6bb2509624c1c50404cae50b6379492acd3ccd1dc45750f4918c91510c8be415ad9dbd3c55f171a909c52e6b3bca2e5848d0d9e00d260fcb1a0dc1fa7ce23caec69eb370c17d4405848038b7d44f6fb85076592ac239dceb4276a828028a1e63bd2759332dff0a33e6868f53793e45b96e5e78f9ca9afca725c2e9499da5cf954f2e5fdf58e7768078b040002d17df087370d5640500205ec0ee68be42ddaa1404a1afbc47405"]}]}, 0x348}}, 0x24000840) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x129800, 0x2c, 0x8}, 0x18) ioctl$CDROMREADTOCENTRY(r7, 0x5306, &(0x7f00000000c0)={0x2, 0x6, 0x7, 0x3, @lba=0x40, 0x20}) r8 = fcntl$dupfd(r1, 0x406, r0) ioctl$CDROM_LAST_WRITTEN(r8, 0x5395, &(0x7f0000000080)) [ 1277.817796] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1277.819779] EXT4-fs (loop0): group descriptors corrupted! 00:21:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 9) 00:21:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001980)=""/161, 0xa1}], 0x2, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1277.902104] FAULT_INJECTION: forcing a failure. [ 1277.902104] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.903530] CPU: 1 PID: 9023 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1277.904317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1277.905246] Call Trace: [ 1277.905549] dump_stack+0x107/0x167 [ 1277.905955] should_fail.cold+0x5/0xa [ 1277.906392] ? create_object.isra.0+0x3a/0xa20 [ 1277.906903] should_failslab+0x5/0x20 [ 1277.907325] kmem_cache_alloc+0x5b/0x310 [ 1277.907785] create_object.isra.0+0x3a/0xa20 [ 1277.908275] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1277.908860] kmem_cache_alloc+0x159/0x310 [ 1277.909334] ? trace_hardirqs_on+0x5b/0x180 [ 1277.909840] __d_alloc+0x2a/0x990 [ 1277.910258] d_alloc_pseudo+0x19/0x70 [ 1277.910700] alloc_file_pseudo+0xce/0x250 [ 1277.911164] ? alloc_file+0x5a0/0x5a0 [ 1277.911631] ? shmem_get_inode+0x55c/0xbc0 [ 1277.912112] __shmem_file_setup+0x144/0x320 [ 1277.912627] ? _copy_from_user+0xfb/0x1b0 [ 1277.913118] __do_sys_memfd_create+0x275/0x450 [ 1277.913635] ? memfd_file_seals_ptr+0x170/0x170 [ 1277.914173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1277.914773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1277.915369] do_syscall_64+0x33/0x40 [ 1277.915806] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1277.916396] RIP: 0033:0x7ff2477d4b19 [ 1277.916826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1277.918925] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1277.919804] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007ff2477d4b19 [ 1277.920619] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007ff24782e0fb [ 1277.921421] RBP: 0000000000000003 R08: 0000000000000800 R09: ffffffffffffffff [ 1277.922226] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1277.923026] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000140 [ 1277.936558] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1277.937755] EXT4-fs (loop1): group descriptors corrupted! 00:21:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 10) [ 1277.976649] FAULT_INJECTION: forcing a failure. [ 1277.976649] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.977961] CPU: 1 PID: 9031 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1277.978734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1277.979650] Call Trace: [ 1277.979967] dump_stack+0x107/0x167 [ 1277.980388] should_fail.cold+0x5/0xa [ 1277.980812] ? __alloc_file+0x21/0x320 [ 1277.981250] should_failslab+0x5/0x20 [ 1277.981671] kmem_cache_alloc+0x5b/0x310 [ 1277.982125] __alloc_file+0x21/0x320 [ 1277.982535] alloc_empty_file+0x6d/0x170 [ 1277.982985] alloc_file+0x5e/0x5a0 [ 1277.983384] alloc_file_pseudo+0x16a/0x250 [ 1277.983871] ? alloc_file+0x5a0/0x5a0 [ 1277.984300] ? shmem_get_inode+0x55c/0xbc0 [ 1277.984755] __shmem_file_setup+0x144/0x320 [ 1277.985238] ? _copy_from_user+0xfb/0x1b0 [ 1277.985697] __do_sys_memfd_create+0x275/0x450 [ 1277.986200] ? memfd_file_seals_ptr+0x170/0x170 [ 1277.986715] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1277.987301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1277.987878] do_syscall_64+0x33/0x40 [ 1277.988310] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1277.988875] RIP: 0033:0x7ff2477d4b19 [ 1277.989292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1277.991241] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1277.992093] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007ff2477d4b19 [ 1277.992870] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007ff24782e0fb [ 1277.993656] RBP: 0000000000000003 R08: 0000000000000800 R09: ffffffffffffffff [ 1277.994443] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1277.995231] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000140 00:21:17 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:21:17 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:21:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001980)=""/161, 0xa1}], 0x2, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1278.079183] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1278.080724] EXT4-fs (loop0): group descriptors corrupted! 00:21:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:21:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:21:32 executing program 6: syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5c}, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x1e9b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0x1000, &(0x7f0000001e00)=""/4096}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)={0x400800, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7fffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="00762f1b", @ANYRES16=r2, @ANYBLOB="01000000000000041e008900000008000300", @ANYRES32=r3, @ANYBLOB="04001d80"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x8, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r4 = getpgrp(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) dup2(r6, r1) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0xde, 0x0, 0x1, 0x7fff, r4}) 00:21:32 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000000040)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001e00)={0x1320, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfd, {0x5}, [@generic="f0d765df13fe244b773157ef957a100aa32deb3a1fdc915c9c6e2e6570247a6fde47b0e7804916b239ab", @nested={0x1253, 0x32, 0x0, 0x1, [@generic="2d242e59dbb9f3ad565285e8b3697506a5b91696e1c44a42fc0d8064bad0a745ccd6a6a817c70b5aad1c73398c3f7bac95393e22cb1a9459e67b1b65b9c3e6c5b92cfa431c9bf0c32a6a5150fd8c15513a6b8170f7d042f4ef", @typed={0x8, 0x77, 0x0, 0x0, @pid=r0}, @generic="9c5916dac380811eac13ccdd962efd5f7326b42fc08f675399ca69874c4bc99e03d3ba3d1a61e53b845e9b3591ff84038948bf1027c51257917eef97439c913e275d7e8ee0e4c0565cee2e2bab76f641e24f96d03cba2f61f23e37dc27bc56b147dc53d7d71f92b0adda908d5ebff15cb50aa50dbc803712dff548432ef6b594ce4d53c6e8a32eb4969409d3e2e768c9878c12eb10953227234b23ab85b83d5e1a43879f6d7065edfbdae08a4c25a7f439ef72a8163c84561b3d3b251a2310591485b3b78eddbfcaef72c5012fbe18c6d05db19d2c273dfe892ed47cab87277eec667fc949dd7e491af8ec00000000", @generic="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", @typed={0x8, 0x35, 0x0, 0x0, @fd}, @typed={0x4, 0x4b}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x80000000}, @generic="2edaf59d179a2a043e5092b70c18b494ce1894aec824110625674ed2e0fa1670b8098f64388b6a44fbf828cd3341a89bfa9f5993f9ee97fbc016c37a3880eb7d68efa085dcdfdc41c4d1cd724810858719ec5b9f191b77dbc71ac6b10a97b5742516bbe96a8899b2e37f287ca235745f5faea2047d14275a4bfdb1de8c8c26094e72bc610655135eda233b6bc5bddb6bc31b3f0135bf6b10d2333cf6aff55f4a305cad8921c0dcd2067357d961558b5945ddd43294dd78008bdd4968105ebf009eb400b1593c39666d42e7dc37dc015b2ff0588eb1747e658ad6e1fca00f79"]}, @typed={0x9, 0x37, 0x0, 0x0, @str='vfat\x00'}, @generic, @typed={0x8, 0x12, 0x0, 0x0, @fd=r1}, @typed={0x6c, 0x38, 0x0, 0x0, @str='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4x\xb0\xef\x7f\xff0n\x89`\xe4\xc6O\xca\x1daB\xd7\xb5\x10F\xab\b)\xc9\xd5\x0f\b\x8b\xfa\x81)E\xdd\xaf\xc8\x9bW\xb9x\xb4\xa79\x1a\xa5\xfc\x8f\xff\x97Lp\xccl\x020i\xdc\x1c\xae\x00\xa6\xfaw\xa9\xc6\xf1,Y\xddU\xc7M\x19\xb0o9\xb1\xa4\n\xebrs\x14F\xc9\xcc\xb9\xaf\x18\x13\xf2\x02\xb0P'}, @nested={0xc, 0x65, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @ipv4=@local}]}]}, 0x1320}, 0x1, 0x0, 0x0, 0x40480c5}, 0x4080) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000140)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4x\xb0\xef\x7f\xff0n\x89`\xe4\xc6O\xca\x1daB\xd7\xb5\x10F\xab\b)\xc9\xd5\x0f\b\x8b\xfa\x81)E\xdd\xaf\xc8\x9bW\xb9x\xb4\xa79\x1a\xa5\xfc\x8f\xff\x97Lp\xccl\x020i\xdc\x1c\xae\x00\xa6\xfaw\xa9\xc6\xf1,Y\xddU\xc7M\x19\xb0o9\xb1\xa4\n\xebrs\x14F\xc9\xcc\xb9\xaf\x18\x13\xf2\x02\xb0P', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x80380, 0x0, 0x2}, 0x18) r3 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) unlinkat(r3, &(0x7f00000004c0)='./file0\x00', 0x200) openat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x11) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000300)=[{&(0x7f00000003c0)="4c85dc8f22048aa257b52a0a4d12ee0e6f78179719e64d38f4f803744eee1b6f0427d81054bd5c005f97f36cbd6b24d61014927ade33dbedd1ada0f7ac96d448968d5385faf0e250edb867749982a552e8c71eada4b1c6ec024636dabb578827f9b4d9835d31ca303a1ff9e2a22aa3e08572bcced55c8f6e74d27dd2e522ba46acde548541442bf9ab78ff462dc94284957572a32034a2642865b5babdee6c7d4e7949f567f9865e5c61335cb14b3f9f39c2b9ef1694dafd04", 0xb9, 0x7}], 0x10, &(0x7f0000000340)={[], [{@fowner_lt={'fowner<', 0xee00}}, {@subj_user={'subj_user', 0x3d, '/dev/snd/seq\x00'}}]}) ftruncate(r2, 0x0) 00:21:32 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x9, 0x8, 0x40, 0x3f, 0x0, 0x1000, 0x1000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x2}, 0x40204, 0x1, 0x7fffffff, 0x5, 0x80000001, 0x4, 0x1000, 0x0, 0xd7, 0x0, 0xfffffffffffffb67}, r1, 0xe, r0, 0x9) 00:21:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 11) 00:21:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {0x0}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:21:32 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0x0, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1292.605956] FAULT_INJECTION: forcing a failure. [ 1292.605956] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.607491] CPU: 1 PID: 9055 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1292.608315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1292.609332] Call Trace: [ 1292.609661] dump_stack+0x107/0x167 [ 1292.610096] should_fail.cold+0x5/0xa [ 1292.610576] ? create_object.isra.0+0x3a/0xa20 [ 1292.611112] should_failslab+0x5/0x20 [ 1292.611580] kmem_cache_alloc+0x5b/0x310 [ 1292.612072] create_object.isra.0+0x3a/0xa20 [ 1292.612593] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1292.613221] kmem_cache_alloc+0x159/0x310 [ 1292.613736] __alloc_file+0x21/0x320 [ 1292.614199] alloc_empty_file+0x6d/0x170 [ 1292.614697] alloc_file+0x5e/0x5a0 [ 1292.615121] alloc_file_pseudo+0x16a/0x250 [ 1292.615635] ? alloc_file+0x5a0/0x5a0 [ 1292.616131] ? shmem_get_inode+0x55c/0xbc0 [ 1292.616686] __shmem_file_setup+0x144/0x320 [ 1292.617253] ? _copy_from_user+0xfb/0x1b0 [ 1292.617775] __do_sys_memfd_create+0x275/0x450 [ 1292.618366] ? memfd_file_seals_ptr+0x170/0x170 [ 1292.618943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1292.619639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1292.620325] do_syscall_64+0x33/0x40 [ 1292.620812] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1292.621486] RIP: 0033:0x7ff2477d4b19 [ 1292.621959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1292.624359] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1292.625385] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007ff2477d4b19 [ 1292.626322] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007ff24782e0fb [ 1292.627351] RBP: 0000000000000003 R08: 0000000000000800 R09: ffffffffffffffff [ 1292.628325] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1292.629283] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000140 [ 1292.647019] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1292.649073] EXT4-fs (loop0): group descriptors corrupted! 00:21:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {0x0}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1292.742917] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1292.744981] EXT4-fs (loop1): group descriptors corrupted! 00:21:32 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0x0, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:21:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {0x0}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:21:32 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x17, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xc304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = gettid() r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r2}, &(0x7f0000000040)) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r3}, &(0x7f0000000040)) r4 = openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0xc0301, 0x81, 0x6}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) kcmp(r2, r3, 0x6, r4, r5) process_vm_readv(r1, &(0x7f0000001a40), 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000000040)=""/239, 0xef}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:21:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:21:32 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000000040)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001e00)={0x1320, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfd, {0x5}, [@generic="f0d765df13fe244b773157ef957a100aa32deb3a1fdc915c9c6e2e6570247a6fde47b0e7804916b239ab", @nested={0x1253, 0x32, 0x0, 0x1, [@generic="2d242e59dbb9f3ad565285e8b3697506a5b91696e1c44a42fc0d8064bad0a745ccd6a6a817c70b5aad1c73398c3f7bac95393e22cb1a9459e67b1b65b9c3e6c5b92cfa431c9bf0c32a6a5150fd8c15513a6b8170f7d042f4ef", @typed={0x8, 0x77, 0x0, 0x0, @pid=r0}, @generic="9c5916dac380811eac13ccdd962efd5f7326b42fc08f675399ca69874c4bc99e03d3ba3d1a61e53b845e9b3591ff84038948bf1027c51257917eef97439c913e275d7e8ee0e4c0565cee2e2bab76f641e24f96d03cba2f61f23e37dc27bc56b147dc53d7d71f92b0adda908d5ebff15cb50aa50dbc803712dff548432ef6b594ce4d53c6e8a32eb4969409d3e2e768c9878c12eb10953227234b23ab85b83d5e1a43879f6d7065edfbdae08a4c25a7f439ef72a8163c84561b3d3b251a2310591485b3b78eddbfcaef72c5012fbe18c6d05db19d2c273dfe892ed47cab87277eec667fc949dd7e491af8ec00000000", @generic="0a8ae61062c09043979cb1f248c093d8a04638e86853ddffde5c836b638831085b35999614cbbe6b4d11424426792713c10dbf4b0d379b36cdef04e48b919b882149bda8b146bf0cb0ccf6dd3a476fd1c15693f6b1b01018ce398484a998eb447633bddf6b5349d8504c2b881acc0c9c8b9ecb5729fe7f2fc08f2ba0b9eb9b09dbcafc68cf0c3d3ea973f871df22b0da1cd5fd2c101e1c927c1f2d77aeed991fedeed65605a1a7aee1ec389f3a84ccddc67c3baa368a6228b523ea5dd91cfac9d127213eb81dbe55b7fd39e93778d1513e1fa72cfc6fbb29a8235deaff9c22185618ea585ae7ec9ed39d0dbfbbfac4f9442f4bc7f4839bf28e0218996474a738c55db891790e137a87615d078898329543313318968011203251f6109e7898771fdb6321d35a56bbdabedc0eaaa419c298cb724ac63c0e3c9fe3d72108271df3d29fed5471c78420125d12086f2ee851b32b96d097c0b6372347e6dc2b733b67d435a4821121b437f1df8d41e0aaf88237e3f0290342635d6aca2b5e63079db93c824b622c72950c8245891c830ad954714f647e0d22f4055d5618a938cc24f711f79154b43818d06bff7d5f42df27b818d09000f9e527196bafc1942ea8f99e5a99615e647d37417d3b652e88d2c772c91854ea813db233c75b1e6d8c9ba03607f8dd959879bd35729d8b56705df8844bb2c93597fa21af57c2b3a19ab9ff4bba2a6a126c042b18a2278e0b4e35350e8661a9809d5854aba025247251e8e67653f809e1587abd62972dbc2021471097f986a547aa49fcf43fb14eafba203b81e2c56e28d4e834830af3b0c1fcaa1c1b4034c279ddd35abf7669e21069561cf3db993cf99027044dd4d53a2e9dbe4cdcae0d1d0cd6ef219394754af0ca12b253b8d17905f5c2adb16fad0f51d88a1b5ec7fcce5999c7a962fc872a15ae1f92fa9d2ef715c5cd2ea4d1533452f1a79de54da4ed4304c451e609ef8426f72d239eecd6b0fc5343bd78659637dc603b44843d26f18b5de3adf7d0a9dc1e1a24dca23dc58124f6bf7b5ca7c0cdfe8f3c75bd0c0424eeb3b40c3a55a0153a440a7de6722109ced73ea8029b9062ed256696c6c7f6d5a19dcf2de13c8c84682749ff0735a8a0619e5cad0ca9da0e5bea233a2495fb24065014a36585f417bbbc435f67b0e3dfff2f97e7cf914c700aa97e197fb02e8d63ab6fdac285238d1536a4e2e179f8c53c87f14de120d3706ba89ceb5f250fb2d279a248369fcbe5d8a635366bb7112ef1672daafb517083f595e4d54b1f2a1c3f4203ff4c9446cf1878f67eedfdb5503f201ee7bbc00e8f99439670452634ff8ed67b0552ecb72f5fc62c0f721bf227fe65b9fc42c6973165d0efaf5b81ddffb33eb7a0284391f49ae3fef5810788881dfef2f0303d5ac55f29f3784df1a1448e46ebc4d8b2bf6a06cab33386b49d58d926cc85773ad2ff57196cc396b6032202b4fe5713b25d2590951f04f06029553a1fd410ab1ca1bb0d3befbcc8208a92229e51907568c7479af68b59411d7390bc800d491603114b8819b4c8ab1a791976f951463f9245ed0bc3a8cad4aa1a40f968d6877de9132edb4a6cb2694322796394dc9dee064545c2548f123f582ef00a4d3604df645ceb0720b7cd2ff25c59d93b6322e9ada01f3e16d065b8108d52f028768609404407ccc29411be21c02e2e137bdd5d25a31ff9ef608a4bdf622d90b6dac9d92726e6cd1e1209be7f38fffdee864c91b81088fc788343682cfbe2f476eb6810d652e2cd25fe5cbd7dd6e222e4a855ecb7676f737ebcee167be9b7095c7490962ce6125bad6899812ba1e15d9e77b28f67bef8f7843c0aaf6c66ff76457176bdaaea3986cbdaa3411751b5b21ecccce154f8c0d6311791fa8ea1ae89e21aad373636c5d7d66c486645426144708c489fb6184b9093979b3acc2348f0b5a254e1d0f4321371596f92ca7fbcdec895b7c30a6e7c56254a73e811e48418c042e946c815a030e58eb3a83a7c35401ff09c8ad47c18a74a801f7d13d15c89702232b4361daac9bd2f5015e69df1fe5f03380b2ccd5a3e70a5768bb7e7fcb620615cfd31950ec896dbbfaf5a9134a732fe1169a40dff8d02547dc0cfae2a662b98829e013b061de04dce6292483a24f77538fc57a66b5bc3a3ec5a72ce160240cc6315fb4701b20aee02144a7b778e8561c67d4e5c45d888bddab47353a046179bba78269824c9e734978c8c6c1a3e2de69ab94e9e851c84c15baacaa06fb3a50efc093b1a57e9caaa64839cd330f475a6f360f6a03c908b0af3fc039e1b8810f6038271b57064fc572d513eef26fdef0cb6073ef585c732764acfbb1fb9dbb2d941d465c67cb746e1129472a406226950b7510d10af97bc3ecfd01bcb39b54e69079f9b1f04315c132b3af62c4756dbb662c5f924286e718704fa30279659d4e780221f5ba9a4aa230fbaad314b9193bd4f634377576357a91a18de4a9c82de37de75c690142045d0836f1d298765c94d822f3f21791cee4506def0e539639b7e7f79405f732df0d5620e1ba1fc297d1d2988b81a41f0129539e177780b2e684f3aeea3342964ea927b5aed72508ecd642c7289ae949c4c2a9dc4876f60912a95f7710c316bab1be17ed981acc2535cfafbb471aa8ed5a5b8c0e06c54dd8c69063d1f4609fceaf8248b1e9ee4fcbaffc3856a4069adf5a1070799b83d656c6f66c960f1777c50a1d6b8612171d2d8a87eba95cc259caeced8dba135202ee93d1687ee88d3e8860404a415127d0faa429608bdb8e7af98c8f74df85d3f1cfdf82f9832ba2b379ac7e11ace7aec055fef8cab8b919bb2ceee1d0b209f32490cd37c031879e4a73cf10b515495148bbc727ac1b2f1de375fa0644d964079b3f888fc01b94deaea374c3f5bec7ce1e39966d489ac469b9de3d367601af618581c8ada1b5a1ec7e2d8ccd2459473ab203d2d79b9dffca3c12cb867534b0817d87c274f032eae90cc75ea1b8d2f0dc294580762914e17778c2e4f083cf0a797af021fbf0ff6fc725c99c4a7cd0b5be4e263ed30838b7b8ce184a7d2d8fe713f2b1456ba3cab036533942a39949405d27c9253092018fe77940011fd818301902577e6a588f5b0240f6658335b77746615a48f30767e8ec4637391f701a8b32e0520a045187973284caceff6498be7843c0c09af36d6283ff36a1112b0d6ee34c8b838306010510d53f8b001b27dc5a654b25c8bce1029297b637bc1dc6d1fcec9d9257a1a5dd2f6109472cb9f44c388d08eafebc1fadd76585cbf51398c14133bb880e7f6a908f0404707e2210e4b42a9ebd9da3e5ed1752a3981e6eb23de0f2efe750bef7f6f10c307fc3cd77075907da2c9aa7f424f28adbbbaf0f97e1446252fd686dbd2ae8aa57d04b1175892a3c02d204948c8103d636f2efd89448466134ab2281e26c0a4f0cc17232dc671c2cdf878822cc65a97017fbfc7fe1c036664a6274a7a2c496a22b0e290d60230c4e38171e259f99f3efab41f1913c8cb51f27eaacd4fbd878aaf5b981c16a08db0e904e325b059e3201deeb4f78f01c94df0ab72d30f284ea4909540c974d147c00c7036f3c52d36eebb21d08ca3e89ef38f91c9e47956e411af806820d6efea2f780b6f2e37d245828fd98bc0c3fc83e085c9bd471d7c261510203dd91fb47819722a442b728845babe2f651203c140954e7d67ddf3b84279b21c45d33b803769cba17936bde05ea770636b49d318ea2888069fca63cd2c395ffafa16dd7660f8e08c036033226d4b6e79e464cc0d70eac04b083ca46790f3162f427492fcf0a4a440c46c071aca81d0a9346a6f35dd4a3ef5487cb1da56270ceb9b4cf60bde97bf6b08b99992a4d69971b81f807d99dfc7034181d8566cfcd7be5ced256fadaeb4e0ae2d58ca4a690f562e711b88dfb8c43fbe1fd1b3be17b44727498b95d445df43b592eb0e9fe2a5a292c14c76626c38f315bfe87651455514552c03174eb4971fc24062081b4785407769c88a1def4f195188a8aafb912f7fcfd44cab81c0ec8f78f41e46bb19802232eeaf0ee840d1ab5aa53cc49698b36f301790c8679547ab0936ee1ce1bedd2ddd21405b4e0143f11b939490d76e3be32e0a8d96a0bab637f161c5404384951e4b34a2f1899bb06073fa0a3b12ad93755c067317501ad59926479b76dcbb2d97162d97700b1ea3194bb3ec772b8d89cce50bdae4c55bec089fc7be000203e3c7db95cb0b5204c796f1e48b471c4a549d22d0771321590de84d8a4ae994cf6c06bce532a9d6c0f96708cd54186f3a35267a5b378d4aacb03dc2ebe62c4bc097740e25658ffc38eb078e30bf3578c193873269c47c3a46edaad56fb988b44bfa752e68f4cf69403342ec11feea93caa31d5d8e09563a07f4333e01e28bcb1880e3765ed516f8716c5f62871d6cea4baec0eba7c0f6cff5b1089e20d272b252ba83fbd4ff2fbcf627118f828dd22e913f454db4102b8ac70db31f5266d9126647c6a4f20711762683747f0fddeb5654a4d2f76ae81b0bfbc6f58ce6824ff5d1dcf8875fc7b3ad9e983d7619ffdeef8fd7726b51adcfdad7c01c5009944a1e9cf1f516b823c50c4e628cd30395eb3962fddedeb90b2b033290caf62406f9938bc43802efdde7fde1a51624f1f1dbdcaaffae7a4ee2234e7a00bdd410e71e9a3fe36990e99115d789a2f8ba73c63c5358ab32c005314327bba3f4c028c2640c12324ba6b3e65d5c02492e2cadc525858c0a566353d8a27e1e21e16f45dc4854a321d18f7916e80fff47b35210b4a1a38060a82c01f4a95bd8b522f14e95bc4f8fed4182381d226307e8c6c8879624b708660fb0ffeb4de35415e952f28ba919b3d2b6af163e2e1adae05e3bc7fd616b41e5169bf09d89d162b5fb699d559805d676d7c0a779d15cdca7219ac9aa19e8a9400d1018282e48f449a1746436e09dcdbcb593abacfcd11dc8dbb0e4996bb95a8020ffa34ec480c38654ed9844d870ce80491280aa94c7b49304c5006019a62600203e75062e02d37acb5dbf68ce960a4215db12bfed42f2944c71c18813ac230cc9756bcd5771c49242c07873c840371f87c78c118348ee5195d94c6fdfaf60b0551c1ec607b76aea97b9769759f5f193c63c95fdae62778629afc35e4b8389c99c2dc6066195bf3d099e393c00613af46fce9191f0e247df4452b1840e7ee2171faa47b5586851b1be3581104b70b27d9478a5ce558e169601fa50dd1e74bdd12f44b96d79350f0d1f5f1e53c87aeb255c75710696fb3ec11883860940e3b497627e809e48c60de545426d3b5d6ba22c3be11047e5247006d92401376571dc120a69a4d737c3ded1e82d17beacd20121241307b4c5ea03370563ca849a2d14a178b3fb9bb6908ea920ea485055ea831f88800629b4cd9a10f1e55d9e585d6e7dad6789e299c5020fe555060ca7af9d1822819831daa5d35065455564ad2b3e15fd41d2b714b6d8b848badf45036a7399b244f906c3e85c800e89aa527403f59f0e141fb94c2963355a3a96e2f98b67f35a85bedbddea38b8f77d647590580d6cb575ffd5b8ab853ca06c14169120b12ebdd291a4115ab180de6bfba795d87a09e0e850474d73b0f80647d69831c1968e60a85ba27c797dc2602f14bff648db94525e691b626eb160b366184359cfd1f51a9a9ca3014fafd3adcdd892f365d1b2dd3acd5e2b393a5958cbafab51184493c221a7d2f111a43c0cb02a782aedb817bc15b09086289fffa1a2b9628970a4ec621f2dccf7", @typed={0x8, 0x35, 0x0, 0x0, @fd}, @typed={0x4, 0x4b}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x80000000}, @generic="2edaf59d179a2a043e5092b70c18b494ce1894aec824110625674ed2e0fa1670b8098f64388b6a44fbf828cd3341a89bfa9f5993f9ee97fbc016c37a3880eb7d68efa085dcdfdc41c4d1cd724810858719ec5b9f191b77dbc71ac6b10a97b5742516bbe96a8899b2e37f287ca235745f5faea2047d14275a4bfdb1de8c8c26094e72bc610655135eda233b6bc5bddb6bc31b3f0135bf6b10d2333cf6aff55f4a305cad8921c0dcd2067357d961558b5945ddd43294dd78008bdd4968105ebf009eb400b1593c39666d42e7dc37dc015b2ff0588eb1747e658ad6e1fca00f79"]}, @typed={0x9, 0x37, 0x0, 0x0, @str='vfat\x00'}, @generic, @typed={0x8, 0x12, 0x0, 0x0, @fd=r1}, @typed={0x6c, 0x38, 0x0, 0x0, @str='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4x\xb0\xef\x7f\xff0n\x89`\xe4\xc6O\xca\x1daB\xd7\xb5\x10F\xab\b)\xc9\xd5\x0f\b\x8b\xfa\x81)E\xdd\xaf\xc8\x9bW\xb9x\xb4\xa79\x1a\xa5\xfc\x8f\xff\x97Lp\xccl\x020i\xdc\x1c\xae\x00\xa6\xfaw\xa9\xc6\xf1,Y\xddU\xc7M\x19\xb0o9\xb1\xa4\n\xebrs\x14F\xc9\xcc\xb9\xaf\x18\x13\xf2\x02\xb0P'}, @nested={0xc, 0x65, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @ipv4=@local}]}]}, 0x1320}, 0x1, 0x0, 0x0, 0x40480c5}, 0x4080) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000140)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4x\xb0\xef\x7f\xff0n\x89`\xe4\xc6O\xca\x1daB\xd7\xb5\x10F\xab\b)\xc9\xd5\x0f\b\x8b\xfa\x81)E\xdd\xaf\xc8\x9bW\xb9x\xb4\xa79\x1a\xa5\xfc\x8f\xff\x97Lp\xccl\x020i\xdc\x1c\xae\x00\xa6\xfaw\xa9\xc6\xf1,Y\xddU\xc7M\x19\xb0o9\xb1\xa4\n\xebrs\x14F\xc9\xcc\xb9\xaf\x18\x13\xf2\x02\xb0P', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x80380, 0x0, 0x2}, 0x18) r3 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) unlinkat(r3, &(0x7f00000004c0)='./file0\x00', 0x200) openat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x11) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000300)=[{&(0x7f00000003c0)="4c85dc8f22048aa257b52a0a4d12ee0e6f78179719e64d38f4f803744eee1b6f0427d81054bd5c005f97f36cbd6b24d61014927ade33dbedd1ada0f7ac96d448968d5385faf0e250edb867749982a552e8c71eada4b1c6ec024636dabb578827f9b4d9835d31ca303a1ff9e2a22aa3e08572bcced55c8f6e74d27dd2e522ba46acde548541442bf9ab78ff462dc94284957572a32034a2642865b5babdee6c7d4e7949f567f9865e5c61335cb14b3f9f39c2b9ef1694dafd04", 0xb9, 0x7}], 0x10, &(0x7f0000000340)={[], [{@fowner_lt={'fowner<', 0xee00}}, {@subj_user={'subj_user', 0x3d, '/dev/snd/seq\x00'}}]}) ftruncate(r2, 0x0) 00:21:32 executing program 6: syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5c}, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x1e9b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0x1000, &(0x7f0000001e00)=""/4096}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)={0x400800, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7fffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="00762f1b", @ANYRES16=r2, @ANYBLOB="01000000000000041e008900000008000300", @ANYRES32=r3, @ANYBLOB="04001d80"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x8, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r4 = getpgrp(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) dup2(r6, r1) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0xde, 0x0, 0x1, 0x7fff, r4}) [ 1292.874704] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1292.875701] EXT4-fs (loop0): group descriptors corrupted! 00:21:32 executing program 6: syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5c}, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x1e9b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0x1000, &(0x7f0000001e00)=""/4096}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)={0x400800, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7fffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="00762f1b", @ANYRES16=r2, @ANYBLOB="01000000000000041e008900000008000300", @ANYRES32=r3, @ANYBLOB="04001d80"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x8, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r4 = getpgrp(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) dup2(r6, r1) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0xde, 0x0, 0x1, 0x7fff, r4}) 00:21:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1292.982247] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:21:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:21:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'ip6erspan0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r4, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) openat(0xffffffffffffffff, &(0x7f0000000100)='./file2\x00', 0x185042, 0x112) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) 00:21:46 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0x0, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1306.577738] FAULT_INJECTION: forcing a failure. [ 1306.577738] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.580089] CPU: 0 PID: 9102 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1306.581476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1306.583178] Call Trace: [ 1306.583717] dump_stack+0x107/0x167 [ 1306.584502] should_fail.cold+0x5/0xa [ 1306.585283] ? security_file_alloc+0x34/0x170 [ 1306.586202] should_failslab+0x5/0x20 [ 1306.586972] kmem_cache_alloc+0x5b/0x310 [ 1306.587829] security_file_alloc+0x34/0x170 [ 1306.588742] __alloc_file+0xb6/0x320 [ 1306.589509] alloc_empty_file+0x6d/0x170 [ 1306.590335] alloc_file+0x5e/0x5a0 00:21:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {0x0}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:21:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x2, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:21:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 12) 00:21:46 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0xffffffffffffff53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) syz_io_uring_setup(0x40d9, &(0x7f0000000300)={0x0, 0x75f7, 0x8, 0x2, 0xfb}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r0, 0x0, &(0x7f00000006c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) 00:21:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) [ 1306.591070] alloc_file_pseudo+0x16a/0x250 [ 1306.592154] ? alloc_file+0x5a0/0x5a0 [ 1306.592914] ? shmem_get_inode+0x55c/0xbc0 [ 1306.593755] __shmem_file_setup+0x144/0x320 [ 1306.594601] ? _copy_from_user+0xfb/0x1b0 [ 1306.595417] __do_sys_memfd_create+0x275/0x450 [ 1306.596348] ? memfd_file_seals_ptr+0x170/0x170 [ 1306.597277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1306.598333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1306.599391] do_syscall_64+0x33/0x40 [ 1306.600181] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1306.601222] RIP: 0033:0x7ff2477d4b19 [ 1306.601970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1306.605701] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1306.607245] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007ff2477d4b19 [ 1306.608726] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007ff24782e0fb [ 1306.610169] RBP: 0000000000000003 R08: 0000000000000800 R09: ffffffffffffffff [ 1306.611610] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1306.613081] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000140 00:21:46 executing program 2: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @rand_addr=0x64010102}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) r4 = syz_io_uring_setup(0x3e01, &(0x7f0000000280)={0x0, 0x18d7, 0x4, 0x1, 0x375, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000380)) fcntl$setlease(r4, 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="836accc0310b663812dd992171560dfe7a9df56bff00f01323aa8451763956f499e5250b7c045581c53ab5a8a967b80400eaf60000000000000000009a68ff0000000000", @ANYRES32=r2], 0x10}}], 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fstatfs(r1, &(0x7f0000002e00)=""/4102) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 00:21:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 13) [ 1306.654298] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:21:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:21:46 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x7, 0x80, 0x0, 0x0, 0x57c, 0x8000, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x41140, 0x3, 0x6, 0x9, 0x7, 0x1000, 0x7fff, 0x0, 0xd5, 0x0, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') [ 1306.754056] FAULT_INJECTION: forcing a failure. [ 1306.754056] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.755412] CPU: 1 PID: 9122 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1306.756187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1306.757124] Call Trace: [ 1306.757439] dump_stack+0x107/0x167 [ 1306.757860] should_fail.cold+0x5/0xa [ 1306.758299] ? create_object.isra.0+0x3a/0xa20 [ 1306.758811] should_failslab+0x5/0x20 [ 1306.759233] kmem_cache_alloc+0x5b/0x310 [ 1306.759689] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1306.760321] create_object.isra.0+0x3a/0xa20 [ 1306.760812] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1306.761375] kmem_cache_alloc+0x159/0x310 [ 1306.761817] security_file_alloc+0x34/0x170 [ 1306.762306] __alloc_file+0xb6/0x320 [ 1306.762728] alloc_empty_file+0x6d/0x170 [ 1306.763179] alloc_file+0x5e/0x5a0 [ 1306.763594] alloc_file_pseudo+0x16a/0x250 [ 1306.764088] ? alloc_file+0x5a0/0x5a0 [ 1306.764533] ? shmem_get_inode+0x55c/0xbc0 [ 1306.765024] __shmem_file_setup+0x144/0x320 [ 1306.765519] ? _copy_from_user+0xfb/0x1b0 [ 1306.765996] __do_sys_memfd_create+0x275/0x450 [ 1306.766535] ? memfd_file_seals_ptr+0x170/0x170 [ 1306.767074] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1306.767678] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1306.768299] do_syscall_64+0x33/0x40 [ 1306.768734] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1306.769320] RIP: 0033:0x7ff2477d4b19 [ 1306.769756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1306.771877] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1306.772765] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007ff2477d4b19 [ 1306.773600] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007ff24782e0fb [ 1306.774347] RBP: 0000000000000003 R08: 0000000000000800 R09: ffffffffffffffff [ 1306.775153] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1306.775982] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000140 [ 1306.825741] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1306.910308] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1306.911524] EXT4-fs (loop1): group descriptors corrupted! 00:22:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 14) 00:22:06 executing program 2: r0 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_io_uring_setup(0x48ec, &(0x7f0000000180)={0x0, 0xa3cd, 0x4, 0x1, 0x802cc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000240)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f0000000280)=ANY=[@ANYBLOB="5b7b2e49df2b18fd", @ANYRES16=r4, @ANYBLOB="01000000000000000000100000001800018014000200776c616e3000000000000000000000000800060000000000"], 0x34}}, 0x0) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000040)) sendfile(r2, r0, &(0x7f0000000200)=0x100000001, 0x3) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}]) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 00:22:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:22:06 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x0, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:22:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x2, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:22:06 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000040)=""/60, 0x3c}, {&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000100)=""/250, 0xfa}], 0x4, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f0000001500)=""/200, 0xc8}], 0x3, 0x0) 00:22:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1326.982038] FAULT_INJECTION: forcing a failure. [ 1326.982038] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.983618] CPU: 1 PID: 9146 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1326.984420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1326.985388] Call Trace: [ 1326.985702] dump_stack+0x107/0x167 [ 1326.986126] should_fail.cold+0x5/0xa [ 1326.986579] ? create_object.isra.0+0x3a/0xa20 [ 1326.987130] should_failslab+0x5/0x20 [ 1326.987582] kmem_cache_alloc+0x5b/0x310 [ 1326.988082] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1326.988731] create_object.isra.0+0x3a/0xa20 [ 1326.989265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1326.989864] kmem_cache_alloc+0x159/0x310 [ 1326.990374] security_file_alloc+0x34/0x170 [ 1326.990888] __alloc_file+0xb6/0x320 [ 1326.991359] alloc_empty_file+0x6d/0x170 [ 1326.991842] alloc_file+0x5e/0x5a0 [ 1326.992285] alloc_file_pseudo+0x16a/0x250 [ 1326.992787] ? alloc_file+0x5a0/0x5a0 [ 1326.993241] ? shmem_get_inode+0x55c/0xbc0 [ 1326.993753] __shmem_file_setup+0x144/0x320 [ 1326.994252] ? _copy_from_user+0xfb/0x1b0 [ 1326.994754] __do_sys_memfd_create+0x275/0x450 [ 1326.995301] ? memfd_file_seals_ptr+0x170/0x170 [ 1326.995864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1326.996507] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1326.997125] do_syscall_64+0x33/0x40 [ 1326.997583] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1326.998191] RIP: 0033:0x7ff2477d4b19 [ 1326.998634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1327.000808] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1327.001721] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007ff2477d4b19 [ 1327.002567] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007ff24782e0fb [ 1327.003397] RBP: 0000000000000003 R08: 0000000000000800 R09: ffffffffffffffff [ 1327.004268] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1327.005120] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000140 00:22:06 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000013c0)='./file0/file1\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x3ff}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x4, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer, 0x5) r3 = openat(0xffffffffffffffff, 0x0, 0x404100, 0x7) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x120) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000) fstatfs(0xffffffffffffffff, &(0x7f00000000c0)=""/65) statx(r0, &(0x7f0000001400)='./file0/file0/file0\x00', 0x2800, 0x4, &(0x7f0000006940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000001340)='./file0/file0/file0\x00', &(0x7f0000001380)='system.posix_acl_access\x00', &(0x7f0000006a40)={{}, {0x1, 0x2}, [{0x2, 0x4}, {0x2, 0x2}], {0x4, 0x4}, [{0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r4}, {0x8, 0x4}], {0x10, 0x4}, {0x20, 0x3}}, 0x54, 0x3) sendfile(r0, r1, 0x0, 0x20d315) r5 = dup(r3) write$P9_RREADLINK(r5, &(0x7f0000000140)={0x1c, 0x17, 0x1, {0x13, './file0/file0/file1'}}, 0x1c) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x2710}, {0x77359400}}) [ 1327.023859] serio: Serial port tty25 00:22:06 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x7, 0x0, 0x2, 0x3, 0x0, 0x7, 0xa0000, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x4, 0x1, 0xfffffff9, 0x1, 0x0, 0x81, 0x0, 0x1f}, 0x0, 0xf, r0, 0x0) process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1327.060601] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1327.066738] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1327.067874] EXT4-fs (loop1): group descriptors corrupted! 00:22:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x2, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1327.090947] serio: Serial port tty25 00:22:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 15) 00:22:07 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1327.231549] FAULT_INJECTION: forcing a failure. [ 1327.231549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.233203] CPU: 1 PID: 9173 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1327.233930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1327.234859] Call Trace: [ 1327.235171] dump_stack+0x107/0x167 [ 1327.235580] should_fail.cold+0x5/0xa [ 1327.236033] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1327.236663] ? shmem_write_begin+0xf7/0x1d0 [ 1327.237150] ? shmem_write_begin+0x100/0x1d0 [ 1327.237626] generic_perform_write+0x279/0x4f0 [ 1327.238152] ? page_cache_prev_miss+0x310/0x310 [ 1327.238692] ? evict_inodes+0x420/0x420 [ 1327.239131] ? generic_write_checks+0x2ad/0x390 [ 1327.239670] __generic_file_write_iter+0x39d/0x5d0 [ 1327.240244] generic_file_write_iter+0xdb/0x230 [ 1327.240756] ? iov_iter_init+0x3c/0x130 [ 1327.241209] new_sync_write+0x42c/0x660 [ 1327.241664] ? new_sync_read+0x6f0/0x6f0 [ 1327.242146] ? __x64_sys_pwrite64+0x201/0x260 [ 1327.242653] ? lock_release+0x680/0x680 [ 1327.243108] ? selinux_file_permission+0x92/0x520 [ 1327.243651] vfs_write+0x747/0xa70 [ 1327.244052] __x64_sys_pwrite64+0x201/0x260 [ 1327.244549] ? ksys_pwrite64+0x1b0/0x1b0 [ 1327.244981] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1327.245564] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1327.246125] do_syscall_64+0x33/0x40 [ 1327.246534] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1327.247083] RIP: 0033:0x7ff247787ab7 [ 1327.247493] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1327.249517] RSP: 002b:00007ff244d49f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1327.250364] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff247787ab7 [ 1327.251140] RDX: 000000000000003a RSI: 0000000020000040 RDI: 0000000000000004 [ 1327.251923] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1327.252724] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 1327.253500] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 00:22:07 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x0, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:22:07 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1f, "77004a6efdff002200000200cdab000245b00f", 0x1}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) socket$inet(0x2, 0xa, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) lseek(0xffffffffffffffff, 0x7, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x40081271, &(0x7f0000000580)=@physical={0x0, 0x2}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x1e02, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x1e02, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x100, 0x0, &(0x7f0000000040)=[r2, 0xffffffffffffffff]}, 0x2) ioctl$DVD_READ_STRUCT(r1, 0x40081271, &(0x7f0000000580)=@physical={0x0, 0x2}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x1e02, 0x0) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x40081271, &(0x7f0000000580)=@physical={0x0, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x9) 00:22:07 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:22:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1327.330871] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1327.332963] EXT4-fs (loop1): group descriptors corrupted! 00:22:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f0000000500)={{0xcc, 0x9, 0x6a, 0x3d9, 0xcb, 0x0, 0x203, 0x8}, "dcad53479b2fbddb0e5776deec066611beb26931b625198f218ef62d0375ca4e09544a8c57249c5d9b5b8ff5db553d2b8cffb1410c127843dfe0b33a66d56df2564bd9f1e4bf537b0682729d6959b374d0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa71) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x7, @none, 0x1, 0x1}, 0xe) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x1ff}, 0x8) connect(r1, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000140)) 00:22:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 16) 00:22:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) [ 1327.473906] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1327.479170] FAULT_INJECTION: forcing a failure. [ 1327.479170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.481747] CPU: 0 PID: 9193 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1327.483150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1327.484875] Call Trace: [ 1327.485426] dump_stack+0x107/0x167 [ 1327.486184] should_fail.cold+0x5/0xa [ 1327.486978] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1327.488106] ? shmem_write_begin+0xf7/0x1d0 [ 1327.488994] ? shmem_write_begin+0x100/0x1d0 [ 1327.489911] generic_perform_write+0x279/0x4f0 [ 1327.490865] ? page_cache_prev_miss+0x310/0x310 [ 1327.491828] ? evict_inodes+0x420/0x420 [ 1327.492667] ? generic_write_checks+0x2ad/0x390 [ 1327.493637] __generic_file_write_iter+0x39d/0x5d0 [ 1327.494651] generic_file_write_iter+0xdb/0x230 [ 1327.495603] ? iov_iter_init+0x3c/0x130 [ 1327.496433] new_sync_write+0x42c/0x660 [ 1327.497256] ? new_sync_read+0x6f0/0x6f0 [ 1327.498098] ? __x64_sys_pwrite64+0x201/0x260 [ 1327.499028] ? lock_release+0x680/0x680 [ 1327.499842] ? selinux_file_permission+0x92/0x520 [ 1327.500873] vfs_write+0x747/0xa70 [ 1327.501616] __x64_sys_pwrite64+0x201/0x260 [ 1327.502503] ? ksys_pwrite64+0x1b0/0x1b0 [ 1327.503342] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1327.504423] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1327.505487] do_syscall_64+0x33/0x40 [ 1327.506253] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1327.507293] RIP: 0033:0x7ff247787ab7 [ 1327.508030] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1327.511776] RSP: 002b:00007ff244d49f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1327.513345] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff247787ab7 [ 1327.514812] RDX: 000000000000000a RSI: 0000000020000280 RDI: 0000000000000004 [ 1327.516224] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1327.517688] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000004 [ 1327.519137] R13: 0000000000000004 R14: 0000000020000470 R15: 0000000000000002 [ 1327.573529] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1327.574692] EXT4-fs (loop1): group descriptors corrupted! 00:22:23 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) socket$unix(0x1, 0x0, 0x0) mknodat(r0, &(0x7f0000000280)='./file0/file0\x00', 0x1, 0x100) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4) r2 = syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000380)="137be63781f139cdda78d54c1da8232fc51db2753c", 0x15, 0x7}], 0x0, &(0x7f0000000400)={[{@nr_blocks={'nr_blocks', 0x3d, [0x34, 0x38]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x38, 0x6b]}}, {@huge_never}], [{@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) openat(r2, &(0x7f0000000100)='./file0\x00', 0x60100, 0x141) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x1, @remote, 'team_slave_0\x00'}}, 0x80) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000240)={0x0, '\x00', {0x4}, 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) 00:22:23 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/95, 0x5f}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='ns\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x100000000}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) 00:22:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:22:23 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:22:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:22:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 17) 00:22:23 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x0, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:22:23 executing program 2: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x100000, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4f4f, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0, 0x24004804}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x6, 0x7, 0x0, 0xfffffff9, 0x2, 0x1, {0x0, r7}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xe21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x7f, 0xff, 0x7f, 0xff, 0x0, 0x7ff, 0x40044, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x4, @perf_bp={&(0x7f0000000380), 0x1}, 0x508b0, 0xffff, 0x9, 0x9, 0x6, 0x3, 0x9639, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd\x00') getdents64(r9, &(0x7f0000001280)=""/192, 0xc0) io_uring_enter(r9, 0x3458, 0x0, 0x1, &(0x7f0000000080)={[0x20]}, 0x8) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) [ 1343.419007] FAULT_INJECTION: forcing a failure. [ 1343.419007] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.420530] CPU: 0 PID: 9214 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1343.421377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1343.422386] Call Trace: [ 1343.422726] dump_stack+0x107/0x167 [ 1343.423180] should_fail.cold+0x5/0xa [ 1343.423652] ? getname_flags.part.0+0x50/0x4f0 [ 1343.424220] should_failslab+0x5/0x20 [ 1343.424698] kmem_cache_alloc+0x5b/0x310 [ 1343.425207] getname_flags.part.0+0x50/0x4f0 [ 1343.425753] getname+0x8e/0xd0 [ 1343.426152] do_sys_openat2+0xf9/0x420 [ 1343.426648] ? build_open_flags+0x6f0/0x6f0 [ 1343.427185] ? rcu_read_lock_any_held+0x75/0xa0 [ 1343.427757] __x64_sys_openat+0x13f/0x1f0 [ 1343.428268] ? __ia32_sys_open+0x1c0/0x1c0 [ 1343.428813] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1343.429451] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1343.430090] do_syscall_64+0x33/0x40 [ 1343.430549] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1343.431177] RIP: 0033:0x7ff247787a04 [ 1343.431632] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1343.433960] RSP: 002b:00007ff244d49ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1343.434887] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff247787a04 [ 1343.435757] RDX: 0000000000000002 RSI: 00007ff244d4a000 RDI: 00000000ffffff9c [ 1343.436626] RBP: 00007ff244d4a000 R08: 0000000000000000 R09: ffffffffffffffff [ 1343.437491] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1343.438393] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 [ 1343.445171] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:22:23 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:22:23 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000000040)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:22:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 18) [ 1343.518052] audit: type=1400 audit(1343.394:29): avc: denied { associate } for pid=9204 comm="syz-executor.6" name="nvram" dev="devtmpfs" ino=99 scontext=system_u:object_r:syslogd_var_lib_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 00:22:23 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, 0x0, 0x0, 0x0) 00:22:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_enter(0xffffffffffffffff, 0x4eae, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x7eea, 0x8, 0x0, 0x235}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000001c0)) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) 00:22:23 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x0, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:22:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1343.673272] FAULT_INJECTION: forcing a failure. [ 1343.673272] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.674707] CPU: 0 PID: 9232 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1343.675502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1343.676553] Call Trace: [ 1343.676868] dump_stack+0x107/0x167 [ 1343.677329] should_fail.cold+0x5/0xa [ 1343.677806] ? create_object.isra.0+0x3a/0xa20 [ 1343.678368] should_failslab+0x5/0x20 [ 1343.678836] kmem_cache_alloc+0x5b/0x310 [ 1343.679338] ? __generic_file_write_iter+0x1a4/0x5d0 [ 1343.679960] create_object.isra.0+0x3a/0xa20 [ 1343.680523] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1343.681156] kmem_cache_alloc+0x159/0x310 [ 1343.681669] getname_flags.part.0+0x50/0x4f0 [ 1343.682190] getname+0x8e/0xd0 [ 1343.682587] do_sys_openat2+0xf9/0x420 [ 1343.683036] ? build_open_flags+0x6f0/0x6f0 [ 1343.683574] ? rcu_read_lock_any_held+0x75/0xa0 [ 1343.684113] __x64_sys_openat+0x13f/0x1f0 [ 1343.684621] ? __ia32_sys_open+0x1c0/0x1c0 [ 1343.685120] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1343.685775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1343.686372] do_syscall_64+0x33/0x40 [ 1343.686832] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1343.687422] RIP: 0033:0x7ff247787a04 [ 1343.687885] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1343.690023] RSP: 002b:00007ff244d49ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1343.690908] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff247787a04 [ 1343.691764] RDX: 0000000000000002 RSI: 00007ff244d4a000 RDI: 00000000ffffff9c [ 1343.692637] RBP: 00007ff244d4a000 R08: 0000000000000000 R09: ffffffffffffffff [ 1343.693481] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1343.694331] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 [ 1343.770450] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1343.855728] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1343.856776] EXT4-fs (loop1): group descriptors corrupted! 00:22:36 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x7, 0x7f, 0x0, 0x2, 0x6, 0x67, 0x6f, 0x40, 0x10000000026d, 0x1, 0xff, 0x38, 0x1, 0xfbff, 0x3, 0x4}, [], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x840) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x3) dup2(r2, r1) 00:22:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 19) 00:22:36 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x3, 0x80, 0x1, 0x3f, 0x45, 0x2, 0x0, 0x7ff, 0x100, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4a8, 0x4, @perf_config_ext={0x400, 0x9}, 0x4080, 0x80000001, 0x9, 0x3, 0x7f, 0x2, 0x101, 0x0, 0x3, 0x0, 0x8}) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:22:36 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="2200000000c6000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000200)={{0x40}, {0x6, 0x4}, 0x5, 0x0, 0x81}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000040)={0x22, 0xfffffffb, 0x0, 'queue1\x00', 0x1}) 00:22:36 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x0, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:22:36 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, 0x0, 0x0, 0x0) 00:22:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:22:36 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) [ 1357.040902] FAULT_INJECTION: forcing a failure. [ 1357.040902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1357.043347] CPU: 0 PID: 9267 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1357.044758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1357.046444] Call Trace: [ 1357.046988] dump_stack+0x107/0x167 [ 1357.047736] should_fail.cold+0x5/0xa [ 1357.048542] strncpy_from_user+0x34/0x470 [ 1357.049395] getname_flags.part.0+0x95/0x4f0 [ 1357.050290] getname+0x8e/0xd0 [ 1357.050941] do_sys_openat2+0xf9/0x420 [ 1357.051728] ? build_open_flags+0x6f0/0x6f0 [ 1357.052613] ? rcu_read_lock_any_held+0x75/0xa0 [ 1357.053569] __x64_sys_openat+0x13f/0x1f0 [ 1357.054399] ? __ia32_sys_open+0x1c0/0x1c0 [ 1357.055266] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1357.056106] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1357.056319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1357.056348] do_syscall_64+0x33/0x40 [ 1357.059300] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1357.060353] RIP: 0033:0x7ff247787a04 [ 1357.061118] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1357.064890] RSP: 002b:00007ff244d49ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1357.066437] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff247787a04 [ 1357.067873] RDX: 0000000000000002 RSI: 00007ff244d4a000 RDI: 00000000ffffff9c [ 1357.069330] RBP: 00007ff244d4a000 R08: 0000000000000000 R09: ffffffffffffffff [ 1357.070797] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1357.072245] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 00:22:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, 0x0, 0x0, 0x0) 00:22:37 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:22:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:22:37 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x7, 0x8, 0x5}) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) creat(&(0x7f0000000040)='./file0\x00', 0x182) r6 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r6}, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x8, 0x0, 0x9, 0x0, 0xffffffffffff2fc3, 0x1010, 0xf, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x2100, 0x0, 0xfff, 0x1, 0xc16d, 0x0, 0x9d, 0x0, 0x5, 0x0, 0xad}, r6, 0x1, r1, 0x8) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004d40)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r5, 0x0, 0x0, 0x0, 0x4004, 0x1, {0x0, r7}}, 0x72a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r8, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:22:37 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x0, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:22:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 20) 00:22:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:22:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}], 0x7, 0x0) [ 1357.407273] FAULT_INJECTION: forcing a failure. [ 1357.407273] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.409648] CPU: 1 PID: 9287 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1357.411005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1357.412674] Call Trace: [ 1357.413207] dump_stack+0x107/0x167 [ 1357.413935] should_fail.cold+0x5/0xa [ 1357.414725] ? __alloc_file+0x21/0x320 [ 1357.415531] should_failslab+0x5/0x20 [ 1357.416292] kmem_cache_alloc+0x5b/0x310 [ 1357.417113] __alloc_file+0x21/0x320 [ 1357.417855] alloc_empty_file+0x6d/0x170 [ 1357.418679] path_openat+0xe3/0x26f0 [ 1357.419432] ? path_lookupat+0x860/0x860 [ 1357.420238] ? perf_trace_lock+0xac/0x490 [ 1357.421077] ? SOFTIRQ_verbose+0x10/0x10 [ 1357.421887] ? __lockdep_reset_lock+0x180/0x180 [ 1357.422817] do_filp_open+0x190/0x3e0 [ 1357.423574] ? may_open_dev+0xf0/0xf0 [ 1357.424351] ? __alloc_fd+0x2b8/0x630 [ 1357.425113] ? lock_downgrade+0x6d0/0x6d0 [ 1357.425943] ? do_raw_spin_lock+0x121/0x260 [ 1357.426799] ? rwlock_bug.part.0+0x90/0x90 [ 1357.427653] ? _raw_spin_unlock+0x1a/0x30 [ 1357.428488] ? __alloc_fd+0x2b8/0x630 [ 1357.429258] do_sys_openat2+0x171/0x420 [ 1357.430046] ? build_open_flags+0x6f0/0x6f0 [ 1357.430912] ? rcu_read_lock_any_held+0x75/0xa0 [ 1357.431839] __x64_sys_openat+0x13f/0x1f0 [ 1357.432705] ? __ia32_sys_open+0x1c0/0x1c0 [ 1357.433555] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1357.434590] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1357.435639] do_syscall_64+0x33/0x40 [ 1357.436385] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1357.437427] RIP: 0033:0x7ff247787a04 [ 1357.438175] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1357.441822] RSP: 002b:00007ff244d49ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1357.443328] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff247787a04 [ 1357.444746] RDX: 0000000000000002 RSI: 00007ff244d4a000 RDI: 00000000ffffff9c [ 1357.446158] RBP: 00007ff244d4a000 R08: 0000000000000000 R09: ffffffffffffffff [ 1357.447569] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1357.448987] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 00:22:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}], 0x7, 0x0) 00:22:37 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1f, 0x7, 0x20, 0x2, 0x0, 0x10000, 0xc9408, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040)}, 0x12311, 0x6, 0x2, 0x1, 0x7, 0x3, 0xf8ab, 0x0, 0x2, 0x0, 0x2a}, 0xffffffffffffffff, 0x9, r0, 0x14) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1357.482382] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:22:37 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}], 0x7, 0x0) 00:22:37 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x0, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:22:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:22:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000da", 0x2d, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:22:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}], 0x7, 0x0) 00:22:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 21) [ 1357.788937] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:22:37 executing program 2: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="17fdc40700400045db0000", @ANYRES16=0x0], 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='limits\x00') r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) clock_gettime(0x0, &(0x7f0000001940)) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001700)='net/ip_mr_vif\x00') preadv(r6, &(0x7f0000000400)=[{&(0x7f0000000200)=""/135, 0x87}], 0x1, 0x0, 0x0) accept4$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0x0, 0x0) pipe2(0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000b00)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000a80)={0x4480, 0x88, 0x4}, &(0x7f0000000ac0)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0x8) dup2(r5, 0xffffffffffffffff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1357.821004] FAULT_INJECTION: forcing a failure. [ 1357.821004] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.823415] CPU: 0 PID: 9311 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1357.824834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1357.826529] Call Trace: [ 1357.827072] dump_stack+0x107/0x167 [ 1357.827829] should_fail.cold+0x5/0xa [ 1357.828645] ? create_object.isra.0+0x3a/0xa20 [ 1357.829582] should_failslab+0x5/0x20 [ 1357.830353] kmem_cache_alloc+0x5b/0x310 [ 1357.831196] create_object.isra.0+0x3a/0xa20 [ 1357.832086] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1357.833125] kmem_cache_alloc+0x159/0x310 [ 1357.833970] __alloc_file+0x21/0x320 [ 1357.834731] alloc_empty_file+0x6d/0x170 [ 1357.835559] path_openat+0xe3/0x26f0 [ 1357.836326] ? path_lookupat+0x860/0x860 00:22:37 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r1}, &(0x7f0000000040)) get_robust_list(r1, &(0x7f0000001740)=&(0x7f0000001700)={&(0x7f0000001640)={&(0x7f0000000440)}, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)}}, &(0x7f0000001780)=0x18) process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r2 = gettid() r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r3}, &(0x7f0000000040)) process_vm_readv(r3, &(0x7f0000000380)=[{&(0x7f0000000280)=""/223, 0xdf}, {&(0x7f00000001c0)=""/99, 0x63}], 0x2, &(0x7f0000001600)=[{&(0x7f00000003c0)=""/74, 0x4a}, {&(0x7f0000001500)=""/249, 0xf9}, {&(0x7f0000000440)}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x4, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r2}, &(0x7f0000000040)) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000080)=""/212, 0xd4}], 0x2, 0x0) [ 1357.837167] ? perf_trace_lock+0xac/0x490 [ 1357.838144] ? SOFTIRQ_verbose+0x10/0x10 [ 1357.838988] ? __lockdep_reset_lock+0x180/0x180 [ 1357.839949] do_filp_open+0x190/0x3e0 [ 1357.840738] ? may_open_dev+0xf0/0xf0 [ 1357.841518] ? __alloc_fd+0x2b8/0x630 [ 1357.842289] ? lock_downgrade+0x6d0/0x6d0 [ 1357.843135] ? do_raw_spin_lock+0x121/0x260 [ 1357.844009] ? rwlock_bug.part.0+0x90/0x90 [ 1357.844905] ? _raw_spin_unlock+0x1a/0x30 [ 1357.845755] ? __alloc_fd+0x2b8/0x630 [ 1357.846542] do_sys_openat2+0x171/0x420 [ 1357.847356] ? build_open_flags+0x6f0/0x6f0 [ 1357.848246] ? rcu_read_lock_any_held+0x75/0xa0 [ 1357.849218] __x64_sys_openat+0x13f/0x1f0 [ 1357.850060] ? __ia32_sys_open+0x1c0/0x1c0 [ 1357.850941] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1357.852015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1357.853087] do_syscall_64+0x33/0x40 [ 1357.853846] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1357.854898] RIP: 0033:0x7ff247787a04 [ 1357.855656] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1357.859404] RSP: 002b:00007ff244d49ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1357.860966] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff247787a04 [ 1357.862408] RDX: 0000000000000002 RSI: 00007ff244d4a000 RDI: 00000000ffffff9c [ 1357.863866] RBP: 00007ff244d4a000 R08: 0000000000000000 R09: ffffffffffffffff [ 1357.865311] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1357.866751] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 [ 1358.047489] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1358.049537] EXT4-fs (loop1): group descriptors corrupted! 00:22:51 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x56, 0x6, 0x80, 0x0, 0x0, 0x40, 0xca2368c8f8e17d35, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x2}, 0x8c00, 0x0, 0x2, 0x1, 0x200, 0x9b8, 0x0, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{r0}, 0xf64, 0x2, 0xfff}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f0000000040)) 00:22:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x97, 0x0, 0x0, 0x2, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x80) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000000), 0x400000d, 0x100000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000180)={@broadcast, @remote, r2}, 0xc) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r3 = socket(0x4, 0x2, 0x3) shutdown(r3, 0x1) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0x8, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x5, 0x6, 0x407, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x4000084) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100f00000000000081250700000005732b28e0e3d27427f96ba6734b9b64ccaa84f1dc9d3054b891cb00000000b273849287dec59acf8a30f7900d42f649590ba1102f348febd6dc67a229b373741e98076004800fe6fbf55cffb1ef067e3c5fe05f1da6159fec808a0895e6779faf169a4db9f428dfdcb0ef454799c8acce141619b69aed5c3d50eec808a6db4680"], 0x24}}, 0x0) listen(r1, 0x7fff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r6 = signalfd(r0, &(0x7f0000000040)={[0x1]}, 0x8) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) kcmp(0x0, 0xffffffffffffffff, 0x6, r0, r0) 00:22:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:22:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000da", 0x2d, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:22:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {0x0}], 0x8, 0x0) 00:22:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x0, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:22:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 22) 00:22:51 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0xffffffff, 0x100) clone3(&(0x7f0000000280)={0x80000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3b}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f0000000100)=""/226, &(0x7f0000000200), 0x0, {r1}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1371.729286] FAULT_INJECTION: forcing a failure. [ 1371.729286] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.730031] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1371.730633] CPU: 0 PID: 9349 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1371.730649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1371.733578] Call Trace: [ 1371.733898] dump_stack+0x107/0x167 [ 1371.734342] should_fail.cold+0x5/0xa [ 1371.734812] ? security_file_alloc+0x34/0x170 [ 1371.735360] should_failslab+0x5/0x20 [ 1371.735819] kmem_cache_alloc+0x5b/0x310 [ 1371.736315] security_file_alloc+0x34/0x170 [ 1371.736847] __alloc_file+0xb6/0x320 [ 1371.737294] alloc_empty_file+0x6d/0x170 [ 1371.737781] path_openat+0xe3/0x26f0 [ 1371.738242] ? path_lookupat+0x860/0x860 [ 1371.738738] ? perf_trace_lock+0xac/0x490 [ 1371.739221] ? SOFTIRQ_verbose+0x10/0x10 [ 1371.739715] ? __lockdep_reset_lock+0x180/0x180 [ 1371.740255] do_filp_open+0x190/0x3e0 [ 1371.740733] ? may_open_dev+0xf0/0xf0 [ 1371.741174] ? __alloc_fd+0x2b8/0x630 [ 1371.741639] ? lock_downgrade+0x6d0/0x6d0 [ 1371.742119] ? do_raw_spin_lock+0x121/0x260 [ 1371.742638] ? rwlock_bug.part.0+0x90/0x90 [ 1371.743164] ? _raw_spin_unlock+0x1a/0x30 [ 1371.743662] ? __alloc_fd+0x2b8/0x630 [ 1371.744127] do_sys_openat2+0x171/0x420 [ 1371.744608] ? build_open_flags+0x6f0/0x6f0 [ 1371.745151] ? rcu_read_lock_any_held+0x75/0xa0 [ 1371.745710] __x64_sys_openat+0x13f/0x1f0 [ 1371.746216] ? __ia32_sys_open+0x1c0/0x1c0 [ 1371.746733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1371.747326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1371.747952] do_syscall_64+0x33/0x40 [ 1371.748398] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1371.749016] RIP: 0033:0x7ff247787a04 [ 1371.749468] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1371.751685] RSP: 002b:00007ff244d49ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1371.752593] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff247787a04 [ 1371.753459] RDX: 0000000000000002 RSI: 00007ff244d4a000 RDI: 00000000ffffff9c [ 1371.754318] RBP: 00007ff244d4a000 R08: 0000000000000000 R09: ffffffffffffffff [ 1371.755186] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1371.756039] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 00:22:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {0x0}], 0x8, 0x0) 00:22:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x0, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:22:51 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[r6, r0, r7, r8], 0x4, 0x0, 0x1}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:22:51 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5b4f43, 0x0) close(r0) pwritev2(r1, &(0x7f0000000600)=[{&(0x7f0000000400)='C', 0x7ffff000}], 0x1, 0x0, 0x0, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) lseek(0xffffffffffffffff, 0x9, 0x0) close(r2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) fcntl$addseals(r3, 0x409, 0x9) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000010fa29d5d824ee23ba000200a7776c616e3000000000000000000000000800060000000062c2df9311d56774d7bb843cb5fa0bbfbf8f8f43186c95b889a2f5ea58d9c5fdd32a0d26fd1913e12872274da63b8b585ad04d33444e186b0a40"], 0x34}}, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x8, 0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x80010, r2, 0x10000000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) signalfd(r5, &(0x7f0000000000)={[0xd]}, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) fallocate(r5, 0x2, 0x6, 0x10100000) [ 1371.914823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9361 comm=syz-executor.2 00:22:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {0x0}], 0x8, 0x0) 00:22:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000da", 0x2d, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1371.978708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9371 comm=syz-executor.2 00:22:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) [ 1371.987823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9348 comm=syz-executor.2 00:22:51 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x0, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1372.060628] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:23:06 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:23:06 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES64, @ANYRES64=r1]) r2 = signalfd4(r0, &(0x7f0000000080)={[0x46ff]}, 0x8, 0x80000) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @remote}, 'vxcan1\x00'}) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e26, @empty}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) fcntl$notify(r0, 0x402, 0x80000045) shutdown(r1, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000003c0)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0x0, 0x8000, 0x0, 0xfffffffb}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x509940, 0x11) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000200)=0x4, &(0x7f0000000380)=0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10) openat(r2, &(0x7f0000000440)='./file0\x00', 0x8200, 0x1) unshare(0x48020200) 00:23:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:23:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:23:06 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:23:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f", 0x44, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:23:06 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = fcntl$getown(r0, 0x9) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='auxv\x00') clone3(&(0x7f0000000280)={0x40000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0xc}, &(0x7f0000000100)=""/14, 0xe, &(0x7f0000000140)=""/184, &(0x7f0000000200)=[r2, r1], 0x2, {r3}}, 0x58) process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000000340)=""/1, 0x1}, {&(0x7f0000000380)=""/62, 0x3e}], 0x3, &(0x7f0000000780)=[{&(0x7f0000000400)=""/88, 0x58}, {&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000580)=""/219, 0xdb}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000700)=""/121, 0x79}], 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:23:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 23) [ 1386.382456] FAULT_INJECTION: forcing a failure. [ 1386.382456] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.383879] CPU: 1 PID: 9392 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1386.384678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1386.385646] Call Trace: [ 1386.385958] dump_stack+0x107/0x167 [ 1386.386391] should_fail.cold+0x5/0xa [ 1386.386849] ? create_object.isra.0+0x3a/0xa20 [ 1386.387396] should_failslab+0x5/0x20 [ 1386.387841] kmem_cache_alloc+0x5b/0x310 [ 1386.388320] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1386.388977] create_object.isra.0+0x3a/0xa20 [ 1386.389499] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1386.390096] kmem_cache_alloc+0x159/0x310 [ 1386.390598] security_file_alloc+0x34/0x170 [ 1386.391111] __alloc_file+0xb6/0x320 [ 1386.391562] alloc_empty_file+0x6d/0x170 [ 1386.392063] path_openat+0xe3/0x26f0 [ 1386.392526] ? path_lookupat+0x860/0x860 [ 1386.393017] ? perf_trace_lock+0xac/0x490 [ 1386.393518] ? SOFTIRQ_verbose+0x10/0x10 [ 1386.394008] ? __lockdep_reset_lock+0x180/0x180 [ 1386.394569] do_filp_open+0x190/0x3e0 [ 1386.395031] ? may_open_dev+0xf0/0xf0 [ 1386.395485] ? __alloc_fd+0x2b8/0x630 [ 1386.395943] ? lock_downgrade+0x6d0/0x6d0 [ 1386.396440] ? do_raw_spin_lock+0x121/0x260 [ 1386.396963] ? rwlock_bug.part.0+0x90/0x90 [ 1386.397484] ? _raw_spin_unlock+0x1a/0x30 [ 1386.397985] ? __alloc_fd+0x2b8/0x630 [ 1386.398456] do_sys_openat2+0x171/0x420 [ 1386.398938] ? build_open_flags+0x6f0/0x6f0 [ 1386.399484] ? rcu_read_lock_any_held+0x75/0xa0 [ 1386.400062] __x64_sys_openat+0x13f/0x1f0 [ 1386.400573] ? __ia32_sys_open+0x1c0/0x1c0 [ 1386.401097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1386.401736] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1386.402377] do_syscall_64+0x33/0x40 [ 1386.402834] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1386.403466] RIP: 0033:0x7ff247787a04 [ 1386.403923] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1386.406180] RSP: 002b:00007ff244d49ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1386.407122] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff247787a04 [ 1386.407996] RDX: 0000000000000002 RSI: 00007ff244d4a000 RDI: 00000000ffffff9c [ 1386.408870] RBP: 00007ff244d4a000 R08: 0000000000000000 R09: ffffffffffffffff [ 1386.409765] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1386.410659] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 [ 1386.433109] EXT4-fs error (device loop0): ext4_fill_super:4962: inode #2: comm syz-executor.0: iget: special inode unallocated [ 1386.437883] EXT4-fs (loop0): get root inode failed [ 1386.438506] EXT4-fs (loop0): mount failed 00:23:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) [ 1386.450358] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1386.451513] EXT4-fs (loop1): group descriptors corrupted! 00:23:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 24) [ 1386.525957] FAULT_INJECTION: forcing a failure. [ 1386.525957] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.527563] CPU: 1 PID: 9408 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1386.528331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1386.529250] Call Trace: [ 1386.529562] dump_stack+0x107/0x167 [ 1386.529964] should_fail.cold+0x5/0xa [ 1386.530392] ? __kthread_create_on_node+0xd1/0x400 [ 1386.530932] should_failslab+0x5/0x20 [ 1386.531353] kmem_cache_alloc_trace+0x55/0x320 [ 1386.531869] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1386.532395] __kthread_create_on_node+0xd1/0x400 [ 1386.532957] ? __kthread_parkme+0x1d0/0x1d0 [ 1386.533440] ? __mutex_lock+0x4fe/0x10b0 [ 1386.533903] ? loop_configure+0xcb5/0x1480 [ 1386.534388] ? do_raw_spin_unlock+0x4f/0x220 [ 1386.534882] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1386.535421] kthread_create_on_node+0xbb/0x100 [ 1386.535931] ? __kthread_create_on_node+0x400/0x400 [ 1386.536495] ? lockdep_init_map_type+0x2c7/0x780 [ 1386.537041] ? lockdep_init_map_type+0x2c7/0x780 [ 1386.537587] loop_configure+0x3e3/0x1480 [ 1386.538060] lo_ioctl+0xa72/0x1760 [ 1386.538486] ? avc_has_extended_perms+0x7f1/0xf40 [ 1386.539032] ? loop_set_status_old+0x250/0x250 [ 1386.539573] ? avc_ss_reset+0x180/0x180 [ 1386.540025] ? lock_acquire+0x197/0x470 [ 1386.540478] ? find_held_lock+0x2c/0x110 [ 1386.540949] ? __lock_acquire+0xbb1/0x5b00 [ 1386.541473] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1386.542052] ? generic_block_fiemap+0x60/0x60 [ 1386.542561] ? loop_set_status_old+0x250/0x250 [ 1386.543084] blkdev_ioctl+0x291/0x710 [ 1386.543527] ? blkdev_common_ioctl+0x1870/0x1870 [ 1386.544052] ? selinux_file_ioctl+0xb6/0x270 [ 1386.544553] block_ioctl+0xf9/0x140 [ 1386.544976] ? blkdev_read_iter+0x1c0/0x1c0 [ 1386.545461] __x64_sys_ioctl+0x19a/0x210 [ 1386.545920] do_syscall_64+0x33/0x40 [ 1386.546366] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1386.546942] RIP: 0033:0x7ff2477d48d7 [ 1386.547364] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1386.549449] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1386.550313] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff2477d48d7 [ 1386.551099] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1386.551888] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1386.552690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1386.553499] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 00:23:19 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x400102, 0x1a) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x9, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000200)="3ee06ef56f30a5184d152568a1606b71e7ec44e4be9a9b006195a36e5b68b5e9e2003027fd2145a176bb65b57069c3c4a8e3b245f1bed6a1c92547dfead27130283d086f7d9915328fdfa0a2b4826702c13f1af847cbafc2ff1f3e6fc2bfc1de05a56e9ec37c57026a56802e9a868fae34cdb6621f32dde18572dae126987778cdd21434eeec7308a337de7550de2e63d144015aeee6def1618bf3e67dfcec38", 0xa0, 0x8000}, {&(0x7f00000002c0)="d647ebe4ea8102ca0239e6d5148729b302146fbe7d880ba7c467b6dd2dc0e0c0cbd6163c6a8dd89ae6325309ddef18dbec5d06ef416152570a07bbee8f0598af939008fbb70e2a2f11b91aa5906e005d6648e7ac71d29b531ab8e912445c0716e87b578c9ec9f9f354b28bf08c792543166e5a3c5d1daedbe979b8", 0x7b, 0x6}, {&(0x7f0000000340)="83a22e0989f7d387f09604097e1b6ed6bfaf27dff72510037aa5de75a1916cd4f6fd7d912540640412319cd54d45bea93c09cc3e354a55a884ea5e0ec057d1ca15f3159e81a408e23c70c3d81ca50de64d8929078f9c3ba20dd6c7a1c46ee2d2e45bac2fc05b9412933c708c85a15e55249a2af2ddef64af8bb2c5e8c6ce4b429b031ea4e529d842835b087baa75f8aec9fa2e5c0ad4b107ac1c63b0cacd", 0x9e, 0x80000005}, {&(0x7f0000000400)="b05552a28aecb090d1855c7ea2741cedeb8c4da9234b7848a7c8b48596584b28819c0492d5de7b3473f3e763b50b8127b4044f9e0fb942773372", 0x3a, 0x7}, {&(0x7f0000000440)="65059ac305e12a82f0a0f78f93beafc4e4c3734be00e05957e5a84509cde4393edfaed1c7005c97105c96afa52e1511133643af688f35c9e191541687448d593d1e1d5b4feeb8998e4f1595eb61ed006af5a7442d7b423626a264a", 0x5b, 0x6}], 0x808800, &(0x7f0000000540)={[{@shortname_win95}, {@uni_xlateno}, {@fat=@check_strict}, {@utf8}, {@uni_xlate}, {@shortname_lower}], [{@obj_role={'obj_role', 0x3d, 'tmpfs\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '$\''}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, 'tmpfs\x00'}}, {@hash}, {@obj_type={'obj_type', 0x3d, 'tmpfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'tmpfs\x00'}}]}) getdents64(r0, &(0x7f0000000880)=""/4096, 0x1000) lseek(r0, 0xfffffffffffff014, 0x1) getdents64(r0, 0x0, 0x0) chdir(&(0x7f0000000180)='./file0/../file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) 00:23:19 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffc, 0x30}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x8000}, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r5) bind$packet(r5, &(0x7f0000000040)={0x11, 0x11, r4, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xfc, 0x0, @mcast1={0xff, 0x2}, 0x1}, 0x1c) io_uring_enter(r1, 0x5340, 0x4f66, 0x1, &(0x7f0000000200)={[0x1ab]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r4, 0x4, 0x0, 0x3, 0x8, 0x58, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, 0x700, 0x8000, 0x2, 0x401}}) 00:23:19 executing program 4: sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x2, 0x0, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008880}, 0x400c805) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:23:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:23:19 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:23:20 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {0x0}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:23:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 25) 00:23:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f", 0x44, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1400.160793] FAULT_INJECTION: forcing a failure. [ 1400.160793] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.163238] CPU: 1 PID: 9429 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1400.164620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1400.166320] Call Trace: [ 1400.166858] dump_stack+0x107/0x167 [ 1400.167606] should_fail.cold+0x5/0xa [ 1400.168381] ? create_object.isra.0+0x3a/0xa20 [ 1400.169320] should_failslab+0x5/0x20 [ 1400.170094] kmem_cache_alloc+0x5b/0x310 [ 1400.170919] create_object.isra.0+0x3a/0xa20 [ 1400.171803] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1400.172831] kmem_cache_alloc_trace+0x151/0x320 [ 1400.173786] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1400.174739] __kthread_create_on_node+0xd1/0x400 [ 1400.175697] ? __kthread_parkme+0x1d0/0x1d0 [ 1400.176581] ? __mutex_lock+0x4fe/0x10b0 [ 1400.177408] ? loop_configure+0xcb5/0x1480 [ 1400.178260] ? do_raw_spin_unlock+0x4f/0x220 [ 1400.179150] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1400.180101] kthread_create_on_node+0xbb/0x100 [ 1400.181054] ? __kthread_create_on_node+0x400/0x400 [ 1400.182073] ? lockdep_init_map_type+0x2c7/0x780 [ 1400.183039] ? lockdep_init_map_type+0x2c7/0x780 [ 1400.184002] loop_configure+0x3e3/0x1480 [ 1400.184841] lo_ioctl+0xa72/0x1760 [ 1400.185565] ? avc_has_extended_perms+0x7f1/0xf40 [ 1400.186542] ? loop_set_status_old+0x250/0x250 [ 1400.187462] ? avc_ss_reset+0x180/0x180 [ 1400.188266] ? lock_acquire+0x197/0x470 [ 1400.189088] ? find_held_lock+0x2c/0x110 [ 1400.189917] ? __lock_acquire+0xbb1/0x5b00 [ 1400.190823] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1400.191883] ? generic_block_fiemap+0x60/0x60 [ 1400.192798] ? loop_set_status_old+0x250/0x250 [ 1400.193725] blkdev_ioctl+0x291/0x710 [ 1400.194498] ? blkdev_common_ioctl+0x1870/0x1870 [ 1400.195456] ? selinux_file_ioctl+0xb6/0x270 [ 1400.196348] block_ioctl+0xf9/0x140 [ 1400.197096] ? blkdev_read_iter+0x1c0/0x1c0 [ 1400.197966] __x64_sys_ioctl+0x19a/0x210 [ 1400.198785] do_syscall_64+0x33/0x40 [ 1400.199535] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1400.200557] RIP: 0033:0x7ff2477d48d7 [ 1400.201320] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1400.204987] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1400.206546] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff2477d48d7 [ 1400.207976] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1400.209420] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1400.210854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1400.212303] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 00:23:20 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {0x0}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:23:20 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:23:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)=ANY=[@ANYBLOB="b99ddc58138a6cf98b88489a18cdf181b542bc5e7d6027924539cbc4fc92b2c1ace6e38f789654daa2510dbdd575ac17351dd6b5f701151cf7280d35c171b64df9cf9a46b5ce08601cdcbb184e589e21cb3282181989be79b9505f150ae2af3f0000001f6e32d2bdf8e0e955a4a5e4879fa7cf55b861fd066a836f2af497970f7a58a74fdc8d47b68d4069ac8027a63852a9f9577255"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x7ff, 0x40001) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r2, &(0x7f0000000280)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x7f, @local, 0xffff}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000640)="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", 0x1000}], 0x1, &(0x7f0000001800)=[@flowinfo={{0x14, 0x29, 0xb, 0x10001}}, @tclass={{0x14, 0x29, 0x43, 0x1f}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x10000}}, @hopopts={{0x148, 0x29, 0x36, {0x2f, 0x26, '\x00', [@ra={0x5, 0x2, 0xe73}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x30, {0x1, 0xa, 0x0, 0x8, [0x8000, 0x6, 0x633, 0x1, 0x20000000000002]}}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x1f, [0x1, 0x1, 0x3, 0x6, 0xd5, 0xfffffffffffff5ef]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra, @generic={0x3, 0xa9, "a254e7f9bb2f486e14c8528dac04f99d71c1d8a58f4914b828f29741aff1653bf05d6272706ea74dd49f0387bcb7900137a34d3ddf6c53a0da3d8d6e086149cff6ce3549a82cbdb863eb7c5cf3fb71de8f17edabd56da2fe9310b6cf77caaf24bc3b0a6629c71c180d6029311a946f579dbabbcb2ea78e17c948367f0ebdd85aba737b5b232165a7b80f88ab18a56b8e593c083e8f8355a31dbda2e56d95aa49e1606f266481253071"}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x3c, 0xc, 0x2, 0x5, 0x0, [@local, @mcast1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x17}, @remote, @private2]}}}], 0x248}}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) syz_io_uring_setup(0x4f4f, &(0x7f00000005c0)={0x0, 0x8043}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0, 0x24004804}, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0x4, @remote, 0x1}, {0xa, 0x4e24, 0x7, @mcast1}, 0x3f, [0x9, 0x7, 0x1, 0x1, 0x8, 0xf2, 0x1, 0xfffffe66]}, 0x5c) openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) 00:23:20 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r1}, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) perf_event_open(0xffffffffffffffff, r1, 0x6, r2, 0x0) process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1400.395440] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1400.397644] EXT4-fs (loop1): group descriptors corrupted! 00:23:20 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {0x0}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:23:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f", 0x44, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:23:20 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) [ 1400.596849] EXT4-fs error (device loop0): ext4_fill_super:4962: inode #2: comm syz-executor.0: iget: special inode unallocated [ 1400.607242] EXT4-fs (loop0): get root inode failed [ 1400.608017] EXT4-fs (loop0): mount failed 00:23:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 26) 00:23:34 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:23:34 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:23:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:23:34 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x4200, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0xfa, 0x1, 0x9, 0x40, 0x0, 0x3, 0x400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x80000, 0x100, 0x80, 0x3, 0x5, 0x3, 0xf196, 0x0, 0x7fff, 0x0, 0x5b57}, r1, 0xf, r2, 0x0) r3 = gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x20, 0x1f, 0x4, 0x4, 0x0, 0x240000000, 0x18818, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000100)}, 0x101, 0xfffffffffdfffffd, 0xffffffff, 0x6, 0x10000, 0xa4, 0x768, 0x0, 0x0, 0x0, 0x4}, r4, 0x0, 0xffffffffffffffff, 0xa) getpid() process_vm_readv(r3, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r5 = syz_io_uring_setup(0x26eb, &(0x7f0000000080)={0x0, 0x2a6, 0x0, 0x0, 0x285}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x1ff, 0x0, 0x6}, 0x2) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1) r7 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) dup3(r0, r7, 0x80000) 00:23:34 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x7f, 0x5, 0x1000}, {0x5, 0x0, 0x1, 0x3}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000800)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) chown(0x0, 0xee00, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000440)=ANY=[@ANYBLOB="0309000000000000000000eda577b74cf8c13c7ff04266e723a45091714b17c77fa0831f177b51fc819559a2eceea3893d94020bfc32e6f150be1df02846c27c63f23e6e07f6cf2af9fbe8212768ba373069b0c94a3b5d19178e98ac005e175953aaa4154ecaab6b328af6750291727132834c2c6d0fdcd98ebbea66d3643e21ad47eb31a8104674b6ade1951fe0be674d68c571162af56f9e816edd59f1fd12ed42a8b25dde2de8c6658b5a84e008b5578351814faa9d2e8f434760fa183b51ea7f4ab6d6ef7adc1245ef339e9957880ec5632fe655bb42cdefc124572813e08e8ab2ccb2398c9b8e4c12dc1ad896b18bcc3bed7843abfbefb66401a2f759c3f3e67f9ce3e3df6882511bfd762dd1cddb0250957e79cc735284a874636d8dbfa7760aa6e4111602e52709879c6d9bf6bccdaeecef613bbcecaef887202f9e89b5e11830dad2b6f9d71b8a555a6ea28ebbcb6fd0cca141337e26d57f0e7835ffbd375904c860ea4c37812adb43b0e2b5242b52dc00000000000000000000000000dff5628cb7f7a9f32b4f966d2ecefb025b320f7d14d748384c35f47411a2538384dc26bae4c11df89e9417ef9ec3b902480546c883c0e434709efc459d91fc443dc1ed7dc5c67646ef8439711107e05c792abd2aa60f1e8f11decfc65a103288adcf1d3463f009e6739aff83860b62a89e4ca41a625a4af50ae3c496319586752555301a2be5d27183362cf6468873b52d06e7d1aa7c950d34795e9bd9429d8b78ff8c8551f5fb4ddeff64ea58fc00d322d05c6788656f5eaa298410b977a19751"]) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) acct(&(0x7f00000001c0)='./file1\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file1\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0xb60082, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xe65, 0x0) 00:23:34 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:23:34 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x100000, &(0x7f00000002c0)='delalloc') signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@local, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000240)=0xffffffffffffff42) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="64656c616c6c6f632c00404581a09003c2c8ecc80cba98fa2c8144b269b496811da021e208e04bf612a5e4632d921abedbb638316497133244d5fd8a179892e48b00"/81]) [ 1414.427979] FAULT_INJECTION: forcing a failure. [ 1414.427979] name failslab, interval 1, probability 0, space 0, times 0 [ 1414.430300] CPU: 1 PID: 9483 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1414.431662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1414.433323] Call Trace: [ 1414.433855] dump_stack+0x107/0x167 [ 1414.434590] should_fail.cold+0x5/0xa [ 1414.435356] ? __kernfs_new_node+0xd4/0x860 [ 1414.436221] should_failslab+0x5/0x20 [ 1414.436981] kmem_cache_alloc+0x5b/0x310 [ 1414.437813] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1414.438867] __kernfs_new_node+0xd4/0x860 [ 1414.439694] ? perf_trace_lock+0xac/0x490 [ 1414.440520] ? perf_trace_lock+0xac/0x490 [ 1414.441373] ? lock_chain_count+0x20/0x20 [ 1414.442204] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1414.443160] ? __lockdep_reset_lock+0x180/0x180 [ 1414.444083] ? __lockdep_reset_lock+0x180/0x180 [ 1414.445031] ? update_load_avg+0x162/0x1870 [ 1414.445904] ? find_held_lock+0x2c/0x110 [ 1414.446738] ? set_user_nice.part.0+0x2fd/0x760 [ 1414.447674] kernfs_create_dir_ns+0x9c/0x230 [ 1414.448580] internal_create_group+0x793/0xb30 [ 1414.449518] ? set_user_nice.part.0+0x2fd/0x760 [ 1414.450450] ? sysfs_remove_group+0x170/0x170 [ 1414.451350] ? lockdep_init_map_type+0x2c7/0x780 [ 1414.452303] ? blk_queue_flag_set+0x22/0x30 [ 1414.453165] ? __loop_update_dio+0x2d2/0x690 [ 1414.454059] loop_configure+0x954/0x1480 [ 1414.454892] lo_ioctl+0xa72/0x1760 [ 1414.455607] ? avc_has_extended_perms+0x7f1/0xf40 [ 1414.456577] ? loop_set_status_old+0x250/0x250 [ 1414.457502] ? avc_ss_reset+0x180/0x180 [ 1414.458303] ? lock_acquire+0x197/0x470 [ 1414.459096] ? find_held_lock+0x2c/0x110 [ 1414.459946] ? __lock_acquire+0xbb1/0x5b00 [ 1414.460853] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1414.461920] ? generic_block_fiemap+0x60/0x60 [ 1414.462828] ? loop_set_status_old+0x250/0x250 [ 1414.463737] blkdev_ioctl+0x291/0x710 [ 1414.464501] ? blkdev_common_ioctl+0x1870/0x1870 [ 1414.465458] ? selinux_file_ioctl+0xb6/0x270 [ 1414.466345] block_ioctl+0xf9/0x140 [ 1414.467072] ? blkdev_read_iter+0x1c0/0x1c0 [ 1414.467942] __x64_sys_ioctl+0x19a/0x210 [ 1414.468764] do_syscall_64+0x33/0x40 [ 1414.469525] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1414.470555] RIP: 0033:0x7ff2477d48d7 [ 1414.471315] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1414.474989] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1414.476513] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff2477d48d7 [ 1414.477949] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1414.479377] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1414.480799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1414.482232] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 [ 1414.517625] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1414.519650] EXT4-fs (loop1): group descriptors corrupted! 00:23:34 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:23:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:23:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:23:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) eventfd(0x20) r1 = signalfd4(r0, &(0x7f0000000380)={[0x7ff]}, 0x8, 0x80000) r2 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_getevents(r4, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r3, 0x0}]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './cgroup.cpu/cpuset.cpus\x00'}) fsmount(r5, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) dup2(r0, r0) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) 00:23:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:23:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:23:51 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000800)='\x00') r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) r2 = getpgrp(r1) process_vm_readv(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/41, 0x29}, {&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f0000000140)=""/244, 0xf4}, {&(0x7f0000000240)=""/70, 0x46}], 0x4, &(0x7f0000000780)=[{&(0x7f0000000300)=""/130, 0x82}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f0000000500)=""/146, 0x92}, {&(0x7f00000005c0)=""/75, 0x4b}, {&(0x7f0000000640)=""/59, 0x3b}, {&(0x7f0000000680)=""/118, 0x76}, {&(0x7f0000000700)=""/96, 0x60}], 0x7, 0x0) r3 = dup(r0) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0xca) readv(r4, &(0x7f0000000cc0)=[{&(0x7f0000000840)=""/41, 0x29}, {&(0x7f0000000880)=""/219, 0xdb}, {&(0x7f0000000980)=""/233, 0xe9}, {&(0x7f0000000a80)=""/233, 0xe9}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)=""/128, 0x80}, {&(0x7f0000000c40)=""/95, 0x5f}], 0x7) 00:23:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 27) 00:23:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) [ 1431.199226] EXT4-fs (loop0): invalid first ino: 0 [ 1431.203478] FAULT_INJECTION: forcing a failure. [ 1431.203478] name failslab, interval 1, probability 0, space 0, times 0 [ 1431.206060] CPU: 0 PID: 9517 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1431.207515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1431.209346] Call Trace: [ 1431.209942] dump_stack+0x107/0x167 [ 1431.210755] should_fail.cold+0x5/0xa [ 1431.211602] ? __kernfs_new_node+0xd4/0x860 [ 1431.212572] should_failslab+0x5/0x20 [ 1431.213446] kmem_cache_alloc+0x5b/0x310 [ 1431.214339] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1431.215505] __kernfs_new_node+0xd4/0x860 [ 1431.216421] ? perf_trace_lock+0xac/0x490 [ 1431.217355] ? perf_trace_lock+0xac/0x490 [ 1431.218301] ? lock_chain_count+0x20/0x20 [ 1431.219210] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1431.220255] ? __lockdep_reset_lock+0x180/0x180 [ 1431.221300] ? __lockdep_reset_lock+0x180/0x180 [ 1431.222348] ? update_load_avg+0x162/0x1870 [ 1431.223302] ? find_held_lock+0x2c/0x110 [ 1431.224198] ? set_user_nice.part.0+0x2fd/0x760 [ 1431.225256] kernfs_create_dir_ns+0x9c/0x230 [ 1431.226238] internal_create_group+0x793/0xb30 [ 1431.227260] ? set_user_nice.part.0+0x2fd/0x760 [ 1431.228284] ? sysfs_remove_group+0x170/0x170 [ 1431.229298] ? lockdep_init_map_type+0x2c7/0x780 [ 1431.230365] ? blk_queue_flag_set+0x22/0x30 [ 1431.231319] ? __loop_update_dio+0x2d2/0x690 [ 1431.232296] loop_configure+0x954/0x1480 [ 1431.233230] lo_ioctl+0xa72/0x1760 [ 1431.234036] ? avc_has_extended_perms+0x7f1/0xf40 [ 1431.235107] ? loop_set_status_old+0x250/0x250 00:23:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {0x0}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1431.236119] ? avc_ss_reset+0x180/0x180 [ 1431.237138] ? lock_acquire+0x197/0x470 [ 1431.238043] ? find_held_lock+0x2c/0x110 [ 1431.238955] ? __lock_acquire+0xbb1/0x5b00 [ 1431.239953] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1431.241139] ? generic_block_fiemap+0x60/0x60 [ 1431.242166] ? loop_set_status_old+0x250/0x250 [ 1431.243159] blkdev_ioctl+0x291/0x710 [ 1431.244001] ? blkdev_common_ioctl+0x1870/0x1870 [ 1431.245039] ? selinux_file_ioctl+0xb6/0x270 [ 1431.245999] block_ioctl+0xf9/0x140 [ 1431.246789] ? blkdev_read_iter+0x1c0/0x1c0 [ 1431.247732] __x64_sys_ioctl+0x19a/0x210 [ 1431.248600] do_syscall_64+0x33/0x40 [ 1431.249391] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1431.250488] RIP: 0033:0x7ff2477d48d7 [ 1431.251287] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1431.255246] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1431.256891] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff2477d48d7 [ 1431.258421] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1431.259972] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1431.261483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1431.263025] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 [ 1431.272740] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1431.274856] EXT4-fs (loop1): group descriptors corrupted! 00:23:51 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4300, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = fork() perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x81, 0x7, 0xc0, 0x0, 0x400, 0xa180, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x7ff, 0xffff, 0x4, 0x2, 0x8, 0x9, 0x0, 0x3, 0x0, 0x1}, r2, 0xe, r0, 0x2) process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:23:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 28) 00:23:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:23:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) eventfd(0x20) r1 = signalfd4(r0, &(0x7f0000000380)={[0x7ff]}, 0x8, 0x80000) r2 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_getevents(r4, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r3, 0x0}]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './cgroup.cpu/cpuset.cpus\x00'}) fsmount(r5, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) dup2(r0, r0) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) 00:23:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {0x0}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1431.487762] FAULT_INJECTION: forcing a failure. [ 1431.487762] name failslab, interval 1, probability 0, space 0, times 0 [ 1431.490668] CPU: 0 PID: 9536 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1431.492330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1431.494362] Call Trace: 00:23:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1431.494941] dump_stack+0x107/0x167 [ 1431.495864] should_fail.cold+0x5/0xa [ 1431.496682] ? create_object.isra.0+0x3a/0xa20 [ 1431.497681] should_failslab+0x5/0x20 [ 1431.498506] kmem_cache_alloc+0x5b/0x310 [ 1431.499408] create_object.isra.0+0x3a/0xa20 [ 1431.500373] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1431.501513] kmem_cache_alloc+0x159/0x310 [ 1431.502422] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1431.503570] __kernfs_new_node+0xd4/0x860 [ 1431.504472] ? perf_trace_lock+0xac/0x490 [ 1431.505369] ? perf_trace_lock+0xac/0x490 [ 1431.506292] ? lock_chain_count+0x20/0x20 [ 1431.507182] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1431.508201] ? __lockdep_reset_lock+0x180/0x180 [ 1431.509196] ? __lockdep_reset_lock+0x180/0x180 [ 1431.510230] ? update_load_avg+0x162/0x1870 [ 1431.511165] ? find_held_lock+0x2c/0x110 [ 1431.512066] ? set_user_nice.part.0+0x2fd/0x760 [ 1431.513075] kernfs_create_dir_ns+0x9c/0x230 [ 1431.514058] internal_create_group+0x793/0xb30 [ 1431.515069] ? set_user_nice.part.0+0x2fd/0x760 [ 1431.516120] ? sysfs_remove_group+0x170/0x170 [ 1431.517136] ? lockdep_init_map_type+0x2c7/0x780 [ 1431.518224] ? blk_queue_flag_set+0x22/0x30 [ 1431.519198] ? __loop_update_dio+0x2d2/0x690 [ 1431.520202] loop_configure+0x954/0x1480 [ 1431.521137] lo_ioctl+0xa72/0x1760 [ 1431.521962] ? avc_has_extended_perms+0x7f1/0xf40 [ 1431.523062] ? loop_set_status_old+0x250/0x250 [ 1431.524102] ? avc_ss_reset+0x180/0x180 [ 1431.525006] ? lock_acquire+0x197/0x470 [ 1431.525911] ? find_held_lock+0x2c/0x110 [ 1431.526846] ? __lock_acquire+0xbb1/0x5b00 [ 1431.527873] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1431.529059] ? generic_block_fiemap+0x60/0x60 [ 1431.530097] ? loop_set_status_old+0x250/0x250 [ 1431.531133] blkdev_ioctl+0x291/0x710 [ 1431.532001] ? blkdev_common_ioctl+0x1870/0x1870 [ 1431.533080] ? selinux_file_ioctl+0xb6/0x270 [ 1431.534100] block_ioctl+0xf9/0x140 [ 1431.534924] ? blkdev_read_iter+0x1c0/0x1c0 [ 1431.535900] __x64_sys_ioctl+0x19a/0x210 [ 1431.536835] do_syscall_64+0x33/0x40 [ 1431.537698] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1431.538869] RIP: 0033:0x7ff2477d48d7 [ 1431.539718] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1431.543843] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1431.545584] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff2477d48d7 [ 1431.547210] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1431.548831] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1431.550427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1431.552017] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 [ 1431.584452] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1431.586495] EXT4-fs (loop1): group descriptors corrupted! [ 1431.650263] EXT4-fs (loop0): invalid first ino: 0 00:23:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {0x0}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:23:51 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:23:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 29) 00:23:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:23:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) [ 1431.900426] FAULT_INJECTION: forcing a failure. [ 1431.900426] name failslab, interval 1, probability 0, space 0, times 0 [ 1431.904647] CPU: 0 PID: 9554 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1431.906200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1431.908079] Call Trace: [ 1431.908683] dump_stack+0x107/0x167 [ 1431.909538] should_fail.cold+0x5/0xa [ 1431.910421] ? __kernfs_new_node+0xd4/0x860 [ 1431.911402] should_failslab+0x5/0x20 [ 1431.912264] kmem_cache_alloc+0x5b/0x310 [ 1431.913198] __kernfs_new_node+0xd4/0x860 [ 1431.914163] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1431.915236] ? lock_downgrade+0x6d0/0x6d0 [ 1431.916190] ? mutex_lock_io_nested+0xf30/0xf30 [ 1431.917253] ? __kernfs_new_node+0x549/0x860 [ 1431.918281] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1431.919403] ? __lockdep_reset_lock+0x180/0x180 [ 1431.920483] kernfs_new_node+0x93/0x120 [ 1431.921406] __kernfs_create_file+0x51/0x350 [ 1431.922430] sysfs_add_file_mode_ns+0x221/0x560 [ 1431.923506] internal_create_group+0x324/0xb30 [ 1431.924568] ? sysfs_remove_group+0x170/0x170 [ 1431.925615] ? lockdep_init_map_type+0x2c7/0x780 [ 1431.926711] ? blk_queue_flag_set+0x22/0x30 [ 1431.927693] ? __loop_update_dio+0x2d2/0x690 [ 1431.928715] loop_configure+0x954/0x1480 [ 1431.929686] lo_ioctl+0xa72/0x1760 [ 1431.930509] ? avc_has_extended_perms+0x7f1/0xf40 [ 1431.931618] ? loop_set_status_old+0x250/0x250 [ 1431.932668] ? avc_ss_reset+0x180/0x180 [ 1431.933591] ? lock_acquire+0x197/0x470 [ 1431.934500] ? find_held_lock+0x2c/0x110 [ 1431.935445] ? __lock_acquire+0xbb1/0x5b00 [ 1431.936487] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1431.937702] ? generic_block_fiemap+0x60/0x60 [ 1431.938742] ? loop_set_status_old+0x250/0x250 [ 1431.939786] blkdev_ioctl+0x291/0x710 [ 1431.940662] ? blkdev_common_ioctl+0x1870/0x1870 [ 1431.941763] ? selinux_file_ioctl+0xb6/0x270 [ 1431.942776] block_ioctl+0xf9/0x140 [ 1431.943609] ? blkdev_read_iter+0x1c0/0x1c0 [ 1431.944596] __x64_sys_ioctl+0x19a/0x210 [ 1431.945544] do_syscall_64+0x33/0x40 [ 1431.946400] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1431.947568] RIP: 0033:0x7ff2477d48d7 [ 1431.948426] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1431.952617] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1431.954717] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff2477d48d7 [ 1431.956351] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1431.957983] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1431.959613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1431.961245] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 [ 1432.012089] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1432.014420] EXT4-fs (loop1): group descriptors corrupted! 00:24:08 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r2}, &(0x7f0000000040)) r3 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0xc, 0x2, @tid=r1}, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r3}, &(0x7f0000000040)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r5}, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000002300)={0x1948, 0x1d, 0x200, 0x70bd2c, 0x25dfdbfb, {0xe}, [@nested={0xd8, 0x20, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @pid=r2}, @typed={0xc1, 0x5e, 0x0, 0x0, @binary="af5d26be795c1b24b2e60bb93a4d36d31183bcfbb70cd6b1dd9d69a4aa7aebe400806a247cf60289af4ce01b595d58d7ad386ab9d9f5eb5a32d57278748e83622a6750aa272faa2c6a3ce42bb953734441588301feb4a30f923974ab4a47e590b7c3a0be9ed908a24fd78064423b5b74ca483719c1ddb9aaac33374b06ea0153c88ec6ea12bd19d216f527ac79f4bd6e275b2b36b7dff481ea41a995556431bbdfb0b2a9008984a139aa786a8a8b1f62add403e3aa2df031101a5a46f7"}, @typed={0x8, 0x15, 0x0, 0x0, @pid=r3}]}, @nested={0x18b, 0x2, 0x0, 0x1, [@generic="ce49cb7122ccb990106c05556734480691aa073191d365a23db8317e0b418e8c44b0b555157c4da42c807c36fb2544f611585b177bada609c469d29d119ef18c5bd3adddbe4c7ea4c70c7be7ea2244cb24bf1e74c4589b455fdf5a6e2022594e57b31c4349641a4d0921a436437eabc8229c7c9cc1247d", @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@local}, @generic="831db676464d10353ac31ab3f6f6d95bb3ba3a8060d439812cd3939daedfb87b1c41f92543dde632c031de1aee1e9118237c5761cea736aa3b9123cd4a9541d4b6d0d30cf4fe0808e04a96817467308453c5748cd3b28bd07ba1c3ba92054360ccbddaee300bb0266a66dd933b15c88b9405c7fb75a24a1b92438600af481e761850a2e26f34e6ec7c8fb99243f81036582bf0e3bbfc57fb2e533b8fe366c6cc5086e63887d6c14c5bc12f2519805c458e2a73400416e95033861c3b2a8a5074b20e10ba2fb1c28b67c949bd4428a0fd7b6cf831031116d9df9e76cd9095b100d36d76b0033c381958e37460523832eb40e55f98de7cd98d", @typed={0x4, 0x78}]}, @generic="e2e691723c4474b6e3890b5b15680984b4d424c2116a3be99535128db8f7e5ba36418c49b8a3e0c3217899d4224e27631f27ea3771ca7b18c5951480888c44285297dc7840d6f8a9c82dcf82d7", @nested={0x203, 0x86, 0x0, 0x1, [@generic, @generic="262cce5b209127f2e5d592150562ef438a2224ed04bd8772c6af6f020f88c86df5c4745ee4cae90557e503f33a559d551be964ba5147846fcb9704c029fb0c563e6f897ee891e52f5548cf937907f4bdd334e3", @typed={0x32, 0x5, 0x0, 0x0, @binary="7aea91c40a172cefbbebaf1c6f395ab195badf11e2300ee8724e9937591d6b8aa5a75e64fb533e8b9ff4bb44cbc4"}, @generic="85d718c162969404c1cf9ebd01c3348f28d084f3f1fe23538588a6e2b23a4774cc86ad9dee242e97fbafaecb7a892d621ffa33031d808b5d43e38dc6a9fb4149d4834aaeeeeee75e6fea9a3650be0f4be1ee37392a88ebb3ecaaad22012b74c120d5b593ee872309de02f0e935cd506b0ea82bdf6d08b029b1e0d4c40f0206e44978618a4c35c3bbc4d537400a32a9b43c118014e8406ee5193da0ac95b78a054814b59df6fa55ed0bd384eb1ec9831ae80e16bc10427e23d53ccabec6e843b2ea4aa66cd46061f8f6fedfe587f8e9", @typed={0x8, 0x40, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x74}, @generic="5bfecb2e4af0328870a61a890d25304bda24c427cb7d9127858d2eb24ad21414018b0166ac7d54f556baf92c4e8504dbdf94ae20afe6dfed52f0", @generic="e77248f3a5cef1354570db4d24980b1fdf62f367aab320bcc3779bc60126fc3373351569aa47cd6bc0ebd49046f03240d70b6b0d984cdf1ce7fffcaf0bab2a7956a8b148f2d7633e0793ea5e06523f51043f326b3d4aa8f2455fc46d8cbbf4bc3c25d6"]}, @typed={0xc, 0x41, 0x0, 0x0, @u64=0x3}, @nested={0x18b, 0x1b, 0x0, 0x1, [@typed={0x5, 0x78, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x6c, 0x0, 0x0, @u64=0x7}, @generic="9852a9f276fe58ed236faa1cd7022bbd22f6347a5a5961dbe991f39e9194050c6d25b72f13d05d8a1e2f2d3c6e418fbecaca63320b1a2d94c7e589138b0dc13009790cf75ef6981b42616395ec7c7d9e964000232eb76a23d0a58af0589c30ca9b7f5e3c1f1f399fe7ab80074518813065", @generic="8e62db65f3ccf76f1a32a07f079f6f658788d4a45fcc9ccbb94b4dd7cb40dbd12c908a92920a24c2", @typed={0x74, 0x13, 0x0, 0x0, @binary="a6df6245f29f46dd554e361606fa3ab641b5d88f80a171ff733688bdd5063529ec8a1788fc3e91c06f85af08158a68cece95fb179e7d77b61361737acb1846de2851c055ad9bffb352b77b7d97f883200bc48b29961c8b21b66d68c848292512f8cabd20ebd700173406bece1564b74c"}, @generic="59e88240a66364199398f90d71a11cf8e6a54aa202677ba43ae75548a9e8b247257d584ccf0d48860847e4ec5bb0283cfdd6b42d056adb05ed5cd67ea33a4a6004212cad24a1984afb42330652fad83a2b7b03ff9cc79ff4450ce84de3c0", @typed={0x8, 0x87, 0x0, 0x0, @u32}]}, @generic="ae0d61d212166fe0cd4cd9d832ed592622e6448cbf59aac64487230e1f46551290c2978058a9da128ed0fb1d274b4b6a1503664ee4af5f0364661deaa97a997dd1efeeb114bb7073a6291acc7c73d6763d5f15852d577688e2c4abad5397b318428e34fceacf0343b1fb448fdebc9e8b6d7f1117ca7b9b5bbe8df3b711ba8d89e97f8586b1dc27fcd7d84e34eac7fa9816f68e2729ece03a803175200abc9894c25623464b80f9950b324016f10c99bf153db18e5a652bd2b37818e3cf807aaa0ef402d14e67c80f79484c80ae5c5204454afaed4d5722622fdf4fa4581bf3a35d1e1d9845986acf3187712453f6b3c4a296067d10fc", @typed={0x8, 0x14, 0x0, 0x0, @fd=r4}, @nested={0x11e7, 0x7a, 0x0, 0x1, [@generic="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", @generic="195c339c8ab7be46ada14fb0759a350eeb2f1573cc7fced694c3864e208df53e3d2786bd0154234325f95007bf0293f36a5e594c610f8d9300b5705e3dc83216d2de5dac8dc9ccc672cca5483d329475dab8aa70f8c8b5e461e5471cae9dd46ff7aec8e8bdbb1096c2791091d5840fa6a40e80304be5fa", @generic, @generic="f0fa500367948ad00cc1cba16acb00f5e15e5811d5f23ef74bc59c4d73068260d66288adccfd04ade12209bdfe7b297eb6a869e593e6bc948ad305d3cfc2fd066bc37ac801f499c86553ef533b3a1bba84389ca04abd3636aeb032cf9d6b60ff4a2843ecf3419d7fb80e7be5a5771c3a931bddf346123fa4c2c571feb1c8540520a6bb191dd1886dfe12b81702644abc6d11e2b47ef95bb2cf27cb92933dc1c63607ba0d56a2ea28a28020f00738501bd9c0ebfcb7166bdd4e0890788a2f5e2f6c3a6d1d390d09308b9c4134a8949ac6d48b953625d8f2fbf8", @typed={0x8, 0x56, 0x0, 0x0, @pid=r5}, @generic="410fb9c5c0f73ea4f28090edbc474ca1deda946761388f841c8584d52313be47cd8c8d297937759a894c43eb81e4dca3f102fa10b6afb07a77229199c4a4cea08e8f1805304e5ae7cc48b532517625fd72b335b7fda3d68c938a9527b41c9476efe8d359f2f096fc4c146548926952", @typed={0x14, 0x29, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0x5e, 0x0, 0x0, @pid}]}]}, 0x1948}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000010000000180001801400020077d10f31ca0000000000000000000500080006f52f000000"], 0x34}}, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x7f, 0x1, 0x8, 0x4, 0x0, 0xfffffffffffffffa, 0x2000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f0000000200)}, 0x44404, 0x5, 0x2, 0x0, 0x5, 0x2fd, 0x0, 0x0, 0xfa}, r5, 0x5, r6, 0x9) 00:24:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:24:08 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {0x0}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:24:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:24:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 30) 00:24:08 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:24:08 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:24:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1448.888680] FAULT_INJECTION: forcing a failure. [ 1448.888680] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.890239] CPU: 1 PID: 9579 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1448.891109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1448.892139] Call Trace: [ 1448.892479] dump_stack+0x107/0x167 [ 1448.892950] should_fail.cold+0x5/0xa [ 1448.893438] ? __kernfs_new_node+0xd4/0x860 [ 1448.893997] should_failslab+0x5/0x20 [ 1448.894473] kmem_cache_alloc+0x5b/0x310 [ 1448.894977] __kernfs_new_node+0xd4/0x860 [ 1448.895490] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1448.896077] ? lock_downgrade+0x6d0/0x6d0 [ 1448.896607] ? mutex_lock_io_nested+0xf30/0xf30 [ 1448.897182] ? __kernfs_new_node+0x549/0x860 [ 1448.897741] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1448.898338] ? __lockdep_reset_lock+0x180/0x180 [ 1448.898941] kernfs_new_node+0x93/0x120 [ 1448.899454] __kernfs_create_file+0x51/0x350 [ 1448.900021] sysfs_add_file_mode_ns+0x221/0x560 [ 1448.900619] internal_create_group+0x324/0xb30 [ 1448.901216] ? sysfs_remove_group+0x170/0x170 [ 1448.901809] ? lockdep_init_map_type+0x2c7/0x780 [ 1448.902423] ? blk_queue_flag_set+0x22/0x30 [ 1448.902983] ? __loop_update_dio+0x2d2/0x690 [ 1448.903572] loop_configure+0x954/0x1480 [ 1448.904110] lo_ioctl+0xa72/0x1760 [ 1448.904560] ? avc_has_extended_perms+0x7f1/0xf40 [ 1448.905187] ? loop_set_status_old+0x250/0x250 [ 1448.905802] ? avc_ss_reset+0x180/0x180 [ 1448.906321] ? lock_acquire+0x197/0x470 [ 1448.906834] ? find_held_lock+0x2c/0x110 [ 1448.907375] ? __lock_acquire+0xbb1/0x5b00 [ 1448.907964] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1448.908646] ? generic_block_fiemap+0x60/0x60 [ 1448.909217] ? loop_set_status_old+0x250/0x250 [ 1448.909806] blkdev_ioctl+0x291/0x710 [ 1448.910296] ? blkdev_common_ioctl+0x1870/0x1870 [ 1448.910908] ? selinux_file_ioctl+0xb6/0x270 [ 1448.911476] block_ioctl+0xf9/0x140 [ 1448.911945] ? blkdev_read_iter+0x1c0/0x1c0 [ 1448.912506] __x64_sys_ioctl+0x19a/0x210 [ 1448.913033] do_syscall_64+0x33/0x40 [ 1448.913512] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1448.914195] RIP: 0033:0x7ff2477d48d7 [ 1448.914662] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1448.917043] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1448.918033] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff2477d48d7 [ 1448.918972] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1448.919894] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1448.920824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1448.921751] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 [ 1448.932271] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1448.933572] EXT4-fs (loop1): group descriptors corrupted! 00:24:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 31) [ 1448.969589] EXT4-fs (loop0): unsupported inode size: 0 [ 1448.970956] EXT4-fs (loop0): blocksize: 2048 00:24:08 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1449.059652] FAULT_INJECTION: forcing a failure. [ 1449.059652] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.061337] CPU: 1 PID: 9588 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1449.062179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1449.063195] Call Trace: [ 1449.063537] dump_stack+0x107/0x167 [ 1449.063988] should_fail.cold+0x5/0xa [ 1449.064474] ? create_object.isra.0+0x3a/0xa20 [ 1449.065051] should_failslab+0x5/0x20 [ 1449.065524] kmem_cache_alloc+0x5b/0x310 [ 1449.066032] ? mark_held_locks+0x9e/0xe0 [ 1449.066535] create_object.isra.0+0x3a/0xa20 [ 1449.067082] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1449.067719] kmem_cache_alloc+0x159/0x310 [ 1449.068236] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1449.068921] idr_get_free+0x4b5/0x8f0 [ 1449.069405] idr_alloc_u32+0x170/0x2d0 [ 1449.069907] ? __fprop_inc_percpu_max+0x130/0x130 [ 1449.070522] ? lock_acquire+0x197/0x470 [ 1449.071025] ? __kernfs_new_node+0xff/0x860 [ 1449.071592] idr_alloc_cyclic+0x102/0x230 [ 1449.072122] ? idr_alloc+0x130/0x130 [ 1449.072612] ? rwlock_bug.part.0+0x90/0x90 [ 1449.073164] __kernfs_new_node+0x117/0x860 [ 1449.073725] ? perf_trace_lock+0xac/0x490 [ 1449.074262] ? perf_trace_lock+0xac/0x490 [ 1449.074797] ? lock_chain_count+0x20/0x20 [ 1449.075328] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1449.075933] ? __lockdep_reset_lock+0x180/0x180 [ 1449.076535] ? __lockdep_reset_lock+0x180/0x180 [ 1449.077137] ? update_load_avg+0x162/0x1870 [ 1449.077705] ? find_held_lock+0x2c/0x110 [ 1449.078223] ? set_user_nice.part.0+0x2fd/0x760 [ 1449.078829] kernfs_create_dir_ns+0x9c/0x230 [ 1449.079405] internal_create_group+0x793/0xb30 [ 1449.079987] ? set_user_nice.part.0+0x2fd/0x760 [ 1449.080586] ? sysfs_remove_group+0x170/0x170 [ 1449.081156] ? lockdep_init_map_type+0x2c7/0x780 [ 1449.081793] ? blk_queue_flag_set+0x22/0x30 [ 1449.082350] ? __loop_update_dio+0x2d2/0x690 [ 1449.082913] loop_configure+0x954/0x1480 [ 1449.083447] lo_ioctl+0xa72/0x1760 [ 1449.083902] ? avc_has_extended_perms+0x7f1/0xf40 [ 1449.084524] ? loop_set_status_old+0x250/0x250 [ 1449.085114] ? avc_ss_reset+0x180/0x180 [ 1449.085648] ? lock_acquire+0x197/0x470 [ 1449.086152] ? find_held_lock+0x2c/0x110 [ 1449.086683] ? __lock_acquire+0xbb1/0x5b00 [ 1449.087257] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1449.087932] ? generic_block_fiemap+0x60/0x60 [ 1449.088512] ? loop_set_status_old+0x250/0x250 [ 1449.089087] blkdev_ioctl+0x291/0x710 [ 1449.089578] ? blkdev_common_ioctl+0x1870/0x1870 [ 1449.090183] ? selinux_file_ioctl+0xb6/0x270 [ 1449.090742] block_ioctl+0xf9/0x140 [ 1449.091197] ? blkdev_read_iter+0x1c0/0x1c0 [ 1449.091751] __x64_sys_ioctl+0x19a/0x210 [ 1449.092270] do_syscall_64+0x33/0x40 [ 1449.092743] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1449.093398] RIP: 0033:0x7ff2477d48d7 [ 1449.093879] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1449.096213] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1449.097186] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff2477d48d7 [ 1449.098092] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1449.099000] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1449.099903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1449.100807] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 00:24:08 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:24:08 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) eventfd(0x20) r1 = signalfd4(r0, &(0x7f0000000380)={[0x7ff]}, 0x8, 0x80000) r2 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_getevents(r4, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r3, 0x0}]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './cgroup.cpu/cpuset.cpus\x00'}) fsmount(r5, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) dup2(r0, r0) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) [ 1449.141727] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1449.143869] EXT4-fs (loop1): group descriptors corrupted! 00:24:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1449.185845] EXT4-fs (loop0): unsupported inode size: 0 [ 1449.186555] EXT4-fs (loop0): blocksize: 2048 00:24:09 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) eventfd(0x20) r1 = signalfd4(r0, &(0x7f0000000380)={[0x7ff]}, 0x8, 0x80000) r2 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_getevents(r4, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r3, 0x0}]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './cgroup.cpu/cpuset.cpus\x00'}) fsmount(r5, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) dup2(r0, r0) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) 00:24:27 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:24:27 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40), 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/179, 0xb3}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/219, 0xe6}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000000040)=""/46, 0x1b}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) rt_sigqueueinfo(r0, 0x6, &(0x7f0000000080)={0x3a, 0x9f, 0x6}) 00:24:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:24:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:24:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:24:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 32) 00:24:27 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:24:27 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r2}, &(0x7f0000000040)) r3 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0xc, 0x2, @tid=r1}, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r3}, &(0x7f0000000040)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r5}, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000002300)={0x1948, 0x1d, 0x200, 0x70bd2c, 0x25dfdbfb, {0xe}, [@nested={0xd8, 0x20, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @pid=r2}, @typed={0xc1, 0x5e, 0x0, 0x0, @binary="af5d26be795c1b24b2e60bb93a4d36d31183bcfbb70cd6b1dd9d69a4aa7aebe400806a247cf60289af4ce01b595d58d7ad386ab9d9f5eb5a32d57278748e83622a6750aa272faa2c6a3ce42bb953734441588301feb4a30f923974ab4a47e590b7c3a0be9ed908a24fd78064423b5b74ca483719c1ddb9aaac33374b06ea0153c88ec6ea12bd19d216f527ac79f4bd6e275b2b36b7dff481ea41a995556431bbdfb0b2a9008984a139aa786a8a8b1f62add403e3aa2df031101a5a46f7"}, @typed={0x8, 0x15, 0x0, 0x0, @pid=r3}]}, @nested={0x18b, 0x2, 0x0, 0x1, [@generic="ce49cb7122ccb990106c05556734480691aa073191d365a23db8317e0b418e8c44b0b555157c4da42c807c36fb2544f611585b177bada609c469d29d119ef18c5bd3adddbe4c7ea4c70c7be7ea2244cb24bf1e74c4589b455fdf5a6e2022594e57b31c4349641a4d0921a436437eabc8229c7c9cc1247d", @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@local}, @generic="831db676464d10353ac31ab3f6f6d95bb3ba3a8060d439812cd3939daedfb87b1c41f92543dde632c031de1aee1e9118237c5761cea736aa3b9123cd4a9541d4b6d0d30cf4fe0808e04a96817467308453c5748cd3b28bd07ba1c3ba92054360ccbddaee300bb0266a66dd933b15c88b9405c7fb75a24a1b92438600af481e761850a2e26f34e6ec7c8fb99243f81036582bf0e3bbfc57fb2e533b8fe366c6cc5086e63887d6c14c5bc12f2519805c458e2a73400416e95033861c3b2a8a5074b20e10ba2fb1c28b67c949bd4428a0fd7b6cf831031116d9df9e76cd9095b100d36d76b0033c381958e37460523832eb40e55f98de7cd98d", @typed={0x4, 0x78}]}, @generic="e2e691723c4474b6e3890b5b15680984b4d424c2116a3be99535128db8f7e5ba36418c49b8a3e0c3217899d4224e27631f27ea3771ca7b18c5951480888c44285297dc7840d6f8a9c82dcf82d7", @nested={0x203, 0x86, 0x0, 0x1, [@generic, @generic="262cce5b209127f2e5d592150562ef438a2224ed04bd8772c6af6f020f88c86df5c4745ee4cae90557e503f33a559d551be964ba5147846fcb9704c029fb0c563e6f897ee891e52f5548cf937907f4bdd334e3", @typed={0x32, 0x5, 0x0, 0x0, @binary="7aea91c40a172cefbbebaf1c6f395ab195badf11e2300ee8724e9937591d6b8aa5a75e64fb533e8b9ff4bb44cbc4"}, @generic="85d718c162969404c1cf9ebd01c3348f28d084f3f1fe23538588a6e2b23a4774cc86ad9dee242e97fbafaecb7a892d621ffa33031d808b5d43e38dc6a9fb4149d4834aaeeeeee75e6fea9a3650be0f4be1ee37392a88ebb3ecaaad22012b74c120d5b593ee872309de02f0e935cd506b0ea82bdf6d08b029b1e0d4c40f0206e44978618a4c35c3bbc4d537400a32a9b43c118014e8406ee5193da0ac95b78a054814b59df6fa55ed0bd384eb1ec9831ae80e16bc10427e23d53ccabec6e843b2ea4aa66cd46061f8f6fedfe587f8e9", @typed={0x8, 0x40, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x74}, @generic="5bfecb2e4af0328870a61a890d25304bda24c427cb7d9127858d2eb24ad21414018b0166ac7d54f556baf92c4e8504dbdf94ae20afe6dfed52f0", @generic="e77248f3a5cef1354570db4d24980b1fdf62f367aab320bcc3779bc60126fc3373351569aa47cd6bc0ebd49046f03240d70b6b0d984cdf1ce7fffcaf0bab2a7956a8b148f2d7633e0793ea5e06523f51043f326b3d4aa8f2455fc46d8cbbf4bc3c25d6"]}, @typed={0xc, 0x41, 0x0, 0x0, @u64=0x3}, @nested={0x18b, 0x1b, 0x0, 0x1, [@typed={0x5, 0x78, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x6c, 0x0, 0x0, @u64=0x7}, @generic="9852a9f276fe58ed236faa1cd7022bbd22f6347a5a5961dbe991f39e9194050c6d25b72f13d05d8a1e2f2d3c6e418fbecaca63320b1a2d94c7e589138b0dc13009790cf75ef6981b42616395ec7c7d9e964000232eb76a23d0a58af0589c30ca9b7f5e3c1f1f399fe7ab80074518813065", @generic="8e62db65f3ccf76f1a32a07f079f6f658788d4a45fcc9ccbb94b4dd7cb40dbd12c908a92920a24c2", @typed={0x74, 0x13, 0x0, 0x0, @binary="a6df6245f29f46dd554e361606fa3ab641b5d88f80a171ff733688bdd5063529ec8a1788fc3e91c06f85af08158a68cece95fb179e7d77b61361737acb1846de2851c055ad9bffb352b77b7d97f883200bc48b29961c8b21b66d68c848292512f8cabd20ebd700173406bece1564b74c"}, @generic="59e88240a66364199398f90d71a11cf8e6a54aa202677ba43ae75548a9e8b247257d584ccf0d48860847e4ec5bb0283cfdd6b42d056adb05ed5cd67ea33a4a6004212cad24a1984afb42330652fad83a2b7b03ff9cc79ff4450ce84de3c0", @typed={0x8, 0x87, 0x0, 0x0, @u32}]}, @generic="ae0d61d212166fe0cd4cd9d832ed592622e6448cbf59aac64487230e1f46551290c2978058a9da128ed0fb1d274b4b6a1503664ee4af5f0364661deaa97a997dd1efeeb114bb7073a6291acc7c73d6763d5f15852d577688e2c4abad5397b318428e34fceacf0343b1fb448fdebc9e8b6d7f1117ca7b9b5bbe8df3b711ba8d89e97f8586b1dc27fcd7d84e34eac7fa9816f68e2729ece03a803175200abc9894c25623464b80f9950b324016f10c99bf153db18e5a652bd2b37818e3cf807aaa0ef402d14e67c80f79484c80ae5c5204454afaed4d5722622fdf4fa4581bf3a35d1e1d9845986acf3187712453f6b3c4a296067d10fc", @typed={0x8, 0x14, 0x0, 0x0, @fd=r4}, @nested={0x11e7, 0x7a, 0x0, 0x1, [@generic="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", @generic="195c339c8ab7be46ada14fb0759a350eeb2f1573cc7fced694c3864e208df53e3d2786bd0154234325f95007bf0293f36a5e594c610f8d9300b5705e3dc83216d2de5dac8dc9ccc672cca5483d329475dab8aa70f8c8b5e461e5471cae9dd46ff7aec8e8bdbb1096c2791091d5840fa6a40e80304be5fa", @generic, @generic="f0fa500367948ad00cc1cba16acb00f5e15e5811d5f23ef74bc59c4d73068260d66288adccfd04ade12209bdfe7b297eb6a869e593e6bc948ad305d3cfc2fd066bc37ac801f499c86553ef533b3a1bba84389ca04abd3636aeb032cf9d6b60ff4a2843ecf3419d7fb80e7be5a5771c3a931bddf346123fa4c2c571feb1c8540520a6bb191dd1886dfe12b81702644abc6d11e2b47ef95bb2cf27cb92933dc1c63607ba0d56a2ea28a28020f00738501bd9c0ebfcb7166bdd4e0890788a2f5e2f6c3a6d1d390d09308b9c4134a8949ac6d48b953625d8f2fbf8", @typed={0x8, 0x56, 0x0, 0x0, @pid=r5}, @generic="410fb9c5c0f73ea4f28090edbc474ca1deda946761388f841c8584d52313be47cd8c8d297937759a894c43eb81e4dca3f102fa10b6afb07a77229199c4a4cea08e8f1805304e5ae7cc48b532517625fd72b335b7fda3d68c938a9527b41c9476efe8d359f2f096fc4c146548926952", @typed={0x14, 0x29, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0x5e, 0x0, 0x0, @pid}]}]}, 0x1948}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000010000000180001801400020077d10f31ca0000000000000000000500080006f52f000000"], 0x34}}, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x7f, 0x1, 0x8, 0x4, 0x0, 0xfffffffffffffffa, 0x2000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f0000000200)}, 0x44404, 0x5, 0x2, 0x0, 0x5, 0x2fd, 0x0, 0x0, 0xfa}, r5, 0x5, r6, 0x9) [ 1467.362863] FAULT_INJECTION: forcing a failure. [ 1467.362863] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.365669] CPU: 0 PID: 9612 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1467.367336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1467.369291] Call Trace: [ 1467.369936] dump_stack+0x107/0x167 [ 1467.370813] should_fail.cold+0x5/0xa [ 1467.371731] ? __kernfs_new_node+0xd4/0x860 [ 1467.372767] should_failslab+0x5/0x20 [ 1467.373672] kmem_cache_alloc+0x5b/0x310 [ 1467.374651] __kernfs_new_node+0xd4/0x860 [ 1467.375645] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1467.376768] ? lock_downgrade+0x6d0/0x6d0 [ 1467.377770] ? mutex_lock_io_nested+0xf30/0xf30 [ 1467.378890] ? __kernfs_new_node+0x549/0x860 [ 1467.379800] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1467.380761] ? __lockdep_reset_lock+0x180/0x180 [ 1467.381690] kernfs_new_node+0x93/0x120 [ 1467.382496] __kernfs_create_file+0x51/0x350 [ 1467.383379] sysfs_add_file_mode_ns+0x221/0x560 [ 1467.384319] internal_create_group+0x324/0xb30 [ 1467.385232] ? sysfs_remove_group+0x170/0x170 [ 1467.386134] ? lockdep_init_map_type+0x2c7/0x780 [ 1467.387076] ? blk_queue_flag_set+0x22/0x30 [ 1467.387944] ? __loop_update_dio+0x2d2/0x690 [ 1467.388842] loop_configure+0x954/0x1480 [ 1467.389693] lo_ioctl+0xa72/0x1760 [ 1467.390431] ? avc_has_extended_perms+0x7f1/0xf40 [ 1467.391402] ? loop_set_status_old+0x250/0x250 [ 1467.392340] ? avc_ss_reset+0x180/0x180 [ 1467.393146] ? lock_acquire+0x197/0x470 [ 1467.394104] ? find_held_lock+0x2c/0x110 [ 1467.394943] ? __lock_acquire+0xbb1/0x5b00 [ 1467.395850] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1467.396895] ? generic_block_fiemap+0x60/0x60 [ 1467.397820] ? loop_set_status_old+0x250/0x250 [ 1467.398907] blkdev_ioctl+0x291/0x710 [ 1467.399820] ? blkdev_common_ioctl+0x1870/0x1870 [ 1467.400953] ? selinux_file_ioctl+0xb6/0x270 [ 1467.402020] block_ioctl+0xf9/0x140 [ 1467.402885] ? blkdev_read_iter+0x1c0/0x1c0 [ 1467.403914] __x64_sys_ioctl+0x19a/0x210 [ 1467.404894] do_syscall_64+0x33/0x40 [ 1467.405791] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1467.407017] RIP: 0033:0x7ff2477d48d7 [ 1467.407909] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1467.411964] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1467.413507] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff2477d48d7 [ 1467.414965] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1467.416403] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1467.417841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1467.419281] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 [ 1467.426022] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1467.428077] EXT4-fs (loop1): group descriptors corrupted! [ 1467.454260] EXT4-fs (loop0): unsupported inode size: 0 [ 1467.455519] EXT4-fs (loop0): blocksize: 2048 00:24:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 33) 00:24:27 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {0x0}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1467.517464] FAULT_INJECTION: forcing a failure. [ 1467.517464] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.519847] CPU: 0 PID: 9631 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1467.521292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1467.523074] Call Trace: [ 1467.523612] dump_stack+0x107/0x167 [ 1467.524368] should_fail.cold+0x5/0xa [ 1467.525162] ? create_object.isra.0+0x3a/0xa20 [ 1467.526126] should_failslab+0x5/0x20 [ 1467.526909] kmem_cache_alloc+0x5b/0x310 [ 1467.527748] create_object.isra.0+0x3a/0xa20 [ 1467.528633] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1467.529670] kmem_cache_alloc+0x159/0x310 [ 1467.530537] __kernfs_new_node+0xd4/0x860 [ 1467.531377] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1467.532352] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1467.533334] ? wait_for_completion_io+0x270/0x270 [ 1467.534318] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1467.535397] kernfs_new_node+0x93/0x120 [ 1467.536213] __kernfs_create_file+0x51/0x350 [ 1467.537111] sysfs_add_file_mode_ns+0x221/0x560 [ 1467.538064] internal_create_group+0x324/0xb30 [ 1467.538998] ? sysfs_remove_group+0x170/0x170 [ 1467.539911] ? lockdep_init_map_type+0x2c7/0x780 [ 1467.540867] ? blk_queue_flag_set+0x22/0x30 [ 1467.541742] ? __loop_update_dio+0x2d2/0x690 [ 1467.542635] loop_configure+0x954/0x1480 [ 1467.543469] lo_ioctl+0xa72/0x1760 [ 1467.544194] ? avc_has_extended_perms+0x7f1/0xf40 [ 1467.545171] ? loop_set_status_old+0x250/0x250 [ 1467.546117] ? avc_ss_reset+0x180/0x180 [ 1467.546925] ? lock_acquire+0x197/0x470 [ 1467.547726] ? find_held_lock+0x2c/0x110 [ 1467.548565] ? __lock_acquire+0xbb1/0x5b00 [ 1467.549483] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1467.550548] ? generic_block_fiemap+0x60/0x60 [ 1467.551474] ? loop_set_status_old+0x250/0x250 [ 1467.552400] blkdev_ioctl+0x291/0x710 [ 1467.553176] ? blkdev_common_ioctl+0x1870/0x1870 [ 1467.554150] ? selinux_file_ioctl+0xb6/0x270 [ 1467.555052] block_ioctl+0xf9/0x140 [ 1467.555782] ? blkdev_read_iter+0x1c0/0x1c0 [ 1467.556663] __x64_sys_ioctl+0x19a/0x210 [ 1467.557487] do_syscall_64+0x33/0x40 [ 1467.558266] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1467.559304] RIP: 0033:0x7ff2477d48d7 [ 1467.560063] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1467.563703] RSP: 002b:00007ff244d49f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1467.565237] RAX: ffffffffffffffda RBX: 00007ff24781e970 RCX: 00007ff2477d48d7 [ 1467.566704] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1467.568135] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1467.569594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1467.571031] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 00:24:27 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {0x0}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:24:27 executing program 2: r0 = memfd_create(&(0x7f00000004c0)='\x02!9\x91\xfd\x00\xe4\x12\xfc\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00\xc97\xf6\x81\xf9k\x8f3\xb8\xee\x8b\xce\xad\xbf\b \xd5\x8f{\x80\xe7\x9f\xfc#XO\xbd\x00\x00\x83\x82\xac\f\x85B\x9bV2\xfa\xdd\akp?\x00@?\x18\x1ft\x9d\xa9f\x1d\x9de\xa5G\xaa\x0f\x1f2N\xf5{\x98\xbe\xbb\x1e\x14\xd3\xc4\x9e\xf7\xd1\x1f\xa5\xba\xc5u\x1e\xa5\x1a\xa6f\xee\xf9\x18\xafC\x88\xf1E\xa3/\x12\xac\x1e\x9b\x9c\x85x\x87\x05{\xc1\xe1\b\x0f@\x03+mh\xa7i\x9b\xa2~A3\x1c\xb3\x0e\xc3\x18\x14~T\xd5\xdaH\xcb\xb3q\x1b\x98\xae\x98m\aEp\xf5\n\xba1\x10\xd7\xcf\x05G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\xf3jT\xbe\x9d\xf1/\x8d\x1dpTs?\xb1\x1d\x7f$\xe46\xdf\xac\xab\xd1E\xb9w\x97|\x1fBO\xce\x95\xbb\x9eNsJGZ\xc5 M9\x9b\x004\xc3Of', 0x0) prctl$PR_GET_TSC(0xe, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000140)=0x1) pwritev2(r0, &(0x7f0000000740)=[{&(0x7f0000000080)="5ce3cb859650af1afb0565e11048038ce2545319763abc63695e8b8ad9eae53b99db0aed536cc14ef50cea1f8581f17228a1967df044df0a12ea5f1e85794bfa0a687c45ed93ee8c4058e96a5c26dd13f32f711767ff5015aace03e8f046ad7c797c4cd3f50a8c9f44bad28899b5c0ba", 0x70}, {&(0x7f0000000180)="b6d87adae91ee431c293d045433ff5eb1454b536bd8065921ccf70f4b82e4e998994a2d287aa8d946564cd00d3070b63d6322441da865de1ab858ab946374485844ba13b7b63e48202d0aa6cc79c60b337b6d69fef145c925496bc", 0xffffffffffffff6a}, {&(0x7f0000000200)="d58d20ca5e5846083bed3f83a31316eaa9205b380f19c25dc13cad8b0f9ee6f2e402178f438fcb96001f61536e024f3c76e22ffafc7d68f4b724b43fbfde8a27ece40228e3", 0x45}, {&(0x7f0000000280)="4fa6401e9db70bed2b2349e8ac8364902617ee755547d9370bba9a04411896bc980a7d303c51683cd8c552b8faab09d22e036c7faeab668e79bf1a00a95e1c34cf70b3b393a6ecd1cb8a2b8ae25a73371075bcf778f2c622e40aa60ffd491b22995df0453b9b2e4fa7f13c1647a13e6a4415a343ab662a1007bdcdacd8b9859808c8733b803aa2", 0x87}, {&(0x7f0000000340)="e63e692f609f2e352802a43447fba087d1c05ac864229df33057a740f9ac9c59c7f9ed1fc8696fea07fa5a9a7a0d1e00443a789e8bb820172a4fc23d1dc0af8a24a2e7ff7928101b38359648f77a183b3a1a14c652f4c2594fe0d0e49b71097d94fb1a1af65a717efcbeb49657cbf4e06a52e1d1b99dfd89979bbbbab95dea102dfdc7eeccd329187ed393bac582a60f4b6af0dafd3229e9d4feae43323eddd92484408e04fdf4", 0xa7}, {&(0x7f0000000100)="cf87610e7b755f5db081bbe0b2cebfc44c1e074959ff566bafc359219ab080fcb620884124e500654646c3d2c29a4fa7ddb48ba12cd15e12d04b3e280cb9e3", 0x3f}, {&(0x7f0000000400)="c4d0e625e181f651b329c9629a1c8fa570928d4dab609a65fadd8273259a19942dd1711e0fe58f7ed92fa316266eb021adc447747cdb4cf90c1ef5268ce618613da108533142d3d63eac9b317ed7409eda70f83255f970361ef14b3de69b437a6c6b59381ec6746fa906bd757f0535694f03ddef6e5f5bee4cafd66ededa99161cdff68ec83636967edadc734ea62a7b32b77e2b9641f2d1e6152f521f5373c9008eeb0bda8b550df607c0689c21", 0xae}, {&(0x7f0000000640)="6968140b24041c554d50421ec3d8f1ab6f5bdb18757205670d7ea2d646f42d5c283af93e4ba8c7dacf1eb3c20eb4646eceace9abd7eae9b00fa4eeb6eb975bc7d69f2a6707d6338ae920c39fea9c9539dddc2dff24e22d36e149c7f534ea52a74d54bfb799c94e3626b9410665f95c9da9f14002b6e9a55f0e9f60764391cfed847a24681ca67ce56bc88147b1e593446a79e4124182c23e75293e6aaee22dc6df2db2f6cf27babf7867d5e67b74123f7788f6d40fd73ce578243a7d64f08baeafc927bf10eaa307c5851b93c3b939be87b655ffffedc4e46ea940a58951b8c2660fdf7e89072c5aa1e2919089b0190fadc28ace"}], 0x7, 0x400000, 0x0, 0x10) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x8d) finit_module(r0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001000)={0x0, 0x6, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x174, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x81}, @device_a, @from_mac=@broadcast}}, @NL80211_ATTR_FRAME={0x12c, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0x1}, {0xff}, @device_b, @broadcast, @from_mac=@device_b, {0x8, 0xb3}}, {0x4, 0x1, 0x2, 0x0, 0x1f}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7ffc}, @initial, @broadcast, @from_mac=@device_b, {0x5, 0x5f}}, {0x5, 0x1, 0x3, 0x1, 0x7}}}, @a_msdu=[{@broadcast, @device_a, 0x1b, "1582830dbcd745fe6fd44413f5e55dfefbe3e937d5213233d4f37d"}, {@device_a, @broadcast, 0xba, "e201ad193c78496e867d68f698505ce418fccd5d0b271901e54209d1bf3e7d195167e34f9def2213aae6c51cf0759339eb1f3ce0e6aefd1fcdd2dd5d68960d7ee7e7b70a0a5d71bfa54bd749a04b521d3835bddae86022533382511e650bd66afc9f11815171a6d35be53ebe6a9d04aec46cea12e30c3b63c1a10e49ede69fe87dabf8ad09eb9a10eebe289399f5a13f84733739cd2abccd3ac3b249801a4161e2add0e750f361ef796941c7a622fa049950e37c2de6312c7622"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x174}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) 00:24:27 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:24:27 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r1}, &(0x7f0000000040)) tkill(r1, 0x23) process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1467.662947] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1467.665032] EXT4-fs (loop1): group descriptors corrupted! 00:24:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:24:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) (fail_nth: 34) 00:24:27 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r2}, &(0x7f0000000040)) r3 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0xc, 0x2, @tid=r1}, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r3}, &(0x7f0000000040)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r5}, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000002300)={0x1948, 0x1d, 0x200, 0x70bd2c, 0x25dfdbfb, {0xe}, [@nested={0xd8, 0x20, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @pid=r2}, @typed={0xc1, 0x5e, 0x0, 0x0, @binary="af5d26be795c1b24b2e60bb93a4d36d31183bcfbb70cd6b1dd9d69a4aa7aebe400806a247cf60289af4ce01b595d58d7ad386ab9d9f5eb5a32d57278748e83622a6750aa272faa2c6a3ce42bb953734441588301feb4a30f923974ab4a47e590b7c3a0be9ed908a24fd78064423b5b74ca483719c1ddb9aaac33374b06ea0153c88ec6ea12bd19d216f527ac79f4bd6e275b2b36b7dff481ea41a995556431bbdfb0b2a9008984a139aa786a8a8b1f62add403e3aa2df031101a5a46f7"}, @typed={0x8, 0x15, 0x0, 0x0, @pid=r3}]}, @nested={0x18b, 0x2, 0x0, 0x1, [@generic="ce49cb7122ccb990106c05556734480691aa073191d365a23db8317e0b418e8c44b0b555157c4da42c807c36fb2544f611585b177bada609c469d29d119ef18c5bd3adddbe4c7ea4c70c7be7ea2244cb24bf1e74c4589b455fdf5a6e2022594e57b31c4349641a4d0921a436437eabc8229c7c9cc1247d", @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@local}, @generic="831db676464d10353ac31ab3f6f6d95bb3ba3a8060d439812cd3939daedfb87b1c41f92543dde632c031de1aee1e9118237c5761cea736aa3b9123cd4a9541d4b6d0d30cf4fe0808e04a96817467308453c5748cd3b28bd07ba1c3ba92054360ccbddaee300bb0266a66dd933b15c88b9405c7fb75a24a1b92438600af481e761850a2e26f34e6ec7c8fb99243f81036582bf0e3bbfc57fb2e533b8fe366c6cc5086e63887d6c14c5bc12f2519805c458e2a73400416e95033861c3b2a8a5074b20e10ba2fb1c28b67c949bd4428a0fd7b6cf831031116d9df9e76cd9095b100d36d76b0033c381958e37460523832eb40e55f98de7cd98d", @typed={0x4, 0x78}]}, @generic="e2e691723c4474b6e3890b5b15680984b4d424c2116a3be99535128db8f7e5ba36418c49b8a3e0c3217899d4224e27631f27ea3771ca7b18c5951480888c44285297dc7840d6f8a9c82dcf82d7", @nested={0x203, 0x86, 0x0, 0x1, [@generic, @generic="262cce5b209127f2e5d592150562ef438a2224ed04bd8772c6af6f020f88c86df5c4745ee4cae90557e503f33a559d551be964ba5147846fcb9704c029fb0c563e6f897ee891e52f5548cf937907f4bdd334e3", @typed={0x32, 0x5, 0x0, 0x0, @binary="7aea91c40a172cefbbebaf1c6f395ab195badf11e2300ee8724e9937591d6b8aa5a75e64fb533e8b9ff4bb44cbc4"}, @generic="85d718c162969404c1cf9ebd01c3348f28d084f3f1fe23538588a6e2b23a4774cc86ad9dee242e97fbafaecb7a892d621ffa33031d808b5d43e38dc6a9fb4149d4834aaeeeeee75e6fea9a3650be0f4be1ee37392a88ebb3ecaaad22012b74c120d5b593ee872309de02f0e935cd506b0ea82bdf6d08b029b1e0d4c40f0206e44978618a4c35c3bbc4d537400a32a9b43c118014e8406ee5193da0ac95b78a054814b59df6fa55ed0bd384eb1ec9831ae80e16bc10427e23d53ccabec6e843b2ea4aa66cd46061f8f6fedfe587f8e9", @typed={0x8, 0x40, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x74}, @generic="5bfecb2e4af0328870a61a890d25304bda24c427cb7d9127858d2eb24ad21414018b0166ac7d54f556baf92c4e8504dbdf94ae20afe6dfed52f0", @generic="e77248f3a5cef1354570db4d24980b1fdf62f367aab320bcc3779bc60126fc3373351569aa47cd6bc0ebd49046f03240d70b6b0d984cdf1ce7fffcaf0bab2a7956a8b148f2d7633e0793ea5e06523f51043f326b3d4aa8f2455fc46d8cbbf4bc3c25d6"]}, @typed={0xc, 0x41, 0x0, 0x0, @u64=0x3}, @nested={0x18b, 0x1b, 0x0, 0x1, [@typed={0x5, 0x78, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x6c, 0x0, 0x0, @u64=0x7}, @generic="9852a9f276fe58ed236faa1cd7022bbd22f6347a5a5961dbe991f39e9194050c6d25b72f13d05d8a1e2f2d3c6e418fbecaca63320b1a2d94c7e589138b0dc13009790cf75ef6981b42616395ec7c7d9e964000232eb76a23d0a58af0589c30ca9b7f5e3c1f1f399fe7ab80074518813065", @generic="8e62db65f3ccf76f1a32a07f079f6f658788d4a45fcc9ccbb94b4dd7cb40dbd12c908a92920a24c2", @typed={0x74, 0x13, 0x0, 0x0, @binary="a6df6245f29f46dd554e361606fa3ab641b5d88f80a171ff733688bdd5063529ec8a1788fc3e91c06f85af08158a68cece95fb179e7d77b61361737acb1846de2851c055ad9bffb352b77b7d97f883200bc48b29961c8b21b66d68c848292512f8cabd20ebd700173406bece1564b74c"}, @generic="59e88240a66364199398f90d71a11cf8e6a54aa202677ba43ae75548a9e8b247257d584ccf0d48860847e4ec5bb0283cfdd6b42d056adb05ed5cd67ea33a4a6004212cad24a1984afb42330652fad83a2b7b03ff9cc79ff4450ce84de3c0", @typed={0x8, 0x87, 0x0, 0x0, @u32}]}, @generic="ae0d61d212166fe0cd4cd9d832ed592622e6448cbf59aac64487230e1f46551290c2978058a9da128ed0fb1d274b4b6a1503664ee4af5f0364661deaa97a997dd1efeeb114bb7073a6291acc7c73d6763d5f15852d577688e2c4abad5397b318428e34fceacf0343b1fb448fdebc9e8b6d7f1117ca7b9b5bbe8df3b711ba8d89e97f8586b1dc27fcd7d84e34eac7fa9816f68e2729ece03a803175200abc9894c25623464b80f9950b324016f10c99bf153db18e5a652bd2b37818e3cf807aaa0ef402d14e67c80f79484c80ae5c5204454afaed4d5722622fdf4fa4581bf3a35d1e1d9845986acf3187712453f6b3c4a296067d10fc", @typed={0x8, 0x14, 0x0, 0x0, @fd=r4}, @nested={0x11e7, 0x7a, 0x0, 0x1, [@generic="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", @generic="195c339c8ab7be46ada14fb0759a350eeb2f1573cc7fced694c3864e208df53e3d2786bd0154234325f95007bf0293f36a5e594c610f8d9300b5705e3dc83216d2de5dac8dc9ccc672cca5483d329475dab8aa70f8c8b5e461e5471cae9dd46ff7aec8e8bdbb1096c2791091d5840fa6a40e80304be5fa", @generic, @generic="f0fa500367948ad00cc1cba16acb00f5e15e5811d5f23ef74bc59c4d73068260d66288adccfd04ade12209bdfe7b297eb6a869e593e6bc948ad305d3cfc2fd066bc37ac801f499c86553ef533b3a1bba84389ca04abd3636aeb032cf9d6b60ff4a2843ecf3419d7fb80e7be5a5771c3a931bddf346123fa4c2c571feb1c8540520a6bb191dd1886dfe12b81702644abc6d11e2b47ef95bb2cf27cb92933dc1c63607ba0d56a2ea28a28020f00738501bd9c0ebfcb7166bdd4e0890788a2f5e2f6c3a6d1d390d09308b9c4134a8949ac6d48b953625d8f2fbf8", @typed={0x8, 0x56, 0x0, 0x0, @pid=r5}, @generic="410fb9c5c0f73ea4f28090edbc474ca1deda946761388f841c8584d52313be47cd8c8d297937759a894c43eb81e4dca3f102fa10b6afb07a77229199c4a4cea08e8f1805304e5ae7cc48b532517625fd72b335b7fda3d68c938a9527b41c9476efe8d359f2f096fc4c146548926952", @typed={0x14, 0x29, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0x5e, 0x0, 0x0, @pid}]}]}, 0x1948}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000010000000180001801400020077d10f31ca0000000000000000000500080006f52f000000"], 0x34}}, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x7f, 0x1, 0x8, 0x4, 0x0, 0xfffffffffffffffa, 0x2000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f0000000200)}, 0x44404, 0x5, 0x2, 0x0, 0x5, 0x2fd, 0x0, 0x0, 0xfa}, r5, 0x5, r6, 0x9) [ 1467.864624] EXT4-fs (loop0): unsupported inode size: 0 [ 1467.865915] EXT4-fs (loop0): blocksize: 2048 00:24:46 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:24:46 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r2}, &(0x7f0000000040)) r3 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0xc, 0x2, @tid=r1}, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r3}, &(0x7f0000000040)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r5}, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000002300)={0x1948, 0x1d, 0x200, 0x70bd2c, 0x25dfdbfb, {0xe}, [@nested={0xd8, 0x20, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @pid=r2}, @typed={0xc1, 0x5e, 0x0, 0x0, @binary="af5d26be795c1b24b2e60bb93a4d36d31183bcfbb70cd6b1dd9d69a4aa7aebe400806a247cf60289af4ce01b595d58d7ad386ab9d9f5eb5a32d57278748e83622a6750aa272faa2c6a3ce42bb953734441588301feb4a30f923974ab4a47e590b7c3a0be9ed908a24fd78064423b5b74ca483719c1ddb9aaac33374b06ea0153c88ec6ea12bd19d216f527ac79f4bd6e275b2b36b7dff481ea41a995556431bbdfb0b2a9008984a139aa786a8a8b1f62add403e3aa2df031101a5a46f7"}, @typed={0x8, 0x15, 0x0, 0x0, @pid=r3}]}, @nested={0x18b, 0x2, 0x0, 0x1, [@generic="ce49cb7122ccb990106c05556734480691aa073191d365a23db8317e0b418e8c44b0b555157c4da42c807c36fb2544f611585b177bada609c469d29d119ef18c5bd3adddbe4c7ea4c70c7be7ea2244cb24bf1e74c4589b455fdf5a6e2022594e57b31c4349641a4d0921a436437eabc8229c7c9cc1247d", @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@local}, @generic="831db676464d10353ac31ab3f6f6d95bb3ba3a8060d439812cd3939daedfb87b1c41f92543dde632c031de1aee1e9118237c5761cea736aa3b9123cd4a9541d4b6d0d30cf4fe0808e04a96817467308453c5748cd3b28bd07ba1c3ba92054360ccbddaee300bb0266a66dd933b15c88b9405c7fb75a24a1b92438600af481e761850a2e26f34e6ec7c8fb99243f81036582bf0e3bbfc57fb2e533b8fe366c6cc5086e63887d6c14c5bc12f2519805c458e2a73400416e95033861c3b2a8a5074b20e10ba2fb1c28b67c949bd4428a0fd7b6cf831031116d9df9e76cd9095b100d36d76b0033c381958e37460523832eb40e55f98de7cd98d", @typed={0x4, 0x78}]}, @generic="e2e691723c4474b6e3890b5b15680984b4d424c2116a3be99535128db8f7e5ba36418c49b8a3e0c3217899d4224e27631f27ea3771ca7b18c5951480888c44285297dc7840d6f8a9c82dcf82d7", @nested={0x203, 0x86, 0x0, 0x1, [@generic, @generic="262cce5b209127f2e5d592150562ef438a2224ed04bd8772c6af6f020f88c86df5c4745ee4cae90557e503f33a559d551be964ba5147846fcb9704c029fb0c563e6f897ee891e52f5548cf937907f4bdd334e3", @typed={0x32, 0x5, 0x0, 0x0, @binary="7aea91c40a172cefbbebaf1c6f395ab195badf11e2300ee8724e9937591d6b8aa5a75e64fb533e8b9ff4bb44cbc4"}, @generic="85d718c162969404c1cf9ebd01c3348f28d084f3f1fe23538588a6e2b23a4774cc86ad9dee242e97fbafaecb7a892d621ffa33031d808b5d43e38dc6a9fb4149d4834aaeeeeee75e6fea9a3650be0f4be1ee37392a88ebb3ecaaad22012b74c120d5b593ee872309de02f0e935cd506b0ea82bdf6d08b029b1e0d4c40f0206e44978618a4c35c3bbc4d537400a32a9b43c118014e8406ee5193da0ac95b78a054814b59df6fa55ed0bd384eb1ec9831ae80e16bc10427e23d53ccabec6e843b2ea4aa66cd46061f8f6fedfe587f8e9", @typed={0x8, 0x40, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x74}, @generic="5bfecb2e4af0328870a61a890d25304bda24c427cb7d9127858d2eb24ad21414018b0166ac7d54f556baf92c4e8504dbdf94ae20afe6dfed52f0", @generic="e77248f3a5cef1354570db4d24980b1fdf62f367aab320bcc3779bc60126fc3373351569aa47cd6bc0ebd49046f03240d70b6b0d984cdf1ce7fffcaf0bab2a7956a8b148f2d7633e0793ea5e06523f51043f326b3d4aa8f2455fc46d8cbbf4bc3c25d6"]}, @typed={0xc, 0x41, 0x0, 0x0, @u64=0x3}, @nested={0x18b, 0x1b, 0x0, 0x1, [@typed={0x5, 0x78, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x6c, 0x0, 0x0, @u64=0x7}, @generic="9852a9f276fe58ed236faa1cd7022bbd22f6347a5a5961dbe991f39e9194050c6d25b72f13d05d8a1e2f2d3c6e418fbecaca63320b1a2d94c7e589138b0dc13009790cf75ef6981b42616395ec7c7d9e964000232eb76a23d0a58af0589c30ca9b7f5e3c1f1f399fe7ab80074518813065", @generic="8e62db65f3ccf76f1a32a07f079f6f658788d4a45fcc9ccbb94b4dd7cb40dbd12c908a92920a24c2", @typed={0x74, 0x13, 0x0, 0x0, @binary="a6df6245f29f46dd554e361606fa3ab641b5d88f80a171ff733688bdd5063529ec8a1788fc3e91c06f85af08158a68cece95fb179e7d77b61361737acb1846de2851c055ad9bffb352b77b7d97f883200bc48b29961c8b21b66d68c848292512f8cabd20ebd700173406bece1564b74c"}, @generic="59e88240a66364199398f90d71a11cf8e6a54aa202677ba43ae75548a9e8b247257d584ccf0d48860847e4ec5bb0283cfdd6b42d056adb05ed5cd67ea33a4a6004212cad24a1984afb42330652fad83a2b7b03ff9cc79ff4450ce84de3c0", @typed={0x8, 0x87, 0x0, 0x0, @u32}]}, @generic="ae0d61d212166fe0cd4cd9d832ed592622e6448cbf59aac64487230e1f46551290c2978058a9da128ed0fb1d274b4b6a1503664ee4af5f0364661deaa97a997dd1efeeb114bb7073a6291acc7c73d6763d5f15852d577688e2c4abad5397b318428e34fceacf0343b1fb448fdebc9e8b6d7f1117ca7b9b5bbe8df3b711ba8d89e97f8586b1dc27fcd7d84e34eac7fa9816f68e2729ece03a803175200abc9894c25623464b80f9950b324016f10c99bf153db18e5a652bd2b37818e3cf807aaa0ef402d14e67c80f79484c80ae5c5204454afaed4d5722622fdf4fa4581bf3a35d1e1d9845986acf3187712453f6b3c4a296067d10fc", @typed={0x8, 0x14, 0x0, 0x0, @fd=r4}, @nested={0x11e7, 0x7a, 0x0, 0x1, [@generic="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", @generic="195c339c8ab7be46ada14fb0759a350eeb2f1573cc7fced694c3864e208df53e3d2786bd0154234325f95007bf0293f36a5e594c610f8d9300b5705e3dc83216d2de5dac8dc9ccc672cca5483d329475dab8aa70f8c8b5e461e5471cae9dd46ff7aec8e8bdbb1096c2791091d5840fa6a40e80304be5fa", @generic, @generic="f0fa500367948ad00cc1cba16acb00f5e15e5811d5f23ef74bc59c4d73068260d66288adccfd04ade12209bdfe7b297eb6a869e593e6bc948ad305d3cfc2fd066bc37ac801f499c86553ef533b3a1bba84389ca04abd3636aeb032cf9d6b60ff4a2843ecf3419d7fb80e7be5a5771c3a931bddf346123fa4c2c571feb1c8540520a6bb191dd1886dfe12b81702644abc6d11e2b47ef95bb2cf27cb92933dc1c63607ba0d56a2ea28a28020f00738501bd9c0ebfcb7166bdd4e0890788a2f5e2f6c3a6d1d390d09308b9c4134a8949ac6d48b953625d8f2fbf8", @typed={0x8, 0x56, 0x0, 0x0, @pid=r5}, @generic="410fb9c5c0f73ea4f28090edbc474ca1deda946761388f841c8584d52313be47cd8c8d297937759a894c43eb81e4dca3f102fa10b6afb07a77229199c4a4cea08e8f1805304e5ae7cc48b532517625fd72b335b7fda3d68c938a9527b41c9476efe8d359f2f096fc4c146548926952", @typed={0x14, 0x29, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0x5e, 0x0, 0x0, @pid}]}]}, 0x1948}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000010000000180001801400020077d10f31ca0000000000000000000500080006f52f000000"], 0x34}}, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x7f, 0x1, 0x8, 0x4, 0x0, 0xfffffffffffffffa, 0x2000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f0000000200)}, 0x44404, 0x5, 0x2, 0x0, 0x5, 0x2fd, 0x0, 0x0, 0xfa}, r5, 0x5, r6, 0x9) 00:24:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {0x0}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:24:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:24:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:24:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:24:46 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000000040)=""/130, 0x82}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00), 0xfffffffffffffe1c}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000000100)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:24:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006e80)={&(0x7f0000006ec0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}]}]}]}, 0x38}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private1, @in6=@loopback, 0x4e21, 0x1f, 0x4e23, 0x2, 0xa, 0x100, 0x0, 0x0, r4, r5}, {0x31, 0xf4, 0x7ff, 0x7f, 0xc890, 0xfffffffffffffff7, 0xffffffffffffff82, 0x6}, {0x3, 0x100, 0x0, 0xfffffffffffffffe}, 0x258, 0x6e6bbc, 0x2, 0x1, 0x2}, {{@in=@remote, 0x4d6, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x34ff, 0x2, 0x2, 0x0, 0x401, 0x2, 0x1}}, 0xe8) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) [ 1486.293107] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1486.295275] EXT4-fs (loop1): group descriptors corrupted! 00:24:46 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_setup(0x26f1, &(0x7f0000000040)={0x0, 0xe684, 0x20, 0x2, 0x2a6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, &(0x7f0000000140)="6ab79a7b55d7a06a2b7de28bcf43fb41aa9b8754a6ed2a2b352e473736dd425c4831d82af3f2f528914ca61f6505f922f5bc5dfd8a2c42f87c45a46e2e7072ca90bee0a9d3ef789c718e86baa3685738a7d34f866e2191fb0db39920cd4210eef537feea5a47f310a2ce43e0dfddd1895e5b255ed13755a9ae3fe6b78f8419c3e1098bd28c655ad097a4d3755ee7f0e06dc13899e3756ad1178c79c62da3bdc063b99c06f934d3a617ba72aa87f16260eb430443d2b5f5b899d19f", 0x10001, 0x0, 0x1}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1486.330452] EXT4-fs (loop0): unsupported inode size: 0 [ 1486.331590] EXT4-fs (loop0): blocksize: 2048 00:24:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:24:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) [ 1486.452613] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1486.454346] EXT4-fs (loop1): group descriptors corrupted! 00:24:46 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{0x0}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:24:46 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0x0, 0x400040}) r2 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x40) r3 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xc9, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x90422, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7ff}, 0x1200a, 0x0, 0x6, 0x2, 0x5, 0x0, 0x1ff, 0x0, 0x61, 0x0, 0x7e}, 0x0, 0x0, r2, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r4, r5, r6, r2, r7, r3, r3], 0x7) 00:24:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:24:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:24:46 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:24:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) [ 1486.612662] EXT4-fs (loop0): unsupported inode size: 0 [ 1486.613430] EXT4-fs (loop0): blocksize: 2048 00:24:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:24:46 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x1, 0xfd, 0x9, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2, 0x1ff}, 0x5420, 0x10000, 0x1ff, 0x6, 0xe7, 0x0, 0x8000, 0x0, 0xfffffff7, 0x0, 0x18000}, 0xffffffffffffffff, 0x1, r0, 0x1) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0xc8140, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) rt_sigqueueinfo(r3, 0x27, &(0x7f0000000240)={0x29, 0x6c3c, 0x6b}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000300)={0x0, 0x10, [0x0, 0x3, 0xffffffff, 0x74f2], &(0x7f00000002c0)=[0x0, 0x0]}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="34000135", @ANYRES16=r6, @ANYBLOB="01000000000000000000100000001800018014000200776c616e3000000000000000000000000800060000000000"], 0x34}}, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7, 0x20, 0x4, 0xde, 0x0, 0x2c1, 0x0, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x401c3, 0x20, 0x1, 0x8, 0x101, 0xfffffff8, 0x2, 0x0, 0x5, 0x0, 0x3}, r4, 0xb, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x64) 00:24:46 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f00000000c0)) preadv(r2, &(0x7f0000001580), 0x0, 0x40000002, 0xccc6) clock_gettime(0x0, &(0x7f0000000040)) 00:25:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:25:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{0x0}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:25:02 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) syz_io_uring_setup(0xc23, &(0x7f0000000040)={0x0, 0xcfb3, 0x10, 0x0, 0x1f2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fee000/0xf000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:25:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0x4a, 0x0, 0x38, 0x0, 0x4, 0x1000, 0xf3ae5862f659feb5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x4a65, 0x6, 0x6, 0x6, 0x1, 0x0, 0xfe00, 0x0, 0x6, 0x0, 0x1f}, 0x0, 0x1, r1, 0x8) r3 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800215e5b87d653e76c6f8afa00236dc5fe95dd15eaf09e62646d5e8c708cd684c57b49bf30cf49f73dfae6503f5cf70023cf5856a699e5a58c4075919f976dde9c5c23ac65725475ba01a9b5ba58bbfe1a71d94afa870925431b720ff776b409c541fc8fdf8271386f5ce1fb87f5a19074cfc5c6c05f4510ed3866fade01882d4ff82c042761dbda3d5e1cebe54faf"], 0x1c}}, 0x0) recvmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 00:25:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:25:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:25:02 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000100)=""/229) 00:25:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) [ 1502.787369] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1502.789427] EXT4-fs (loop1): group descriptors corrupted! [ 1502.796892] EXT4-fs (loop0): unsupported inode size: 0 [ 1502.796905] EXT4-fs (loop0): blocksize: 2048 [ 1502.822573] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1502.822585] EXT4-fs (loop1): group descriptors corrupted! 00:25:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x0, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:25:18 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {0x0}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:25:18 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd=r3, 0x192, &(0x7f0000000040)=""/126, 0x7e, 0x2, 0x1}, 0x7) 00:25:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000100)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000011300)) 00:25:18 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{0x0}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:25:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0xff, 0x9, 0x6, 0x0, 0x0, 0x10020, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x7, 0x71}, 0x12, 0x8000, 0x3, 0x1, 0x0, 0x8, 0x2, 0x0, 0xa2b80000, 0x0, 0x7}, 0xffffffffffffffff, 0x9, r0, 0x9) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) lseek(r1, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) 00:25:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:25:18 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1518.301453] EXT4-fs (loop0): unsupported inode size: 0 [ 1518.302252] EXT4-fs (loop0): blocksize: 2048 00:25:18 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {0x0}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:25:18 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f0000000040)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x40}}, 0xdd220518b22f750f) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) getsockopt$inet6_int(r2, 0x29, 0x5, 0x0, &(0x7f0000000580)) [ 1518.355483] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1518.357483] EXT4-fs (loop1): group descriptors corrupted! 00:25:18 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, 0x0) ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:25:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)='D', 0x1}], 0x1, 0x7f, 0xfffffffd, 0x0) lseek(r0, 0x0, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) kcmp(0x0, 0x0, 0x6, r1, r2) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) geteuid() creat(&(0x7f0000000040)='./file0\x00', 0x38) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 00:25:18 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) [ 1518.443782] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1518.445473] EXT4-fs (loop1): group descriptors corrupted! [ 1518.448443] EXT4-fs (loop0): unsupported inode size: 0 [ 1518.449068] EXT4-fs (loop0): blocksize: 2048 00:25:18 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {0x0}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:25:18 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1d10, &(0x7f0000000080)={0x0, 0x2447, 0x2, 0x1, 0x14b, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) syz_io_uring_submit(r2, r4, &(0x7f0000000400)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r5, &(0x7f0000000280)={0xc0000019}, r6, 0x1, 0x0, 0x1}, 0x64) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r7, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) close(0xffffffffffffffff) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, 0xffffffffffffffff, 0x0, r9}, 0x897) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x1, 0x40, 0x400, 0x9, 0x1c}, 0x7) 00:25:18 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, 0x0) ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:25:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x0, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:25:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:25:35 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) lseek(0xffffffffffffffff, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001000000018000180140002006261746164765f736c6176655f31000008000600040000003f7c5f3472970e112d8dd56e5700fa99122c4f80e705022bea5e3ed0bbf6a337b8a5c7e8a1c9b8cb2fce9c4a3999359101dda223f3fe1657a93497caf45cbcb3b15c22e3e734db0ebbc3d223c5fd9936905db5159bea4ae88a6b4a7048811175b727bd3d8971ec6d6fe0b7166ea21cf6f2a24e9bd56a0927e1704904d50633362fb7cb7a2f5a67b2b1143d3c8abee9bd0cd95a8f4faa6ffa081a6667abcb20194d75764ce4966fe0e4ad1cd0db5acd5561637a7794bf4809f17288a532d1d8"], 0x34}}, 0x4000000) r4 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x30, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x840}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000074613f9aa79d179a30d9effe4e02bc7858c7def879c12adaf494a49be8907d91438827dd7c71572b8dcefc4ea5eabfb8", @ANYRES16=r4, @ANYBLOB="100026bd7000fcdbdf25050000000c0002800800040000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1090}, 0xc004) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x44c11, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(r5, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) 00:25:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:25:35 executing program 6: syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000017c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000e15dfb09a7db660e524a6b3dd4a4d6bc92d1769438b4e93c1719420b5d5cadd3619d172f949f792b86800fe79ebabe6d84048fc274c0602b0df71255d20f981a7c237548dd91a868237487bf7418c196737a649c6a200c757f66f55795e4c93a6cb3a121c5a42816696ecd8c820300223516c785c8ff6ebac55c84699f6c813603d7b78f1d12b71375372dc89c51a8e15a1dc3d357477931e2668571495b97224ce8a253e3bd6f24dfa8fd131c50a139756c095659479f68697198cfc3779b92a8d26ac92a49ac51bf122e29eb7973ae2ba4e2731b"], 0x14}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000a87d40793c00100000001800018014000200776c616e3000060000000000000000000800060000000000"], 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x8008090) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) ftruncate(r5, 0x71) close(r1) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000080}, 0x40) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000011) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2b8, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x294, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x80, 0x5, "24d7d8049e43ba0c0dfce3d3e3d2489c515853267f02647defeaca76f048b6617bc105180d0a36ac0ab10c8b19745bf33ae3e9c01019399ee1471f0f04d8bac8d2d80bcee1faf298905821c2bbbf8010f06a888033db72b3f398f595e5762f472d3f1442bbabee9890d5df6bf48e60f5ba5ae37e812cd9865d26432c"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbcd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x53358235}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '],{+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'SMC_PNETID\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\\xea\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa1, 0x5, "0801a3e9d4fae6d6d8a77960315bd53eb5e93865651b175a52f8948a6a7476eddaffb6cfea3aa2fe55918b2c1220ce4f82a13f325e43ce8c1827f061e771dcdf4be346f62056319e2f72fbc34c22ff6feb94c95cd836ccca4818ebecb3330033aa6e30c1ca116a9b15546e32ca7be78f3a0ccd102441acb4e5de06e9351dce7cd7acb6e878e117e10a37f69ac696ddbb9ec5fc9f15c7ae386c78c1ec56"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x24, 0x4, "960531901ba8f2d49afdf5e2b00427c9a0333149062c44f25ad3963888c09c52"}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x80}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4005}, 0x20000084) 00:25:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:25:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r1}, &(0x7f0000000040)) process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/50, 0x32}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/214, 0xd6}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f00000002c0)=""/148, 0x94}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x8, &(0x7f0000001640)=[{&(0x7f0000000400)=""/71, 0x47}, {&(0x7f0000001500)=""/228, 0xe4}, {&(0x7f0000001600)=""/10, 0xa}], 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:25:35 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, 0x0) ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1535.406990] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1535.451196] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1535.453263] EXT4-fs (loop1): group descriptors corrupted! 00:25:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) [ 1535.514439] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1535.516605] EXT4-fs (loop1): group descriptors corrupted! 00:25:35 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:25:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:25:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:25:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:25:35 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:25:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004304, 0x80000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) prlimit64(r0, 0x9, 0x0, &(0x7f0000000040)) 00:25:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205e, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0xffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) ftruncate(r0, 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf={0x72, &(0x7f00000001c0)="c72f9124cb1c43600dcef362a9c764663e80ca00b118ee447236a33c74da89a503472769c4faa0551993e73c89319fe183e0429ff493d1e27fdccade5dbc3dcc32ae80f5b49fca0136d30f493b84b2818021c8934d4de4a56088630b87652affeb27a9adff781035b6a0899c86737de5ca09"}) r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0x7f, 0x2, 0x80, 0x9, 0x0, 0x0, 0x1402, 0xd, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x10001, 0x5, 0x4, 0x0, 0x6, 0x5, 0x0, 0x0, 0x400, 0x0, 0x5b8}, r0, 0xc, r0, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x7c1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) creat(&(0x7f0000000080)='./file0\x00', 0x0) 00:25:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:25:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:25:50 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:25:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:25:50 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:25:50 executing program 4: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() fork() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) process_vm_readv(r1, &(0x7f0000000340)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000000300)=""/30, 0x1e}], 0x3, &(0x7f00000017c0)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000380)=""/192, 0xc0}, {&(0x7f0000001500)=""/228, 0xe4}, {&(0x7f0000001600)=""/76, 0x4c}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000001680)=""/154, 0x9a}, {&(0x7f0000001740)=""/125, 0x7d}], 0x8, 0x0) 00:25:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x0, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:25:50 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x3c0, 0x88) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000100), 0x2, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000380)=""/227, 0xe3}, {&(0x7f0000000480)=""/149, 0x95}, {&(0x7f0000000540)=""/108, 0x6c}, {&(0x7f00000005c0)=""/45, 0x2d}], 0x4, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x170}, 0x40000000) r7 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, 0xffffffffffffffff) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x1477, 0x5}) openat$cgroup_subtree(r2, &(0x7f0000000180), 0x2, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) sendfile(r9, r7, 0x0, 0x40000080000000) io_uring_setup(0x6fad, &(0x7f0000000240)={0x0, 0x7311, 0x1, 0x2, 0x25b, 0x0, r1}) 00:25:50 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:25:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) [ 1550.426479] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1550.462820] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1550.464259] EXT4-fs (loop1): group descriptors corrupted! 00:25:50 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:25:50 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:25:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x20, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x82) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x80, 0x5) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x38) inotify_rm_watch(r2, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x40880, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) [ 1550.543023] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1550.544393] EXT4-fs (loop1): group descriptors corrupted! 00:25:50 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:25:50 executing program 2: r0 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000000200)="f2decf120e5f261dc72668abd0bdbbaa6eefe9d0faa33906e9535601ed86aa116afc97e319d0cc98496fc8891e440a1f281cac19572ce6436c892aa0424539ad41f49dace01f0091afaeda2b6dabb7fbd96334dac2046b1bf743c43ba2984a37d69f7b799773abe11bbfe2edee45dd0698474955e6c05a32f275b740a0b1816daa390b318c528915d512bf398a22e179af51ced57da6b0d4c6d428da82c8070bb558a441ed8dfe0a684bc690e6ae6637990bd83667e21ec378948ac7721f7e9d1155a22882d5a5025ea887957f2697b5e8a473fc3f754c2c88d0bc84dbadb66e2694cd2639", 0xe5}, {&(0x7f0000000300)="e476233285e76ff5524a11bdd69346fcb1f9a93ba795c97f4a5bb8be4442d4d21bc813de02b193d6cd20c9982cad0901480c6328bf3182b4f089c4960626b399575f4ef2a154a9de65e4009fefe5cbad9c52aace287f69ae1a14bdddb0f3b935b502022db0080caccac93088a0347bf73b86b32be898d07629805183f33a65073fccf824ab9cdf8ae00c429d2c5e9ae6b610c9cb764e92787acb4c0d4735dc2c79caefbec0ad4b3062c2213d047b5db50be46c54c575c698a8d754", 0xbb, 0xffff}, {&(0x7f00000003c0)="f1bff1d719fd65b9ecb3ee8e50569ad3dc4d59ce434866436da3e0988e67fc61c6d6809d168573e22a6d14b2e5304aea5ccf7d3f77ceef672dea5bc03d4508ec3c81fc17bfc27e781ef8546a3777fb9beadbf51d44790bbf286b9dbb50f154fc79946afdbc8acc70e535908b812449214d4fac9be4d1be19d3beab905285efabc9c0e4fcd723f928d580e9e3c9eec63cbaa73af66f25d3a8f70978cbd688333c13c2a28d6736187e8e4be029cfe3e7f50c7f1b1a0cf0e6f8ae09e04bb5f731221b", 0xc1, 0x9}, {&(0x7f0000000140)="d7493b528ee9de6221437ff95baca58b0cf5e7b82ac12ff1e72368e9a5600eb99672d61f72b27731b35e5a2b506253d0ebdea6cb60c2e046b8f9", 0x3a, 0x1f}, {&(0x7f0000000580)="ad2bc267dd606d39894bc4df8179cea159b925e3814910d4a6", 0x19, 0xdda2}], 0x0, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) 00:25:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:25:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:25:50 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:25:50 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:25:50 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x9, 0xc0, 0xf8, 0x4, 0x0, 0xb2ff, 0x8000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x1, @perf_config_ext={0x81, 0x100000000}, 0x124, 0x9, 0x4, 0x4, 0x7, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000340)={0xa9c2, 0x0, 0x9, {0x2, 0x6f5}, 0xcca7, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x4, @time={0x6, 0x3f}, 0x3, {0x1, 0x1f}, 0x83, 0x2, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) ioctl$TCSETSF(r1, 0x5404, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0xe4, 0x0, 0x18, 0x0, 0x0, 0x16000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x8, 0x8, 0x0, 0x1, 0x5, 0x15d, 0xffff, 0x0, 0x101, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1}) openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) unshare(0x48020200) [ 1550.731462] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1550.732672] EXT4-fs (loop1): group descriptors corrupted! 00:25:50 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:25:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x4480, 0x103) fcntl$setlease(r2, 0x400, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) 00:25:50 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1550.777623] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1550.778836] EXT4-fs (loop1): group descriptors corrupted! [ 1550.780971] ALSA: seq fatal error: cannot create timer (-22) 00:25:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x0, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:25:50 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:25:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) [ 1550.922805] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1550.923893] EXT4-fs (loop1): group descriptors corrupted! [ 1550.960869] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1550.962431] EXT4-fs (loop1): group descriptors corrupted! [ 1551.033754] ALSA: seq fatal error: cannot create timer (-22) 00:26:05 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8040, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x54) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "a6a99a4273c4b1f32e85f7ce2a0880ac"}, 0x11, 0x3) 00:26:05 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x0, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:26:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:26:05 executing program 2: openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x105102, 0x1) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0x0, 0x0) write(r0, &(0x7f0000000240)="43bfa349966587b7cc091a7dfb7d478455d359e88430009d29f26603078ea1ed355843337b1e980801fab45a536890d110e2948f1fdd038a182ab221f3aecd", 0x3f) r1 = clone3(&(0x7f0000000140)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x24, r3, 0x400, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x18}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x24}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x212943, 0x0) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x150, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffc0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x59109053e77cef7e}, 0x24000050) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001c40), 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001c00)=0x0) r7 = open(&(0x7f0000001f00)='./file0\x00', 0x107400, 0xc2) clone3(&(0x7f0000001f40)={0x4000, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680), {0x31}, &(0x7f0000000800)=""/4096, 0x1000, &(0x7f00000006c0)=""/254, &(0x7f0000001ec0)=[r1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r1], 0x9, {r7}}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="0100242a8208a4c67f8ed85cf49e37b5cc1fbed5cc33ff3c0000", @ANYRESHEX=0xee01, @ANYBLOB=',\x00']) 00:26:05 executing program 6: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) shmctl$IPC_INFO(r0, 0x3, &(0x7f00000010c0)=""/85) 00:26:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:26:05 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:26:05 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {0x0}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1565.998993] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1566.000269] EXT4-fs (loop1): group descriptors corrupted! [ 1566.021055] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1566.022237] EXT4-fs (loop1): group descriptors corrupted! 00:26:05 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1566.054845] 9pnet: Insufficient options for proto=fd [ 1566.097992] 9pnet: Insufficient options for proto=fd 00:26:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:26:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x0, 0x6, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:26:19 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:26:19 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x200, 0x1205) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d00000000000d000000000000"], 0x14}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r1}, &(0x7f0000000040)) capset(&(0x7f00000002c0)={0x19980330, r1}, &(0x7f0000000300)={0x101, 0x1, 0x40, 0x2, 0x80, 0x3}) read(r0, &(0x7f0000000080)=""/65, 0x41) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000100)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:26:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/173, 0xad}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:26:19 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x630000, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x440c03, 0x80) close(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f0000000440)=ANY=[@ANYBLOB="e90a8932c447139d5f5825a66ccf7fd1e6a2abf4d89b967358c52e3eabe660120bd333f2d80e1f05a049b006198cc2ffa173c76dad6c305720546e24417fa212a5b2c2a2a181fde6b8e34b2d60d43dc357a658f6d212509908181ff82db2da9635d682333de2732cb373bb5ebb7770e540147a042a93becc094deab6e985c17e52fe347ce319364c9e5d664f", @ANYRES16=r3, @ANYBLOB="01000000000000000000100000001800018014000200776c616e3000000000000000000000000800060000000000"], 0x34}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x1c) r4 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8802) r6 = fcntl$dupfd(r5, 0x0, r4) writev(r6, &(0x7f0000000140), 0x0) r7 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000000)='./file0\x00', 0x1, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000240)=0x8) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x1, 0x0, 0x80, 0x8e, 0x0, 0x1ff, 0x10420, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000001c0), 0x6}, 0x68a80, 0x4, 0x80000000, 0x0, 0xe95, 0x94c, 0x6, 0x0, 0x0, 0x0, 0x158}, 0x0, 0x2, r1, 0x1) 00:26:19 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:26:19 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {0x0}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1579.237275] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1579.239428] EXT4-fs (loop1): group descriptors corrupted! 00:26:19 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:26:19 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {0x0}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:26:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x11, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:26:19 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4ad6}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r1}, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000200)=0x7, 0x5) close(r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xff, 0x7f, 0x7, 0x1f, 0x0, 0x4, 0x40420, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x5}, 0x14861, 0x7f, 0x3, 0x3, 0x2f, 0x8d53, 0x5, 0x0, 0x10000, 0x0, 0xfffffffffffffff9}, r1, 0x7, r2, 0x8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1/file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x2, 0x1, 0x0, 'queue0\x00', 0xd63}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x1, 0x0, 0x0, 0x1}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0x0, r5, 0x9, 0x4, 0xfff, 0x40}) r7 = gettid() process_vm_readv(r7, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) 00:26:19 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:26:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) flistxattr(r2, &(0x7f0000000240)=""/215, 0xd7) sendfile(r3, r2, 0x0, 0x7ffffff9) 00:26:19 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:26:19 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:26:19 executing program 6: syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb940fbbbb08003100003800000000003390780a010102ac1414bb441c06030000000000ff000000000000000000089078c1ee21540e06355fb801803f604d72c717d6e452ea000100000000a0351ad3c793ba0bef5d7bb85300"/110], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_emit_ethernet(0x119, &(0x7f0000000500)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@val={0x9100, 0x6, 0x0, 0x2}, {0x8100, 0x5, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0x40}, {0xffff9, 0x0, 0x1}, {0x8}, {0x3000}, {0x8}, {0xf8df}, {0x9, 0x0, 0x1}, {0x8001}], @generic="9188420827f992d3b495ccf032abf95a1db94350e7db116cef702219d49f67ea845d2be337e7ce69c94cf38a27075761e6e244aff6d58aa6c6c0a606acf2a99ddcec1fe30126603b8c8d24b5d7d4deaecffcc905b761069679c0b51ad0987bec84235e1b916ba754059e895b76a43c3124ed0897a6c079131b910b0459fe2f90a682e86f5add080189261f5a97af569f945760327384c4459d66d17aa265c6b1d1040e963a33d9838c5b3cec1a552807d457de934eb2fa1dd97b703f5be0226f386599838965148fa8069becc5feaa08008233e01f94f97818f0cc764e19e7ed468978"}}}}, &(0x7f0000000000)={0x0, 0x4, [0x548, 0x2aa, 0xd83, 0x389]}) close(r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}}, 0x0) write$tun(r2, &(0x7f0000000340)={@val={0x0, 0x6003}, @void, @ipv4=@igmp={{0x3b, 0x4, 0x0, 0x7, 0x183, 0x68, 0x0, 0xfb, 0x2, 0x0, @local, @local, {[@ssrr={0x89, 0x23, 0x41, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0x20, [@loopback]}, @timestamp_prespec={0x44, 0x24, 0x2, 0x3, 0x8, [{@rand_addr=0x64010102, 0x9}, {@multicast2, 0x9}, {@local, 0x8000}, {@remote, 0x1}]}, @ssrr={0x89, 0x23, 0x84, [@rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback, @multicast1, @loopback]}, @cipso={0x86, 0x34, 0x3, [{0x7, 0x11, "402a698809ac7360f9423089d5bcf2"}, {0x6, 0x2}, {0x1, 0x6, "4a51eb7f"}, {0x1, 0xb, "d34ffc2b49f421fe2f"}, {0x0, 0xa, "85189e87a7cb492a"}]}, @rr={0x7, 0x3, 0x5d}, @timestamp={0x44, 0x14, 0x15, 0x0, 0x0, [0x2, 0x0, 0x2, 0x8]}, @generic={0x83, 0xb, "069db57a69c46b4ee6"}, @rr={0x7, 0xf, 0xb8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {0x3c, 0x7, 0x0, @broadcast, "8beaaa76e27950c00b05c46b0f2e3f5cc3b6daa22a2743113c66cca18225df3db466fa0acb0fe0d9f7204626a3bc122ae18def58046e7c7791da20b09e9dbde004af11e7e001debb84efbb095a1cde2263798772386c8bd9310ee26f357da40779dfe72e84d6cd193480795bbf8c9c874ffc3e4156dd1226790b8ead78bc323cae0fe1c14ce24ff1441a4a84d2d23b"}}}, 0x187) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x6}, @val={0x1, 0x1, 0x4, 0x40, 0x7, 0x2}, @mpls={[{0x8}, {0x518, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0x7, 0x0, 0x1}], @llc={@llc={0xd5, 0xaa, "e25d", "d1ad1b2017a45bae36d817c2944112cf8df71f478d6aa62851303487b87bd53c26e863c0807923eda4c429eafdfdde7d016d1d6c75a25607077d0fd77cddc12719502ea335f1393cddf8fda3e2700266ae578f7bf6980439527642a96d39ec95d92b9132ae8bb227d69f764a55e6899fd723570f84800a0da6a63ebe7e6b07d1417032a36e5aecd62b8cd97e6fd2af04e33521787ab377179d5316d2503c43d3c3755081e517da780b91018d96207c5e97c1d13f708a5298f0a8ad2cbb7a7ae465132910ce"}}}}, 0xe7) 00:26:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2e, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) [ 1579.498436] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 00:26:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x0, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:26:19 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011100)) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000640)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r10, 0x0, 0x0, 0x0, {0x101}, 0x1, {0x0, r11}}, 0xffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x100000001) 00:26:19 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1579.581943] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:26:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x48, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:26:19 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:26:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB='\x0081\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0c0006000000000000000000"], 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x70}, 0x1, 0x0, 0x0, 0x48004}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) [ 1579.730150] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:26:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:26:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:26:34 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x0, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:26:34 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4304, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x215, 0x1, 0x800, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/152, 0x98}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f0000002300)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}], 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x1ff}, 0x0) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x1f, @empty, 0x7}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="b61467ad1704f078", 0x8}, {&(0x7f00000000c0)="c189742a6dcd2f3d356ddb49196521491ff67f42ce38e487986f4961d78a450615936ae23c3d9cecad9a19ad23ae558147662c08bd6f7b0003e9e1c02a78851e86ae4cb7c8f0b0a64e6fa9ceb267e5587320df59860115fe93346bdbf164b3459411c5d30ec4e771c4", 0x69}, {&(0x7f0000000140)="45a758337ed0e8afb8ecbfa391de72b8f4cb167d4f4eacc18c9f6a5de102314d756019687f3c3a7d842db7f4548234bf84f18b9176d0c5d0c79a8f4e5fb22d322a16f85627517209fde227127f48d8d6c340f0245a257f5503b5bc7572557d0d0f453c66283c4b88e24669ad53fb0de101ee6467fe4477f871a3c98926152218e78247ae81eae683e9fcd75783b48d38724ff225eeeddb93b3b0b0c4189b0b1b5c8a36", 0xa3}, {&(0x7f0000000200)="f1595762bd9b3674baced28bcaa52766249bde1c2b", 0x15}], 0x4}, 0x20000000) 00:26:34 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011100)) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000640)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r10, 0x0, 0x0, 0x0, {0x101}, 0x1, {0x0, r11}}, 0xffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x100000001) 00:26:34 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:26:34 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) 00:26:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4c, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) [ 1594.958781] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1594.960796] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1594.962759] EXT4-fs (loop1): group descriptors corrupted! 00:26:34 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1595.015021] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1595.039915] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1595.041923] EXT4-fs (loop1): group descriptors corrupted! 00:26:34 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 00:26:34 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xcc620, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x5}}, 0x0, 0x1, 0xffffffffffffffff, 0x3) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) [ 1595.213454] [ 1595.213713] ====================================================== [ 1595.214479] WARNING: possible circular locking dependency detected [ 1595.215230] 5.10.200 #1 Not tainted [ 1595.215679] ------------------------------------------------------ [ 1595.216439] syz-executor.2/10074 is trying to acquire lock: [ 1595.217118] ffff8880182d0b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 1595.218363] [ 1595.218363] but task is already holding lock: [ 1595.219064] ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1595.220143] [ 1595.220143] which lock already depends on the new lock. [ 1595.220143] [ 1595.221128] [ 1595.221128] the existing dependency chain (in reverse order) is: [ 1595.222030] [ 1595.222030] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 1595.222847] __mutex_lock+0x13d/0x10b0 [ 1595.223384] rfkill_register+0x36/0xa10 [ 1595.223945] hci_register_dev+0x42e/0xc00 [ 1595.224538] __vhci_create_device+0x2c8/0x5c0 [ 1595.228813] vhci_open_timeout+0x38/0x50 [ 1595.229384] process_one_work+0x9a9/0x14b0 [ 1595.229982] worker_thread+0x61d/0x1310 [ 1595.230539] kthread+0x38f/0x470 [ 1595.231038] ret_from_fork+0x22/0x30 [ 1595.231572] [ 1595.231572] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 1595.232469] __mutex_lock+0x13d/0x10b0 [ 1595.233163] vhci_send_frame+0x63/0xa0 [ 1595.233856] hci_send_frame+0x1b9/0x320 [ 1595.234573] hci_tx_work+0x10af/0x1660 [ 1595.235281] process_one_work+0x9a9/0x14b0 [ 1595.236037] worker_thread+0x61d/0x1310 [ 1595.236760] kthread+0x38f/0x470 [ 1595.237387] ret_from_fork+0x22/0x30 [ 1595.238056] [ 1595.238056] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1595.239337] __flush_work+0x105/0xa90 [ 1595.240029] hci_dev_do_close+0x131/0x1240 [ 1595.240788] hci_unregister_dev+0x149/0x430 [ 1595.241576] vhci_release+0x70/0xf0 [ 1595.242255] __fput+0x285/0x980 [ 1595.242901] task_work_run+0xe2/0x1a0 [ 1595.243620] do_exit+0xb6f/0x2600 [ 1595.244234] do_group_exit+0x125/0x310 [ 1595.244789] __x64_sys_exit_group+0x3a/0x50 [ 1595.245400] do_syscall_64+0x33/0x40 [ 1595.245939] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1595.246642] [ 1595.246642] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1595.247441] __mutex_lock+0x13d/0x10b0 [ 1595.248004] bg_scan_update+0x82/0x500 [ 1595.248557] process_one_work+0x9a9/0x14b0 [ 1595.249152] worker_thread+0x61d/0x1310 [ 1595.249715] kthread+0x38f/0x470 [ 1595.250205] ret_from_fork+0x22/0x30 [ 1595.250724] [ 1595.250724] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1595.251815] __lock_acquire+0x29e7/0x5b00 [ 1595.252397] lock_acquire+0x197/0x470 [ 1595.252932] __flush_work+0x105/0xa90 [ 1595.253469] __cancel_work_timer+0x368/0x4c0 [ 1595.254084] hci_request_cancel_all+0x73/0x230 [ 1595.254723] hci_dev_do_close+0xd9/0x1240 [ 1595.255308] hci_rfkill_set_block+0x166/0x1a0 [ 1595.255937] rfkill_set_block+0x1fd/0x540 [ 1595.256502] rfkill_fop_write+0x253/0x4b0 [ 1595.257061] vfs_write+0x29a/0xa70 [ 1595.257553] ksys_write+0x1f6/0x260 [ 1595.258057] do_syscall_64+0x33/0x40 [ 1595.258584] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1595.259262] [ 1595.259262] other info that might help us debug this: [ 1595.259262] [ 1595.260242] Chain exists of: [ 1595.260242] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1595.260242] [ 1595.261927] Possible unsafe locking scenario: [ 1595.261927] [ 1595.262669] CPU0 CPU1 [ 1595.263225] ---- ---- [ 1595.263793] lock(rfkill_global_mutex); [ 1595.264284] lock(&data->open_mutex); [ 1595.265055] lock(rfkill_global_mutex); 00:26:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1595.265847] lock((work_completion)(&hdev->bg_scan_update)); [ 1595.266745] [ 1595.266745] *** DEADLOCK *** [ 1595.266745] [ 1595.267476] 1 lock held by syz-executor.2/10074: 00:26:35 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x6, 0x4, 0x4}) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) [ 1595.268061] #0: ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1595.269259] [ 1595.269259] stack backtrace: [ 1595.269814] CPU: 0 PID: 10074 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 1595.270665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1595.271716] Call Trace: [ 1595.272042] dump_stack+0x107/0x167 [ 1595.272498] check_noncircular+0x263/0x2e0 [ 1595.273020] ? register_lock_class+0xbb/0x17b0 [ 1595.273584] ? print_circular_bug+0x470/0x470 [ 1595.274145] ? find_first_zero_bit+0x94/0xb0 [ 1595.274693] ? alloc_chain_hlocks+0x1ec/0x5a0 00:26:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f20d0600000000000000ebbab3a436200000003806fda7a17a1981354cae1914ff66a58717434500e07e780a2427", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f007068793100000000"], 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x80000, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet(0xa, 0x3, 0xff) 00:26:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x60, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000280)="020000000300000004c5", 0xa, 0x800}], 0x0, &(0x7f0000000140)) 00:26:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0xff, 0x7fffffff, 0x0, 0x4, 0x4}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) [ 1595.275252] __lock_acquire+0x29e7/0x5b00 mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) [ 1595.275846] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1595.276501] ? SOFTIRQ_verbose+0x10/0x10 [ 1595.277014] ? __lockdep_reset_lock+0x180/0x180 [ 1595.277593] ? mark_lock+0xf5/0x2df0 [ 1595.278045] lock_acquire+0x197/0x470 [ 1595.278502] ? __flush_work+0xdd/0xa90 [ 1595.278969] ? lock_release+0x680/0x680 [ 1595.279458] ? __flush_work+0x78c/0xa90 [ 1595.279944] ? lock_downgrade+0x6d0/0x6d0 [ 1595.280447] __flush_work+0x105/0xa90 [ 1595.280900] ? __flush_work+0xdd/0xa90 [ 1595.281371] ? lock_chain_count+0x20/0x20 [ 1595.281869] ? queue_delayed_work_on+0xe0/0xe0 [ 1595.282415] ? mark_lock+0xf5/0x2df0 [ 1595.282865] ? mark_lock+0xf5/0x2df0 [ 1595.283312] ? lock_chain_count+0x20/0x20 [ 1595.283820] ? perf_trace_lock+0xac/0x490 [ 1595.284318] ? lock_chain_count+0x20/0x20 [ 1595.284830] ? mark_held_locks+0x9e/0xe0 [ 1595.285320] __cancel_work_timer+0x368/0x4c0 [ 1595.285847] ? try_to_grab_pending+0xe0/0xe0 [ 1595.286374] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1595.287000] ? cancel_delayed_work+0x24d/0x2b0 [ 1595.287553] ? trace_hardirqs_on+0x5b/0x180 [ 1595.288070] ? cancel_delayed_work+0x1b8/0x2b0 [ 1595.288617] ? cancel_delayed_work_sync+0x20/0x20 [ 1595.289200] hci_request_cancel_all+0x73/0x230 [ 1595.289746] hci_dev_do_close+0xd9/0x1240 [ 1595.290243] ? rfkill_set_block+0x18f/0x540 [ 1595.290759] ? hci_dev_open+0x350/0x350 [ 1595.291238] ? mark_held_locks+0x9e/0xe0 [ 1595.291741] hci_rfkill_set_block+0x166/0x1a0 [ 1595.292282] ? hci_power_off+0x20/0x20 [ 1595.292752] rfkill_set_block+0x1fd/0x540 [ 1595.293255] rfkill_fop_write+0x253/0x4b0 [ 1595.293770] ? rfkill_sync_work+0xa0/0xa0 [ 1595.294274] ? security_file_permission+0x24e/0x570 [ 1595.294875] ? rfkill_sync_work+0xa0/0xa0 [ 1595.295378] vfs_write+0x29a/0xa70 [ 1595.295822] ksys_write+0x1f6/0x260 [ 1595.296265] ? __ia32_sys_read+0xb0/0xb0 [ 1595.296756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1595.297407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1595.298033] do_syscall_64+0x33/0x40 [ 1595.298507] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1595.299132] RIP: 0033:0x7fada6080b19 [ 1595.299597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1595.301844] RSP: 002b:00007fada35f6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1595.302788] RAX: ffffffffffffffda RBX: 00007fada6193f60 RCX: 00007fada6080b19 [ 1595.303665] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1595.304557] RBP: 00007fada60daf6d R08: 0000000000000000 R09: 0000000000000000 [ 1595.305446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1595.306330] R13: 00007ffc577a7c1f R14: 00007fada35f6300 R15: 0000000000022000 [ 1595.328689] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 50436)! [ 1595.329974] EXT4-fs (loop1): group descriptors corrupted! 00:26:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1595.484607] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) VM DIAGNOSIS: 15:19:30 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822ca15c RDI=ffffffff879e81e0 RBP=ffffffff879e81a0 RSP=ffff88804bb3f178 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d088 R14=fffffbfff0f3d03e R15=dffffc0000000000 RIP=ffffffff822ca1b0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fada35f6700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055555579dc58 CR3=000000000c88c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000c007651b20 RBX=000000c007581798 RCX=0000000000ea8a40 RDX=0000000000000009 RSI=000000c0076817b0 RDI=0000000000000080 RBP=000000c00044d370 RSP=000000c00044d280 R8 =000000000093a1c0 R9 =0000000000000001 R10=000000c0076817b0 R11=0000000000000001 R12=ffffffffffffffff R13=000000000000017c R14=000000000000017b R15=0000000000000200 RIP=00000000005c19e6 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c00009c090 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6faf24b000 CR3=0000000015b4c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000125dfdbfd0070bd290008 XMM01=0000307a797314000c000000000b8000 XMM02=800000000000000125dfdbfd0070bd29 XMM03=00000000307a797314000c000000000b XMM04=b0be79cb87e832209cef1c6ffabc048e XMM05=c0dc85f4bd978047ecc0a6b073d03a4e XMM06=77fcc12d0bc2d45aaf3c6f08cc718260 XMM07=28767d1953c2771b6bfc5af6e652179e XMM08=f40824cd591000b49bdcee7938d1541e XMM09=5616c668285717712c93a862d2ce5ff2 XMM10=be79cb87e832209cef1c6ffabc048e68 XMM11=dc85f4bd978047ecc0a6b073d03a4eb0 XMM12=fcc12d0bc2d45aaf3c6f08cc718260c0 XMM13=767d1953c2771b6bfc5af6e652179e77 XMM14=747270897c49adac0b162df6c51feb28 XMM15=8b86be7f0e156028b13b0ea9a8263800