Warning: Permanently added '[localhost]:36947' (ECDSA) to the list of known hosts. 2026/07/26 16:37:54 fuzzer started 2026/07/26 16:37:54 dialing manager at localhost:34777 syzkaller login: [ 34.765899] cgroup: Unknown subsys name 'net' [ 34.767318] cgroup: Unknown subsys name 'net_prio' [ 34.769770] cgroup: Unknown subsys name 'devices' [ 34.770942] cgroup: Unknown subsys name 'blkio' [ 34.816389] cgroup: Unknown subsys name 'hugetlb' [ 34.817418] cgroup: Unknown subsys name 'rlimit' 2026/07/26 16:38:09 syscalls: 2215 2026/07/26 16:38:09 code coverage: enabled 2026/07/26 16:38:09 comparison tracing: enabled 2026/07/26 16:38:09 extra coverage: enabled 2026/07/26 16:38:09 setuid sandbox: enabled 2026/07/26 16:38:09 namespace sandbox: enabled 2026/07/26 16:38:09 Android sandbox: enabled 2026/07/26 16:38:09 fault injection: enabled 2026/07/26 16:38:09 leak checking: enabled 2026/07/26 16:38:09 net packet injection: enabled 2026/07/26 16:38:09 net device setup: enabled 2026/07/26 16:38:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/07/26 16:38:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/07/26 16:38:09 USB emulation: enabled 2026/07/26 16:38:09 hci packet injection: enabled 2026/07/26 16:38:09 wifi device emulation: enabled 2026/07/26 16:38:09 802.15.4 emulation: enabled 2026/07/26 16:38:09 fetching corpus: 50, signal 37779/39581 (executing program) 2026/07/26 16:38:10 fetching corpus: 100, signal 51214/54650 (executing program) 2026/07/26 16:38:10 fetching corpus: 150, signal 62210/67148 (executing program) 2026/07/26 16:38:10 fetching corpus: 200, signal 67452/73861 (executing program) 2026/07/26 16:38:10 fetching corpus: 250, signal 73334/81151 (executing program) 2026/07/26 16:38:10 fetching corpus: 300, signal 78440/87636 (executing program) 2026/07/26 16:38:10 fetching corpus: 350, signal 83991/94496 (executing program) 2026/07/26 16:38:10 fetching corpus: 400, signal 88526/100297 (executing program) 2026/07/26 16:38:11 fetching corpus: 450, signal 91437/104486 (executing program) 2026/07/26 16:38:11 fetching corpus: 500, signal 95254/109520 (executing program) 2026/07/26 16:38:11 fetching corpus: 550, signal 97763/113307 (executing program) 2026/07/26 16:38:11 fetching corpus: 600, signal 101362/118055 (executing program) 2026/07/26 16:38:11 fetching corpus: 650, signal 104114/122028 (executing program) 2026/07/26 16:38:11 fetching corpus: 700, signal 107022/126078 (executing program) 2026/07/26 16:38:11 fetching corpus: 750, signal 109400/129553 (executing program) 2026/07/26 16:38:12 fetching corpus: 800, signal 113080/134239 (executing program) 2026/07/26 16:38:12 fetching corpus: 850, signal 115012/137281 (executing program) 2026/07/26 16:38:12 fetching corpus: 900, signal 117496/140813 (executing program) 2026/07/26 16:38:12 fetching corpus: 950, signal 119537/143960 (executing program) 2026/07/26 16:38:12 fetching corpus: 1000, signal 121762/147215 (executing program) 2026/07/26 16:38:12 fetching corpus: 1050, signal 124569/150998 (executing program) 2026/07/26 16:38:12 fetching corpus: 1100, signal 125765/153296 (executing program) 2026/07/26 16:38:13 fetching corpus: 1150, signal 128689/157087 (executing program) 2026/07/26 16:38:13 fetching corpus: 1200, signal 130456/159834 (executing program) 2026/07/26 16:38:13 fetching corpus: 1250, signal 132403/162734 (executing program) 2026/07/26 16:38:13 fetching corpus: 1300, signal 134747/165943 (executing program) 2026/07/26 16:38:13 fetching corpus: 1350, signal 136898/168975 (executing program) 2026/07/26 16:38:13 fetching corpus: 1400, signal 138809/171750 (executing program) 2026/07/26 16:38:13 fetching corpus: 1450, signal 140767/174521 (executing program) 2026/07/26 16:38:13 fetching corpus: 1500, signal 142464/177107 (executing program) 2026/07/26 16:38:14 fetching corpus: 1550, signal 143837/179383 (executing program) 2026/07/26 16:38:14 fetching corpus: 1600, signal 145777/182042 (executing program) 2026/07/26 16:38:14 fetching corpus: 1650, signal 147037/184175 (executing program) 2026/07/26 16:38:14 fetching corpus: 1700, signal 148660/186651 (executing program) 2026/07/26 16:38:14 fetching corpus: 1750, signal 149723/188636 (executing program) 2026/07/26 16:38:14 fetching corpus: 1800, signal 150945/190706 (executing program) 2026/07/26 16:38:14 fetching corpus: 1850, signal 152028/192647 (executing program) 2026/07/26 16:38:15 fetching corpus: 1900, signal 153826/195135 (executing program) 2026/07/26 16:38:15 fetching corpus: 1950, signal 155206/197323 (executing program) 2026/07/26 16:38:15 fetching corpus: 2000, signal 156295/199184 (executing program) 2026/07/26 16:38:15 fetching corpus: 2050, signal 157805/201360 (executing program) 2026/07/26 16:38:15 fetching corpus: 2100, signal 158967/203290 (executing program) 2026/07/26 16:38:15 fetching corpus: 2150, signal 160749/205674 (executing program) 2026/07/26 16:38:15 fetching corpus: 2200, signal 162003/207621 (executing program) 2026/07/26 16:38:16 fetching corpus: 2250, signal 163039/209443 (executing program) 2026/07/26 16:38:16 fetching corpus: 2300, signal 163903/211107 (executing program) 2026/07/26 16:38:16 fetching corpus: 2350, signal 165089/213024 (executing program) 2026/07/26 16:38:16 fetching corpus: 2400, signal 166682/215166 (executing program) 2026/07/26 16:38:16 fetching corpus: 2450, signal 167967/217046 (executing program) 2026/07/26 16:38:16 fetching corpus: 2500, signal 169055/218765 (executing program) 2026/07/26 16:38:16 fetching corpus: 2550, signal 169783/220262 (executing program) 2026/07/26 16:38:17 fetching corpus: 2600, signal 170863/222000 (executing program) 2026/07/26 16:38:17 fetching corpus: 2650, signal 172450/224049 (executing program) 2026/07/26 16:38:17 fetching corpus: 2700, signal 173575/225764 (executing program) 2026/07/26 16:38:17 fetching corpus: 2750, signal 174393/227318 (executing program) 2026/07/26 16:38:17 fetching corpus: 2800, signal 175552/229079 (executing program) 2026/07/26 16:38:17 fetching corpus: 2850, signal 176485/230635 (executing program) 2026/07/26 16:38:17 fetching corpus: 2900, signal 177412/232206 (executing program) 2026/07/26 16:38:18 fetching corpus: 2950, signal 178064/233547 (executing program) 2026/07/26 16:38:18 fetching corpus: 3000, signal 179320/235266 (executing program) 2026/07/26 16:38:18 fetching corpus: 3050, signal 180172/236770 (executing program) 2026/07/26 16:38:18 fetching corpus: 3100, signal 180879/238157 (executing program) 2026/07/26 16:38:18 fetching corpus: 3150, signal 181611/239550 (executing program) 2026/07/26 16:38:18 fetching corpus: 3200, signal 182554/241072 (executing program) 2026/07/26 16:38:18 fetching corpus: 3250, signal 183388/242554 (executing program) 2026/07/26 16:38:19 fetching corpus: 3300, signal 184153/243921 (executing program) 2026/07/26 16:38:19 fetching corpus: 3350, signal 185058/245371 (executing program) 2026/07/26 16:38:19 fetching corpus: 3400, signal 185705/246611 (executing program) 2026/07/26 16:38:19 fetching corpus: 3450, signal 186457/247945 (executing program) 2026/07/26 16:38:19 fetching corpus: 3500, signal 187591/249516 (executing program) 2026/07/26 16:38:19 fetching corpus: 3550, signal 188648/251059 (executing program) 2026/07/26 16:38:19 fetching corpus: 3600, signal 189426/252399 (executing program) 2026/07/26 16:38:20 fetching corpus: 3650, signal 190458/253860 (executing program) 2026/07/26 16:38:20 fetching corpus: 3700, signal 191216/255142 (executing program) 2026/07/26 16:38:20 fetching corpus: 3750, signal 192607/256780 (executing program) 2026/07/26 16:38:20 fetching corpus: 3800, signal 193212/257979 (executing program) 2026/07/26 16:38:20 fetching corpus: 3850, signal 194350/259438 (executing program) 2026/07/26 16:38:20 fetching corpus: 3900, signal 195014/260620 (executing program) 2026/07/26 16:38:20 fetching corpus: 3950, signal 195789/261863 (executing program) 2026/07/26 16:38:20 fetching corpus: 4000, signal 196299/262941 (executing program) 2026/07/26 16:38:21 fetching corpus: 4050, signal 196934/264128 (executing program) 2026/07/26 16:38:21 fetching corpus: 4100, signal 198211/265618 (executing program) 2026/07/26 16:38:21 fetching corpus: 4150, signal 198813/266763 (executing program) 2026/07/26 16:38:21 fetching corpus: 4200, signal 199614/268018 (executing program) 2026/07/26 16:38:21 fetching corpus: 4250, signal 200732/269449 (executing program) 2026/07/26 16:38:21 fetching corpus: 4300, signal 201703/270763 (executing program) 2026/07/26 16:38:21 fetching corpus: 4350, signal 202239/271832 (executing program) 2026/07/26 16:38:22 fetching corpus: 4400, signal 202950/272944 (executing program) 2026/07/26 16:38:22 fetching corpus: 4450, signal 203668/274089 (executing program) 2026/07/26 16:38:22 fetching corpus: 4500, signal 204161/275088 (executing program) 2026/07/26 16:38:22 fetching corpus: 4550, signal 204962/276222 (executing program) 2026/07/26 16:38:22 fetching corpus: 4600, signal 205475/277267 (executing program) 2026/07/26 16:38:22 fetching corpus: 4650, signal 205936/278265 (executing program) 2026/07/26 16:38:22 fetching corpus: 4700, signal 206619/279311 (executing program) 2026/07/26 16:38:23 fetching corpus: 4750, signal 207387/280407 (executing program) 2026/07/26 16:38:23 fetching corpus: 4800, signal 208141/281470 (executing program) 2026/07/26 16:38:23 fetching corpus: 4850, signal 208545/282408 (executing program) 2026/07/26 16:38:23 fetching corpus: 4900, signal 209105/283384 (executing program) 2026/07/26 16:38:23 fetching corpus: 4950, signal 209759/284453 (executing program) 2026/07/26 16:38:23 fetching corpus: 5000, signal 210341/285427 (executing program) 2026/07/26 16:38:23 fetching corpus: 5050, signal 210942/286423 (executing program) 2026/07/26 16:38:23 fetching corpus: 5100, signal 211623/287418 (executing program) 2026/07/26 16:38:24 fetching corpus: 5150, signal 212409/288457 (executing program) 2026/07/26 16:38:24 fetching corpus: 5200, signal 213085/289479 (executing program) 2026/07/26 16:38:24 fetching corpus: 5250, signal 213828/290510 (executing program) 2026/07/26 16:38:24 fetching corpus: 5300, signal 214284/291405 (executing program) 2026/07/26 16:38:24 fetching corpus: 5350, signal 214778/292308 (executing program) 2026/07/26 16:38:24 fetching corpus: 5400, signal 215437/293280 (executing program) 2026/07/26 16:38:25 fetching corpus: 5450, signal 215882/294139 (executing program) 2026/07/26 16:38:25 fetching corpus: 5500, signal 216423/295034 (executing program) 2026/07/26 16:38:25 fetching corpus: 5550, signal 216891/295896 (executing program) 2026/07/26 16:38:25 fetching corpus: 5600, signal 217496/296821 (executing program) 2026/07/26 16:38:25 fetching corpus: 5650, signal 217886/297672 (executing program) 2026/07/26 16:38:25 fetching corpus: 5700, signal 218456/298548 (executing program) 2026/07/26 16:38:25 fetching corpus: 5750, signal 219005/299419 (executing program) 2026/07/26 16:38:26 fetching corpus: 5800, signal 219444/300248 (executing program) 2026/07/26 16:38:26 fetching corpus: 5850, signal 220140/301148 (executing program) 2026/07/26 16:38:26 fetching corpus: 5900, signal 220518/301940 (executing program) 2026/07/26 16:38:26 fetching corpus: 5950, signal 220818/302717 (executing program) 2026/07/26 16:38:26 fetching corpus: 6000, signal 221180/303485 (executing program) 2026/07/26 16:38:26 fetching corpus: 6050, signal 221551/304270 (executing program) 2026/07/26 16:38:26 fetching corpus: 6100, signal 221893/305055 (executing program) 2026/07/26 16:38:26 fetching corpus: 6150, signal 222249/305839 (executing program) 2026/07/26 16:38:27 fetching corpus: 6200, signal 222628/306589 (executing program) 2026/07/26 16:38:27 fetching corpus: 6250, signal 222992/307338 (executing program) 2026/07/26 16:38:27 fetching corpus: 6300, signal 223520/308146 (executing program) 2026/07/26 16:38:27 fetching corpus: 6350, signal 223983/308924 (executing program) 2026/07/26 16:38:27 fetching corpus: 6400, signal 224294/309686 (executing program) 2026/07/26 16:38:27 fetching corpus: 6450, signal 224636/310460 (executing program) 2026/07/26 16:38:27 fetching corpus: 6500, signal 224991/311211 (executing program) 2026/07/26 16:38:27 fetching corpus: 6550, signal 225325/311956 (executing program) 2026/07/26 16:38:28 fetching corpus: 6600, signal 225827/312777 (executing program) 2026/07/26 16:38:28 fetching corpus: 6650, signal 226285/313554 (executing program) 2026/07/26 16:38:28 fetching corpus: 6700, signal 226586/314284 (executing program) 2026/07/26 16:38:28 fetching corpus: 6750, signal 227126/315058 (executing program) 2026/07/26 16:38:28 fetching corpus: 6800, signal 227559/315757 (executing program) 2026/07/26 16:38:28 fetching corpus: 6850, signal 228203/316527 (executing program) 2026/07/26 16:38:29 fetching corpus: 6900, signal 228761/317278 (executing program) 2026/07/26 16:38:29 fetching corpus: 6950, signal 229260/317997 (executing program) 2026/07/26 16:38:29 fetching corpus: 7000, signal 229726/318672 (executing program) 2026/07/26 16:38:29 fetching corpus: 7050, signal 230080/319357 (executing program) 2026/07/26 16:38:29 fetching corpus: 7100, signal 230504/320025 (executing program) 2026/07/26 16:38:29 fetching corpus: 7150, signal 230878/320708 (executing program) 2026/07/26 16:38:29 fetching corpus: 7200, signal 231276/321415 (executing program) 2026/07/26 16:38:30 fetching corpus: 7250, signal 231792/322068 (executing program) 2026/07/26 16:38:30 fetching corpus: 7300, signal 232150/322741 (executing program) 2026/07/26 16:38:30 fetching corpus: 7350, signal 232537/323397 (executing program) 2026/07/26 16:38:30 fetching corpus: 7400, signal 233088/324076 (executing program) 2026/07/26 16:38:30 fetching corpus: 7450, signal 233611/324727 (executing program) 2026/07/26 16:38:30 fetching corpus: 7500, signal 233897/325363 (executing program) 2026/07/26 16:38:30 fetching corpus: 7550, signal 234402/326041 (executing program) 2026/07/26 16:38:31 fetching corpus: 7600, signal 234887/326692 (executing program) 2026/07/26 16:38:31 fetching corpus: 7650, signal 235215/327376 (executing program) 2026/07/26 16:38:31 fetching corpus: 7700, signal 236211/328070 (executing program) 2026/07/26 16:38:31 fetching corpus: 7750, signal 236621/328673 (executing program) 2026/07/26 16:38:31 fetching corpus: 7800, signal 236988/329294 (executing program) 2026/07/26 16:38:31 fetching corpus: 7850, signal 237541/329898 (executing program) 2026/07/26 16:38:31 fetching corpus: 7900, signal 237973/330486 (executing program) 2026/07/26 16:38:32 fetching corpus: 7950, signal 238299/331070 (executing program) 2026/07/26 16:38:32 fetching corpus: 8000, signal 238705/331648 (executing program) 2026/07/26 16:38:32 fetching corpus: 8050, signal 239086/332282 (executing program) 2026/07/26 16:38:32 fetching corpus: 8100, signal 239417/332873 (executing program) 2026/07/26 16:38:32 fetching corpus: 8150, signal 239717/333450 (executing program) 2026/07/26 16:38:32 fetching corpus: 8200, signal 240023/334033 (executing program) 2026/07/26 16:38:32 fetching corpus: 8250, signal 240333/334620 (executing program) 2026/07/26 16:38:33 fetching corpus: 8300, signal 240647/335193 (executing program) 2026/07/26 16:38:33 fetching corpus: 8350, signal 241066/335760 (executing program) 2026/07/26 16:38:33 fetching corpus: 8400, signal 241319/336339 (executing program) 2026/07/26 16:38:33 fetching corpus: 8450, signal 241725/336475 (executing program) 2026/07/26 16:38:33 fetching corpus: 8500, signal 242014/336475 (executing program) 2026/07/26 16:38:33 fetching corpus: 8550, signal 242361/336475 (executing program) 2026/07/26 16:38:33 fetching corpus: 8600, signal 242757/336475 (executing program) 2026/07/26 16:38:34 fetching corpus: 8650, signal 243018/336475 (executing program) 2026/07/26 16:38:34 fetching corpus: 8700, signal 243401/336475 (executing program) 2026/07/26 16:38:34 fetching corpus: 8750, signal 243711/336475 (executing program) 2026/07/26 16:38:34 fetching corpus: 8800, signal 244062/336475 (executing program) 2026/07/26 16:38:34 fetching corpus: 8850, signal 244564/336475 (executing program) 2026/07/26 16:38:34 fetching corpus: 8900, signal 244776/336475 (executing program) 2026/07/26 16:38:35 fetching corpus: 8950, signal 245021/336475 (executing program) 2026/07/26 16:38:35 fetching corpus: 9000, signal 245240/336475 (executing program) 2026/07/26 16:38:35 fetching corpus: 9050, signal 245554/336475 (executing program) 2026/07/26 16:38:35 fetching corpus: 9100, signal 245866/336475 (executing program) 2026/07/26 16:38:35 fetching corpus: 9150, signal 246443/336475 (executing program) 2026/07/26 16:38:35 fetching corpus: 9200, signal 246680/336480 (executing program) 2026/07/26 16:38:36 fetching corpus: 9250, signal 247076/336480 (executing program) 2026/07/26 16:38:36 fetching corpus: 9300, signal 247457/336480 (executing program) 2026/07/26 16:38:36 fetching corpus: 9350, signal 247742/336480 (executing program) 2026/07/26 16:38:36 fetching corpus: 9400, signal 248257/336480 (executing program) 2026/07/26 16:38:36 fetching corpus: 9450, signal 248480/336480 (executing program) 2026/07/26 16:38:36 fetching corpus: 9500, signal 248845/336480 (executing program) 2026/07/26 16:38:37 fetching corpus: 9550, signal 249131/336480 (executing program) 2026/07/26 16:38:37 fetching corpus: 9600, signal 249577/336480 (executing program) 2026/07/26 16:38:37 fetching corpus: 9650, signal 249881/336480 (executing program) 2026/07/26 16:38:37 fetching corpus: 9700, signal 250180/336480 (executing program) 2026/07/26 16:38:37 fetching corpus: 9750, signal 250441/336480 (executing program) 2026/07/26 16:38:37 fetching corpus: 9800, signal 250782/336480 (executing program) 2026/07/26 16:38:37 fetching corpus: 9850, signal 251262/336480 (executing program) 2026/07/26 16:38:37 fetching corpus: 9900, signal 251540/336480 (executing program) 2026/07/26 16:38:38 fetching corpus: 9950, signal 252250/336480 (executing program) 2026/07/26 16:38:38 fetching corpus: 10000, signal 252531/336480 (executing program) 2026/07/26 16:38:38 fetching corpus: 10050, signal 252915/336480 (executing program) 2026/07/26 16:38:38 fetching corpus: 10100, signal 253190/336480 (executing program) 2026/07/26 16:38:38 fetching corpus: 10150, signal 253465/336480 (executing program) 2026/07/26 16:38:38 fetching corpus: 10200, signal 253788/336480 (executing program) 2026/07/26 16:38:38 fetching corpus: 10250, signal 254104/336480 (executing program) 2026/07/26 16:38:38 fetching corpus: 10300, signal 254579/336480 (executing program) 2026/07/26 16:38:39 fetching corpus: 10350, signal 254981/336480 (executing program) 2026/07/26 16:38:39 fetching corpus: 10400, signal 255220/336481 (executing program) 2026/07/26 16:38:39 fetching corpus: 10450, signal 255555/336481 (executing program) 2026/07/26 16:38:39 fetching corpus: 10500, signal 255821/336481 (executing program) 2026/07/26 16:38:39 fetching corpus: 10550, signal 256035/336481 (executing program) 2026/07/26 16:38:39 fetching corpus: 10600, signal 256280/336481 (executing program) 2026/07/26 16:38:39 fetching corpus: 10650, signal 256535/336481 (executing program) 2026/07/26 16:38:40 fetching corpus: 10700, signal 256929/336481 (executing program) 2026/07/26 16:38:40 fetching corpus: 10750, signal 257190/336481 (executing program) 2026/07/26 16:38:40 fetching corpus: 10800, signal 257420/336481 (executing program) 2026/07/26 16:38:40 fetching corpus: 10850, signal 257645/336481 (executing program) 2026/07/26 16:38:40 fetching corpus: 10900, signal 257950/336481 (executing program) 2026/07/26 16:38:40 fetching corpus: 10950, signal 258187/336481 (executing program) 2026/07/26 16:38:40 fetching corpus: 11000, signal 258434/336481 (executing program) 2026/07/26 16:38:40 fetching corpus: 11050, signal 258702/336481 (executing program) 2026/07/26 16:38:41 fetching corpus: 11100, signal 259078/336481 (executing program) 2026/07/26 16:38:41 fetching corpus: 11150, signal 259270/336481 (executing program) 2026/07/26 16:38:41 fetching corpus: 11200, signal 259570/336481 (executing program) 2026/07/26 16:38:41 fetching corpus: 11250, signal 259870/336481 (executing program) 2026/07/26 16:38:41 fetching corpus: 11300, signal 260213/336481 (executing program) 2026/07/26 16:38:41 fetching corpus: 11350, signal 260469/336481 (executing program) 2026/07/26 16:38:42 fetching corpus: 11400, signal 260699/336481 (executing program) 2026/07/26 16:38:42 fetching corpus: 11450, signal 260924/336481 (executing program) 2026/07/26 16:38:42 fetching corpus: 11500, signal 261125/336481 (executing program) 2026/07/26 16:38:42 fetching corpus: 11550, signal 261431/336481 (executing program) 2026/07/26 16:38:42 fetching corpus: 11600, signal 261686/336481 (executing program) 2026/07/26 16:38:42 fetching corpus: 11650, signal 262015/336481 (executing program) 2026/07/26 16:38:42 fetching corpus: 11700, signal 262253/336481 (executing program) 2026/07/26 16:38:42 fetching corpus: 11750, signal 262601/336481 (executing program) 2026/07/26 16:38:43 fetching corpus: 11800, signal 262859/336481 (executing program) 2026/07/26 16:38:43 fetching corpus: 11850, signal 263179/336481 (executing program) 2026/07/26 16:38:43 fetching corpus: 11900, signal 263377/336483 (executing program) 2026/07/26 16:38:43 fetching corpus: 11950, signal 263601/336483 (executing program) 2026/07/26 16:38:43 fetching corpus: 12000, signal 263838/336483 (executing program) 2026/07/26 16:38:43 fetching corpus: 12050, signal 264088/336483 (executing program) 2026/07/26 16:38:43 fetching corpus: 12100, signal 264267/336483 (executing program) 2026/07/26 16:38:43 fetching corpus: 12150, signal 264489/336483 (executing program) 2026/07/26 16:38:44 fetching corpus: 12200, signal 264818/336483 (executing program) 2026/07/26 16:38:44 fetching corpus: 12250, signal 265147/336483 (executing program) 2026/07/26 16:38:44 fetching corpus: 12300, signal 265444/336483 (executing program) 2026/07/26 16:38:44 fetching corpus: 12350, signal 265677/336483 (executing program) 2026/07/26 16:38:44 fetching corpus: 12400, signal 265891/336483 (executing program) 2026/07/26 16:38:44 fetching corpus: 12450, signal 266335/336483 (executing program) 2026/07/26 16:38:44 fetching corpus: 12500, signal 266529/336483 (executing program) 2026/07/26 16:38:45 fetching corpus: 12550, signal 266929/336483 (executing program) 2026/07/26 16:38:45 fetching corpus: 12600, signal 267168/336483 (executing program) 2026/07/26 16:38:45 fetching corpus: 12650, signal 267392/336483 (executing program) 2026/07/26 16:38:45 fetching corpus: 12700, signal 267606/336483 (executing program) 2026/07/26 16:38:45 fetching corpus: 12750, signal 267759/336483 (executing program) 2026/07/26 16:38:45 fetching corpus: 12800, signal 268106/336483 (executing program) 2026/07/26 16:38:45 fetching corpus: 12850, signal 268437/336483 (executing program) 2026/07/26 16:38:45 fetching corpus: 12900, signal 268659/336483 (executing program) 2026/07/26 16:38:46 fetching corpus: 12950, signal 268888/336483 (executing program) 2026/07/26 16:38:46 fetching corpus: 13000, signal 269324/336483 (executing program) 2026/07/26 16:38:46 fetching corpus: 13050, signal 269584/336483 (executing program) 2026/07/26 16:38:46 fetching corpus: 13100, signal 269927/336483 (executing program) 2026/07/26 16:38:46 fetching corpus: 13150, signal 270121/336483 (executing program) 2026/07/26 16:38:46 fetching corpus: 13200, signal 270324/336483 (executing program) 2026/07/26 16:38:46 fetching corpus: 13250, signal 270533/336483 (executing program) 2026/07/26 16:38:47 fetching corpus: 13300, signal 270730/336483 (executing program) 2026/07/26 16:38:47 fetching corpus: 13350, signal 270955/336483 (executing program) 2026/07/26 16:38:47 fetching corpus: 13400, signal 271198/336483 (executing program) 2026/07/26 16:38:47 fetching corpus: 13450, signal 271454/336483 (executing program) 2026/07/26 16:38:47 fetching corpus: 13500, signal 271681/336483 (executing program) 2026/07/26 16:38:47 fetching corpus: 13550, signal 271870/336483 (executing program) 2026/07/26 16:38:47 fetching corpus: 13558, signal 271890/336483 (executing program) 2026/07/26 16:38:47 fetching corpus: 13558, signal 271890/336483 (executing program) 2026/07/26 16:38:49 starting 8 fuzzer processes 16:38:49 executing program 0: ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000000)={0x93, 0x9, 0x4, 0x2, @lba=0x8001}) pwritev2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)="81cef6c9e86735ba96191b1b5dad95b35900a972a309dc8d566b6b31db1799b01ed7702d4cc333eebcedcc678f0b3cbb29f9e08fe6b21c8ffed90517fb0555a828b1922de4b3348b04270a9635713b520302427d85f9ce149a8e64eab6000104adab7a389c", 0x65}, {&(0x7f00000000c0)="3f598d55dd3d77f7f4304c9a9a4a674c7622e4d86b6712a7061195531e3d7068d5fdf1741f8d4da96cbdd06ff0f152f094a19c31f8292eda276d5f95c4e18051ce1afcce49f9c6165075dd98cf2867d22a79ca9d31ff5721876c303af37a69db49a26ccc54547316fc9956e80a01a6e2952f131376b3efb38adccc", 0x7b}, {&(0x7f0000000140)="5eb6411d18d58558536f35f479a69a3fc66af5e724d935e874608cbd6dea7f135cb4b4e141c18e2930671e65c3ccfe7101e8f04358b7135093c8373cf3567a753bfe278a04e8127575c4d29287d119924a82d7462e25821c5250703510ed2f053db9e3d3eaf2d9bd2d5717e602b69679f9598fcb05372c2a1a8b", 0x7a}, {&(0x7f00000001c0)="882fa70185a75256496dad6938bbf45f4ec1bcdb6667df3092b5ffdc873cee1a7db689aaaa41315057b2e0e769e97b20", 0x30}], 0x4, 0x128, 0xffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0\x00'}) write$P9_RCLUNK(r0, &(0x7f0000000280)={0x7, 0x79, 0x2}, 0x7) write$9p(r0, &(0x7f00000002c0)="81fdb346a9d0941b7ce8", 0xa) write$P9_RREADDIR(r0, &(0x7f0000000300)={0x128, 0x29, 0x2, {0x5, [{{0x0, 0x1, 0x7}, 0x4, 0x1, 0x7, './file0'}, {{0x80, 0x1, 0x8}, 0x7, 0x8c, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x2, 0x20, 0x7, './file0'}, {{0x1, 0x3, 0x1}, 0x101, 0x4, 0xd, './file0/file0'}, {{0x2, 0x4, 0x6}, 0x200, 0x4, 0x7, './file0'}, {{0x4, 0x4, 0x6}, 0x7, 0x4, 0x7, './file0'}, {{0x80, 0x4, 0x8}, 0x8, 0x0, 0x7, './file0'}, {{0x20, 0x4}, 0x7fff, 0xbc, 0x7, './file0'}, {{0x10, 0x1, 0x2}, 0x0, 0x40, 0x7, './file0'}]}}, 0x128) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x2020c0, 0x49) lgetxattr(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)=@random={'trusted.', '},\x00'}, &(0x7f0000000500)=""/4096, 0x1000) chroot(&(0x7f0000001500)='./file1\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001540), 0x181002, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000001580)={{0x1, 0x1, 0x18, r3, {0x76}}, './file0\x00'}) r4 = accept$inet6(r1, 0x0, &(0x7f00000015c0)) write$binfmt_script(r4, &(0x7f0000001600)={'#! ', './file0/file0', [{0x20, '#-'}, {}, {0x20, '^}},;/[/{\xa02$,]-)'}, {0x20, '/dev/bsg\x00'}, {0x20, 'trusted.'}, {0x20, '/dev/bsg\x00'}, {0x20, '@'}, {0x20, '},\x00'}, {0x20, '/dev/bsg\x00'}], 0xa, "421b6ee11a18177e74a8611388f149a4d2e58ebe00ad1a58fe8e3577ebbb31150b4175dda5a6133f30aa4ed325ab5da45092aea70c27e0aa98c6359b8f4ec2fdb55f5a1cb7338d362fe57e67c92b7cebfe11a904fd97fc91aaab6e77cc1ffada973553019258ebd075c1dac3972d0816163e15fc3f5bda5344148c285a3d454d22c44f64fa6e53503b221efb0180d74de8441cecb1f21b8df2ca8d056094c4f5d9728bbd3799283eb8b3477a7b8586a7de8a603af82967"}, 0x10a) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000001740), 0x280000, 0x0) sendmsg$inet6(r5, &(0x7f0000001940)={&(0x7f0000001780)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x1ff0}, 0x1c, &(0x7f0000001800)=[{&(0x7f00000017c0)="3885aea609510cb1e8984473ad1782140da43b5900d5aa86394ef8afd418f601dc0bc5ee15ca89a34f954fb4a1", 0x2d}], 0x1, &(0x7f0000001840)=[@dstopts_2292={{0x70, 0x29, 0x4, {0x11, 0xa, '\x00', [@pad1, @calipso={0x7, 0x40, {0x1, 0xe, 0x2, 0x2, [0x85, 0x5, 0xdf, 0xfffffffffffffff7, 0x8, 0x81, 0x6]}}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x24, 0x4, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0xed, 0x2, [0x2, 0x1000, 0x1]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80000001}}], 0xc8}, 0x50) r6 = eventfd2(0x1e, 0x181800) copy_file_range(r6, &(0x7f0000001980)=0x6, r2, 0x0, 0x5, 0x0) mknodat(r0, &(0x7f00000019c0)='./file0\x00', 0x8206, 0x95) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0xe0, 0x453, 0x300, 0x70bd2d, 0x25dfdbfd, "8d1925515ecac465fb14e814445e373d1ef9a4add3639b6fc920bc4c353656a95dcbe4df7eaa3fb91e434ce4574e0be79bd0236c91fa4602d74cd894a00a3b79aa70672506d72bbb5159c729308078d64e5b39178dc77c734de911c2c87af9262956a01122dc256ba3e36a2e7823dbf57374045108f41fcf410be70560ade405b49cf131357d2335c8e82000c99a4d48501273ba89bb26e6510be9923ac0fc6e61f326ed7e9ec8b20bf12c239cc8893438ebf17bc7173d64943672c01528279e751286784cae9dab683a13cec4280379", ["", "", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x4008080}, 0x40001) 16:38:49 executing program 2: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000005, 0x20010, 0xffffffffffffffff, 0x10000000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x7, &(0x7f0000000040)={r1, r2+60000000}, 0x1, 0x1, 0x1, {0x0, r3}}, 0xb8ca) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x1010, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x43fc, &(0x7f00000000c0)={0x0, 0x442e, 0x0, 0x1, 0x1fc}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@can, 0x0, 0x0, 0x1}, 0x26a95859) r7 = open(&(0x7f0000000280)='./file0\x00', 0x11b000, 0x100) syz_io_uring_setup(0x75a6, &(0x7f00000002c0)={0x0, 0x294e, 0x0, 0x2, 0x1, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2800000, 0x2010, r5, 0x10000000) syz_io_uring_submit(0x0, r10, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x3, &(0x7f00000003c0)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r3}}, 0x7ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000540)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r11, &(0x7f0000000480)=0x80, &(0x7f00000004c0)=@generic, 0x0, 0x80800, 0x0, {0x0, r3}}, 0x2) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x1010, r5, 0x10000000) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='limits\x00') syz_io_uring_submit(r4, r12, &(0x7f0000000700)=@IORING_OP_STATX={0x15, 0x0, 0x0, r13, &(0x7f00000005c0), &(0x7f00000006c0)='./file0\x00', 0x101, 0x4000, 0x1, {0x0, r3}}, 0x2) r14 = dup2(r5, r13) io_uring_register$IORING_REGISTER_PROBE(r14, 0x8, &(0x7f0000000740)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1a) read(r11, &(0x7f0000000840)=""/4096, 0x1000) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001880)={0x0, 0xe45}) 16:38:49 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x40) r0 = syz_io_uring_complete(0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="0728ab5a169077c84009200583bff910304b54130aa6e40f8deb38f2989b89e725a96f6d2bf6dec7f136f91dfe607dd0062e3bd249bf0c9ec05bd21a0d032218d79b01c5cee9b61f883780850ac5960e72794fc98c8a86ad5a7fc9cb2c475027a300a5a78ff70a27b0a504e9db785f8bd248b15dff0ed0a7fa8ca167a3a62629746f14d6ed54a6af4cbea71703b82efd474e6ec1c874c92c287c646445a9ab39c53974aa313a894bb56b050f5a058018fd") r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4800, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x500, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r0, r0, r2], 0x3) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x200100, 0x0) splice(r1, &(0x7f0000000180)=0x5, r3, &(0x7f0000000200)=0x6, 0x20, 0x8) r4 = socket$inet6(0xa, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}, {@cache_none}, {@loose}, {@access_any}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1f}}], [{@uid_gt}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@hash}]}}) r5 = fsmount(r2, 0x0, 0x5) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) r7 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x4, 0x101000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000440)={0x5, 0x0, &(0x7f0000000400)=[r4, r4, r1, r5, r0, r2, r6, r4, r7, r2]}, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) r9 = open_tree(r7, &(0x7f00000004c0)='./file0\x00', 0x88000) ioctl$EXT4_IOC_CHECKPOINT(r9, 0x4004662b, &(0x7f0000000500)) r10 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0x244000, 0x0) ioctl$EVIOCGUNIQ(r10, 0x80404508, &(0x7f0000000580)=""/191) [ 89.242694] audit: type=1400 audit(1785083929.541:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:38:49 executing program 3: rt_sigprocmask(0x2, &(0x7f0000000000)={[0x2]}, &(0x7f0000000040), 0x8) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ppoll(&(0x7f0000000100)=[{r0}, {0xffffffffffffffff, 0xe0a3}, {0xffffffffffffffff, 0x8300}, {r1, 0x100}, {r2, 0x410a}, {0xffffffffffffffff, 0x22}, {r4, 0x40}, {}], 0x8, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x6]}, 0x8) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$9p(r6, &(0x7f0000000200)="8680bc8f6a4f56edeb32ef9525b2e64df4669d27694b175793d30e64d6e527fd61e471096c34c36058083ccaa0d3ae06a3daf9b271c4a87f5c55f47b9548b0d19cc8adb81a61f2364f142b88f05ba3b108dd1271dcf96a432df193a01b5d76f8bb2cfd74c69d3ca21d379f530dc42481c03f74c89bee19e73fa9564ec59a16bfd19ef5370d3fca41f5822fcc02de8cf08aaacd54abefe08f78ba13ebb55215a8ddcb", 0xa2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$SNAPSHOT_FREE(r7, 0x3305) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000029c0)={{0x1, 0x1, 0x18, r6, {0xee00}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000380)='./file0\x00', 0x3, 0xa, &(0x7f00000028c0)=[{&(0x7f00000003c0), 0x0, 0xffffffff}, {&(0x7f0000000400)="8081f8fc07534daa8ddc30", 0xb, 0x3f}, {&(0x7f0000000440)="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", 0x1000, 0x2}, {&(0x7f0000001440)="f11357ecf9cbc7ca69f85cd875e0210ccbee698c0bc405aef59e6f62c061a08386fc169ba0d20c27cc37c47abc21044bfa228c358358890949c4f96f5b404513629003ac4ccdc9f157cc226946e142cf81561f66fc7cfdb8d30a26ba800c6a200a7363a1c97c347942cc871fad0ca236eb29de", 0x73, 0x4cbf}, {&(0x7f00000014c0)="7d9b7ced27593dc0a466aa6383b9211ddbc83391ce8c556da9782421ce7dcccd28233140cc9c37bb1bacb2f4e7668323148ccc948f1c28a9f0e990a43437a887e427ac7187c4bb103bda4a655f2ead4dd3f6be9346eb463fc50f2e551f5b7e8a5b3bcc3ea298ef4043f23d7d8e15f7ab0f0a3d0acc137bc4bf308e85c3a834b25bd80741bb5250d9c9f10e1d96676f0ae0b3add07caf5f1e7b064d38d0d63e277ae8f14862e8611d87cc054bfb27255ca53eac99cc8a5564db7d523c567d2f8d78097ca3e82a6ce317d8f83a73cbfa754cee", 0xd2, 0x3}, {&(0x7f00000015c0)="abb1693cfe77f43690f40f2b44499a89f3a21a9b413fa7282c968d4ef668de4a17149744dcb23ef349ce79814740936075d5cefaa05ade9568002996b2a97aa682634ea27a2332418c0e99697c701f59f6db5b1ff8ebf8a1ee13d43c8d5e79eeaee3f515491bab05504f1df2814e52a878932ba31c78bbd70b80055ec42cb4dfeff4e2128e0045c4c301ca0f120d776be29cabd236fb52361fb80456b2de0058bd1da3c8d2c2791164dc6e6824e7964637c4dfae23df5c53dfac5a66221d337526b30013", 0xc4, 0x1000}, {&(0x7f00000016c0)="46d25999759cb1a13f512a1eac54d8d74ffb9e26d1", 0x15, 0x512}, {&(0x7f0000001700)="4a9c5364396dc32a67ccb04e4051948236c91119250dea6ea27308e83e0160d1f99376612da40d41b2de9800017f5e9b36084e487e91117c5ba3e02baf28ad29efc87506164fd81201feb68aed6b5aae049fca9da939ce3e55e19ff1f7f903d6e380736bfd4e85b8e95c6501c2e22dff66f96dd82d010116a0045518ab627675050a93f231", 0x85, 0x9}, {&(0x7f00000017c0)="f1792e2f9be81d26e7a32905c9eff55754f9a75e9c84d01a8953789c33abdc0df754d0566580b7f090036a299f042375675f85a18e6efaad0ab204094bf5d705ddf86c8b90ced780d6dcf91756abc3840050331f2233580dbf8c132ec0584b6be550755912550be288ef95f72f2c9a8df75c4eedc71892eedba35fe54b7830d64dc4995d000e5b83f2be306b5e19278855810de7d31093032743a351ddad54bc960e7e1030180e7daf6675e37fd95881f14ae246fd54901a4eca8c38a2b8481ed748f5387f54a3f25953a655418e76bf069054851ae8b6a295e4ac9938cb2e8dfadcf8ca857b451f1c678b832fde92f6f6d10d71480082607a489c4355482c81af39b16cdee455ab07c8c048c7004807af6afa756f2e4992fbb69eca5fa7845e577d905a08162b527ed8f5f2bf66ec691b90be4dc785daadcbeb23621497a612893c9c1300075ca99100c74d25f6fb2755faebedd9e2764f13028016901283cf0505aff74bd6124802a29ea12f061c0e6caf5f886789c1ed7e34c2cbf28262b945fcb301cbc871500c7f6b32a8c58994b3bc2cbd4497549248d26c534bba6c0734b0e830040685bab62856aec953d411ec05da94560372a8f24b171622d104762e4622ba96f9f2b6ec1f1d59596ec802ea22cd3fd4d2b8dd601c7d0d22f1dcb6119b138b4f2c02dcb07f524f0d41b46c8f5badf25dfcdc73c429a83d62c8df9476546d447a974901f28bc5f8e63573dbaa5d63a03554eb6cfbdfdac1467d8b36730a19ff143acbf3cccaf4f3abfe987b585a5474da7c8129a10391df4f2568ae4b49902446355e07aecd02c3666ab05275ffb2a11d94fa8e24fd1589a3e3d7eda1832a86d6f7095df33c074905866ad7c9ac644c7c1cf09c9b7a3ed24c0b1413633d06c5081e7a51f0e85e61d016f7ca19cb9e416fc6757b021189b6287fcb668c1f47bd8b1c182b6f41e9c3ff0f3f6d5868cf0a635d134546ca56170615beb961615fece961e5fa9787434743bc5efbd37d33ead329e8ce5a4c0469d2894515c6837fce4e2f55aa9b9088db264a7a32381e82e69ce22f292054d030fc61fe4b7b0e6bde0b6c798bd9390c2816bb4ad1df599b6b980bb298cb7ec467b02e534b249f95e2f4d94645bfa1351c4fbc3d91c7c89034e8cbdd61d779632dbfda8c93575125d9ef1f9c9e902c87c0bee21c5e8059bad925c995d8504b10570c93ec608b266c9086723f0157e445dd8aecea87579cf99ab51f890514910666f089e4c15559076d63a76e6e75916dfe39397430a4218acd4ae3cc453d134a73f976298006b5de9e49cc6f077cca5eaead23a72061770d21a0016b2c2def5779d682de447308601be076a516e7e56b851d22242b69c0eac676ab4e632f595335c9a576a4f7877effb24479f44dc67eac2e5b1df9d2f240c466a2c29d7c08e4d3969351afe3204f87ec219ce65277029a83d172ea5056a2c2e27d146cd7f14f2ffa1a317817021431648bc19eb7e9d81ed678303d6df2de6ab5acb6a6623cae570e2c734e2dda54df60eaa88de029c8706f74461cee054383d5cc9260c73969ea899d7793b3ee9e35706eca88641543f68d806f96bdefc6a2e572df3be132a58b5a15225e92709c0dd4811256cf0885b26589053c1caacde1e9e4d010720670bc24a2e8c0793546d002a8ea7a133fd7b0dda9c89e80b857fc32445a940492530291841148a48cfee318a95f5e6835385c00405aa7f1d754dc37d013409126b8b891313688686f85f3e5f0fd3f4c8dba244cc06f8f6f95c8eec528c07c05d77da62bf9c2aa1819b0cce07ece32df66cbe3e3d600a917b22ab2e40067e3b0a88e08b0418bd34bb0428c23c878abf41a3892ec591605f54aece75a4c591ceabc52aaa71c8ef7c1edc02c990b575237ea18d5a2885fab6dafc0f0c19014c8e1b05ac5d26dbfc12a5ae34eef4f586c99d46180a5d46e56ed4e59364023079506297df325e1cb933553d1bb7b2bb79edc174ef54898a7e92722a584d8b1e2e9cf3236458cf11d5c8d4183bd018582603cfac72e9e4101691a340e6b9a98813bc62397e343ca0a54c4ed49dd6f7246b178496fdeee7c0c68e59d26b302a2ae73f06f9b29e6e501b001f845b784a63f88d1fe25f2f10661dbaaf23dd0d6b1363a529600b49a754175444e3412bb352f3c4664852acad21a2422253b50ce4caafc2137e0a265c11a73b278ce0a2989164fc91b2eac2bd56df4943677b938722ca7054750013862fd0e8c744a9e2cd440a7e269688106c51560e901b227cf5ca8d45a1bbeaf68f33742cbbc36ac115e76663fe44bdd9644571018cd1cc6cc04bb2f5de9045c9bd74c86580180bdc202c1bf7edf47546c561f398514bd866831d219db8b6f5c22bbe7d4c37b01056e803fc21397a3a5b9d30d0b61d1c5598993e64a99a6e451cc16d5b457b8697fd96420e65009192563b260c8438b8f2e4f4ead27e41ed5caf310db9fd981aafa3415f87e7c752200b3eb221e5acfd92f9c54b6b18f42bb4a94dac6db11f0c34079c12c497a2a46dd5e6313c22e9b4a675615c933cf9a6617afdb1bbeb0200853f92daa13315a94e0e2bf690b4b065406db3ccaa77681d4bfdd625dd5641a295ca935b17834c06c9cc2a8f16da4556310c6ec51467f5f0f947bc8702e7a99cd93a69e8e883b25ffa185699d4ff5f66f1aac7941270ecdecfb1f2218a3c15a5a408e44afaf4a957cf0b5b2dc42d144e9da0a1c1fac7bd18aef70fa4de02646405791bf840904f46011e581675584846bc396824921736d5d7512799538664520b4a8e1007f1ffb2789253b6cc203b0efaaa3e1f9270fcefd3e062f45961b15460b5907ec8a3e32141d629afa02c17e0683ac16ffc8b0b2baaef2d047b060dd8cdbb51fb5f3ab56715a8c9543e00f205b5ed9fafcf26c120d8aa868b8d8af7779b9d99cc7427d3e785494bb44005cd6d30bf6a8a19b83cd837ac6e4706a0390bed8ac1ac59ca59c73c5c53f3d07c8a1ebff0edf6f040e34740612041e36bbd8671e45f62998aa0589da6795ed9353b5ea9bdf519bb0bf1cc764639fdd4fc7c30199a4c3c80a433c7918d08d16add9381392b3baebb5f79a97b452b3c068b61be215af4bc40115e45290b4865a37e1d86d10b43a94de25c3a3c9041dc33311bb307d210de88805be4bf4ba6a8aad05830becb863115d682357c26171c1c4c4836eb1ac64a07807562269952568cbaad99caf3d2c20c815ae8f36d9496fbe7ec3847404ecd8136054587482ffdca9812536166e9b6a4e9990a73e7061499a98799f35c2fae04dfc8637713d0830fc633ea5c90787c4ab6152086c65705b1d8207d10821ee261e10a6cd3765e802ca3addbf5b2d63cc54de61e608a08c1a4ef78ce264c03b29ea2e5512d26a26c64cd2053fbe340f2af832111c39b582549db35c08e4c98a64cc0a53fcaa24cdab29561ccadcd56e6a3e8c17fc577a2e627ac80295bdc764321f7563375a5d442164bd192ba901009143612578cd5925b4d5d1af6b13ae43c3cf0424652932a16cb92981d6ddf66334f756f2ba6b16d30d4b085fc3993068125bf3e5130d743db49309ad5e78cdcb111c4991459363e2058f11eb312d6fc13524bc75bf75b7409ef342e9861bf74d0d4b81bdca6bed173842efa2dadef86f1a894ac01acd79dc244d4a88234216bc22f01bf9c53da1839e4c11aa49ffd0f41203de75706a0660721c9c888a7e1e21b7d7d1ca55c008ad9862a7c6b8757be25678ab50bb739de36d296f53eabb5ebc2e96fd3cdfba3a23fe75c34bbf195afc52a736ab66b1f4f983b0748768ff8c6b25e89a8ecec38e9538afba15f576f79b0a10da00ddc197b8352b1cb302a39d37694153e96a495e7b7bdc3d2538719f2b983c48ebffe06347b8088abb4b4b654af482ebcc89c8c810f1347d2a1a7aa0be6e7734d00a8bf82d81e7841bf276541c1d0af68a9966c035a66baeecc20dc391cd26009b22fa19be19e7687efce668039f5be75f3ec3927b73b0ae7267a828e0d6120acdb285d578c43ec5fb8f924209cc83aca1837b3f3ba1e8d0b839d0a7b73429463e635a63094e4926ad59862bf0bc27b16eab4ab4761ef0e020fd8f6af634172c293fd7c0e4571a87dedd2710e531f008538e2bd4e77d06a20e88adb53f092a1d34ad1cc26b1f61b46815c6a11fa8b3fa3f17cb21501706b7468f8aedb389358e68c634ab915f728c7a7022dac3efe971c1097d4eb1072db7fe17c2dfc621989666bbd46f24c74de27de36c81c924cb4d6524b462b7e56c64939f14d5c916fed6e876ae95743947504707f0e80bfdfb8f302885b95ba849ea19d9b9db873b936d2de5f6abe2996385da96c40d55d42e4c78697c20ce93ea96d392ab292bd3a37f4d897165ff359d3284505e0b5dd72c04c438c858e3c4cc9d8995bffb5465bf68bfaff8b9f3ceab952e31079bb9d37ebb8cd2c73d68995f3457dbc8486115789d70e3638a536960da663bf4dc7842b5d5f6942ceef82747bc62bdd5962b6e7bb123200808f934c88ec6519f69d72f2524e2724f9f61b7310bfe68e5bab32286296baa1e2c946cb38f42c5aeaba58b5a00e328cee143f3073945efeb04313c9b392d34a661bbdb7681a2ba767e0d5d1ed47620f6f86d9a8a99a1963e68d3715b76b31619aee66759f4cd922c80fab2b08da5ab0543cd23f35c46beff8bf31cd7fb6cf2bf3eef86c4fcecbd76f045c88f7cd777437226bed689bd4c35f0a6911d1a4b58ccc3d9d61ea6e21ef7f51daebf6f091551815734b2c84cfff11d79d50cfd0f5031f6d9ca48e890ffe9dc195e5b4a0226702d5f5e7d97583bf59869e0d319dd87eb85565001de303d44cce7bcfdd8dc3476dffe0418d3420f64d5b38a4c82877b6aa5b336ed424bf4ffde63ae1a1d359f5f43aae10581c796f9569e017664873dd558eeaaddde648593d677dbd4f4d5b55e944a854cd48cd130a4dfbcb7843fbbe8b2395d7be5166dffd0362145eec859098edec17e85094f70b588387a538293e36117cf4ef3ae68385d10876b9a8d7f3869c5ed1fa0845780e0092f411854d95796a240b06dcd6898c27bdc8e9804ea4070451d3ec313ae9c3d12dd5ff538ace7683974a1536c29cdff1471df823e00bb83a8453bb145f7f4c10b1c85a8e6b8abc6ba9e84f9d03ce7fd1a74643c25950a8d9e22b561c149db7017accc8930f9d152c7c3e3572d1c494a6d982c4c835aa8ba1941e6d471dc6770a08b3c4a614e9a75149c369d23a01ac1addf8f11bb4fd44d697fd476d70bf054442317dacc2d585312557733b2ce32b22a1cbc03364e7a3ef24ddf35ba2dcdf5ecf07844d8393fb2feaa60b31081aea8e79491ae186ca9e0da801adda3eb042a3eb1d3680fd16102c3a74f44d7a9b948e5ae5c5dc5d133441848da4c5b9323eb8097b1d744acabccd6797c62663202256b6430254122bb9a89aa79f65cb96dcaff1616bbcdab4bfc4cbc9ee17e892da99b30b2d5152ea45502c40d42eaaa92a1706fe7929958aea2eb023a09437277ee74bcaa2a54ebfb79e9aefbcbb7cfc8da19f270d12fe4d3f913631fa11f38392039a729a401736bf7109e4ca0a4630cefdc8bb277a54f1d819038e7c8f368d1841f5ffb4660b3cff1a9c765839c15bd9496b9dc9f61ed45ad18b1676476c1e709b39f6d19003c5bb7b18fedcf6fa7679b92fd359a8b22d4d18ef32b1072fff9b4b1e9c955794e183eb7177da2c2745661333317182982115c16c7c265d2a2ca67d959ce08076f140ce4c828", 0x1000, 0x200}, {&(0x7f00000027c0)="9b9b2a21eff6273fd1ef6a9ac7548c868ca340f551234d093496d7e2e223e870e029d5f4f805908f635c8aa3ec4405de14d6392abdca41a831ee3fb6e115843468f88fbc2450b7bbab2208a229dc0a7512d1c1748f0ba3be60c452811eb5d5fe03ab819eb9991cc933509243b7a78b75bb6f5518175226324fbb754cfd989c6150e8dca56cb2f2b8ca71622060bc0df17861d3c5c7cce92dc0e72adda1a408e1fe0c798a902ec035bf8412d809faf602346b7ae4d0cd1329ad5232ffb67f299e13d18e237a95e71bebb8f2d534bf4ab9f434dcee1275c89cecda6f9a3fee342ba313c42d", 0xe4, 0xc9}], 0x11000, &(0x7f0000002a00)={[{@noquota}, {@nombcache}, {@block_validity}, {@nobh}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_gt}, {@obj_role={'obj_role', 0x3d, '/dev/snapshot\x00'}}, {@euid_gt={'euid>', r9}}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@subj_type={'subj_type', 0x3d, '/dev/snapshot\x00'}}]}) r10 = pidfd_getfd(r7, r3, 0x0) sendmsg$sock(r10, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000002b00)="21bd9e97ee0c6d09f163e9bde54eda1720be460b49338f7882a11a915acd625820076ca1d5b634a5bc7d65117db06eb290f53dde6979f5dc635c12d390474fa7492603bfc801d52d9f37d69e9a4bcf5ccdfa8563398bf97804885f2cca79cc25e607658e47ef6e3261e7726ba6df232a117fc99fc1c6358b7ef8a8cf60e637ef0912b56d26fa3ebc05bd5f8ef93b3494df72046df4407051b70071ccbd1e62a6bfaeabe82c444fb55b59ccaaaef90a33d8911773b64f2b6b834ea81627a9a0eb6c07e768109ae09ee16753953f549412b3d80a0d561e549ad2e14571f28e8cfa84eee620773878b5d646d05f2224c7b584c482bdc5fa25e9ea5141808077220ee531bc2d9f2c3f6f02b969d5dcc66040f362b3efbb3b15a29fc845cbe1cebfba40f5b33f11d9c2f3d40c4507d560ac772e5a31296b165e6594fb33472601e5d7ab20b1622f2035a0ff6bff3bb09bbd61780b9b93ca6bc035f1f1b8f4536f4ad3084f993ffd55542dc996cc16d355ee87953b207de06e22beeed733700442417412ee243551b37f00fce119088b6ed8af50dcd87d391027fea3309a0033011c33a059fd959cb57530d6cad87ac7b420961239927cb63f6dfd078d588329d7971e0566b592089d6b17247623dcd67162951f48f5f9ded837cc7850019384748038257705e6fb0bc0977708e586343660f5f85468c20bb6d2ea78cd555b5056bffd1546ebe418c2d60cf66d7bb485e1c15523c04e2bfccb0eac0ee610f415752b1f0c49a154a1929aa085dd87bc3fb2cf9b4449a52851f40c3e5c5bd59ac683755ced075803377a2faf4fca1f9785994bec72e8c9b662cc33846e0ef43a1664eade1f16a389a03874b199dbaf9e432e866b924f5be2728dcdd7cee42726e436ae0f8f01dcf5331513de3b53e8b02072f5d16a50cc8daf4690e35d0fb5a950db1522d6549ca07f0f3dc6357ace344c035eea2d26bc3620952d79b835f6a3f493d9079e77c8da6c2572cfe47af9ff624d01a89dcf0676593e28ea0fcc4584c30d606ba7d5b61cf41c943d8ad7dffaceb9085fab2ae5fa266b5c7797e9d5a3a596dd20a4a33d95065b6b2e43457703545a89978f2dbaa134442e595a9e84a25d26cc2d5d0b295ec6dd69ef13627c5049aa88def81757f772f52c6d81ca4f794acbac53892a6a1c61caaae2852cbaf7be8d38fa2070c41efd5d641900904aa00fa8a8311d2f1668e2a13c353ed7e4d10076a4dd40d2065ec5b5db137adfa6906c02e8c760468e6cbb3580a2e313ebfd8790addd6ac02b480c917aa7d96e9a0fb2054aa0f11cb3fbade4e6904e5c4b66440d3c8e2d71e8660b3f452fb8ee6e22a496d66739c766ba8b75c3f710844cc9f9e31b6e42bff5a9488ee360a718eafd41a3c21497c104582ad83e25cb28d5d1f29cbcb1487f52f02c1b1b386d25d813fcebeca9b8a8c081af9b9c324170649c57c62def5a361ff3d5745872bb9bc8a1dbeb788ffe44bfc33f9f5b52cf7e7b5a14c0bbec7653040737fea9e24014f600c4c9e2ae55fdfd5202328da375675184b0abc0a5a8f2ed76d233b423b0da870b4d7e8b4e410b54dde0d4695a877c45d081d0feccf16c5b1333f04d4a1c4eccf9472b96b026e126a8f05f5660f1019be5433c9e2c11066ee061c874ddfdb8aeb181fcec9be4c3c462c33c41c972f9061fa9fdf2bc89bad215c8e169559e439661ca2fec5ba5d1fb889f80f1de0a688cb2502b0169b695a9d947594c91db37ab3000a7f3aa6f1fb528be5b6d1fb38fc90b7036742c65634eb39ebbbb9b3581d225ac08be9205e41fd1ff6ae250b23c5a24165bd51ad075dfe017dd1555683814583030cdcb6722118b1847433decb49a2beedd94155e04bb180268896b1f15033f68752c62c22c6ff924cb3b34ba1f0fc4bacd298dd93bf823bd5faa258d4b0bf61b8dcb6548e588f3d13e61f76927dedc65d7151a7bfbad89210e2dc4f90c1ea3f74efe5bd71bcb21f09de061ad989e16a3cf0a8ec77ed9999e1dccd82b417ae6b1f09027577b23d0aa0cabf909b8b06c3fb9f70c0ba9e1c2c02755425abd9a15c8512f0fec9f22b5b70417a72d821497d86e0c2d2eac2fc13e7b936bbdb1f9f8b439f362af4401640ec8fc30a5c63533c1ad855e6b9a68c1b93803468d4d9f7b11bad76648185ffc98854b0af881e71733e996ec04ed4b2b1144999a3f215effbbedc20fe1362f6b56dad425d9b5010e3c4b9f0f8b5ccb591afca7ea56d7b2dcceb1f12bd7635ce5f1418e5594f5e6f5db242674e2141d9c143f04a95a92330cb0a677e23699bca8bf5a92eb96f1e763bc487d269b68d95d672ab11d9331c8b9c7de67145e3abfec287d61fc4275673364b23b74afdc2202209a7f2076a39963df867d608cc5d0dbcb2bc142407cc62b917295381a44f2f6035f2f5bd391c3feebca0738186087c1962982ddbea08e1be6c61d217c47b356a6054f33f6fa7c5bc36f1e330f5554202094db856c59963c35526604691e25632d83a5fae85477b62fad486a212ffd2cfdfa027640946d4879037760201b2e27dd01dbe94d8fe3b14620453bbd0076ebab0223a303cbd3af2bbd5679a48a0f77c4a36cb05d85e501b52ff60e2f408489b5871b5b7a20e2231343dd578f2517fba1acddc3d6671a93fd99b72c5901e61d06f790b6e5b4b7496886c14757157ad485d4affa24aa4a17948914e448adf4f2a4ab689dd12e5cb7965cf4c6191952c154b1e9801145b4cfa89015fda11fd547cd5bcf3a40866853300914569b84e88e3a76504e8d4b73e1b85dd7de1ea238c33465579882b16d29d600e48233c5e9a8cfc3ee7ce9dd43856ae422f43c4769a3f38666fdcc9510202acdfde6b1e8eff33ded6d07c7e73f482cc57abd808ceed06fd87caeb399c0b67027ba531302f1bd54533d5c33daaa369aa91363ff43d0e52cf4a9086c6227bc20534d74e7ecc1b5663f6de154fcc487e81e2005bea6ef1e3fc1d3127692b8a7af3b8d61a997013ec2b8cea9a9199cf4ddeaa92670ee22af81ecb7d545be7e4e7c9485bc1aa42df7629f92cfd744b473362b95a27e8780d0af5afa89b025b886633399a04014060fee4c95be75840b2b688887cb2975ff4303e2067d75f83b8ff4cf05f711bebbea86d20529cd739318faa8eb4af0582ca8e8cc61e74075ae302a35837347f800a0eee583ebca4b6b35073d1543bdf3b2112630bf31f15010a838a559d2d15f49893d73a7dda065f8efa6a82e8aab81c4ba1efe30ad838d12d1bbc1fd95027282f22f9f3350407697ab81785fd3b49ac387e7d630fbfcc1f690fdb8ca8fabb39a76ea7c279f02e8bdea2b3f865cc93c0de24942c5da3beb38f9da4e228923e30a1ca1e4bbbc66ee49e854f8a5af91a6c3ff39c42f0e3d176215f7554bca419e16ffb15cd605652870c56fc2cf42bc908fd9f98543959aabf3df308ca43a2d8efe45741b0a570e96276eb65942c8e0c49ebb970aa810de57a71f6e46df16f14171a0f0e0a6dde4908b3929abfb5ef9f8dcc2e11788ebde84bdfb9fbbef43606a2cb27d97c786918b8d42ba3e19cb203beaa44b5683551a27020191fb032e5c10b507c30fb1d177a520b8384da2faf1a6a617e50caee76308b929f9baffc90e9410fe306f4dbef8f76ecb2e929f1c383a36b7578738b602ada06dac66fb93999d43934ad55219d8404660751fad06d614568dfd5179f4351308e8b829253745b82f4bd0b7498cc17b3464be550ca21611b379f51e936e5527a4ba0f0e4cb8b182641752762062e9e74dfcbe0ab94b0d118443f45a6442678ce49018bc36b72f7d46f618676798915f33dcfe519162e11cad3e07472e81eac73dd7a944bbeb60e203607465b351297a4b850a186c4f0513f1f28da8b6eb9c63df08cdae67160326ef3e6173e7602f92f7f426345e6ecae13bdb0d772077ab4a12f17553de5ae0264bd8f1e115f8d925526b8919c72da45c54b8e9ca8c26c9b23414873d45b4b9ad902de9ea367b5bf721b4d1e405ef213b3df8cb92568d33a7279800b206e71438db249cdb7202016de3a8abc2a9b8864baf69c30a07446ae8e87e05cef27e65209d9401a42e1a592e03ae90e6b3d1b909734d4a0064cd19d44cef26bceb0e149903e219286fd3e5ecd326326ee20053750a4cee82711d24df784ab4899a64fea7886ec01cfa672a257610d09e1900f33d609038de42a284c9580d2b20dbb545eb394f23c203956f34b091cf4ff34c9224e13c24a374f0698b9043da55e2aeee1b13a24e63ae1b140c284eca9df123a69300e9c4a508820b23722880cb6f8bfdc927aff718cf2f0dd3b9c84ab81cbf1f7ee2e2e399f2f4508044c1b26930b86e15fc459890a871b755ec5ebf839c3eac956f724472d614ff18f2c070c12765594eeeba909318e819c1e9e1d71a7d2622fedd277b20308d29046f74a3aef006c83b52727974dc7ee98aa121cca8c9e3240b3783a1b08c92231357fc698fafc266c908a4bd97bf5dc4879f7b82c6d823494a505b6a51de7181855a808c2d017b9d97085522419c495e6a40ee6a61907079543585c039102f7a320d2e39f6d65eb922883047816a031db82e166337c3f1c6f8652e6eb63159bc14eec0a01b08a4cff73c34b245065ed8b6884f4d93a0f0c0725f07fdb3a516a7f89d400b015421a1ed8919512b3d9ae13e00707a122d50a8ab082ef72699b9f74aaa630d06a47ca122de574896eb1b6f9c064fda1fb936cc5f078aed4e7b44d4965eba0c27999f659cd3d1e52cd206a7f70c19f5ce30f246942afb31b10bc4332bb25f35b6755e4d6ed7ce09901809b27c70f98e6bdc94621cf43c3c069ba6311e9f295f115c8291b539216ed72be78944c829e06e7ed1fea3c2d3371425f204eb20a02d88aded5c246fed36dd53dfdf642d054235e588c64c00cb5f2985073247e946bd5ddff59016e9372aee546a5d7de19d14edc790682c70d231ab4e84d86aa754d24e45d88acadb7e56dd8a1646903a202f821b5b1ad9432ab723632a3d51013cd9e8f89e9848e11f23f71bd03b1e096ddf2401485f027dc1f793cec263394c2b9155c7723ce1fa2bf0fabb08eea8dc7ab2005336a1835e03fbbc8754a700dfe0a4bdcda751df0256ed9c6a8f50fde52957fe4b403265869777eeaedd2a19208de4655a2ebc6d44221301e01998ecf4fd17517594dc3050ba68fb84688af73e2262bf234aa95f618dcce47752fb1d7c5fadfb4f091700277e9344eb2b007c0538eb07d4d81fec5d526750fc3eb4eecdf7baabafcfec394cea0d666a7de44fd9d1b4323baec419bf7a403ca76f92d469b6ee86410401c89a8ae7b681777db5794b2dc4b02e5970d12e6af008130c77e52a1aab728f23da2545cf354f0c9ca010c64e31fdb9f2222e656c536dc2957e406c9e695871f3cdcea15933269603484d4263b583ba6be732c4436197eb7a9150af6254468d6ba11068e22254781cdc687d95baa5222eddb71149011b600b2f4f2d7445ad8d1ab0e6ff0a93b21288ee3df02aac20ec2dbc7ed8c3b5888f1c2a8a9ba011b502d9c49c3b48acbbd864434f0104bcce17b7bb8798515316f304904618411bf5efaab1e94fdc48294ce95ad78986469bb5a6ebd20daa654b93220d95fb071bfa1a6d4ae88f0372152f6a674d03ae3009fd3dc408557a25701cfa5448683c90c79ecbb855fc80dce2d88d31fdc8c74b08d2ba3ae90861129e0bbc46de5ab9ab95aed11c4409428fe30cfe2c1812b2c799ceb492c75c2222152f71c9a652fc33b9c4", 0x1000}, {&(0x7f0000003b00)="8e8ef25ba0097fc4fdc97e5ee988dc05f890ad9d8414e5e661302b45ece7dbba646f91e56f5622e522fea82dd058471f67466d389a0856fd9700b016bffc71086e34ad2c58b20c6c28156de445d5fbd00af62563ee30925b1c152bf47fefaa7d756b9177ecc968551bf06784f1e4d4f08d3603b5a98040bd020157f3709a15bf8355d8a7bef3e471ebd50ec347cfac08d6eb46d87a49ce832f88d187cd1a2d8349fc584375ac439b7a60614ab688b16cfb90e48bad1c5e64655423c4e52d8e7f7051ff8efa143876ab2760db71fd2d4622e1f82edef60a90aac4175520d3e2b87c4d4d3d9e87c17ec9628d84b5", 0xed}, {&(0x7f0000003c00)="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", 0x1000}, {&(0x7f0000004c00)="c8bcf37c71001f9b8557419afa38798ab1c0c52f4f0821264cdbe2e634056f12ea939dbbeb2b3713183b1f81cc09f2eebb7c46c1de24d914bc679cdb35f19ed38d202b890001e631508ae971f3f60bf21095c2d83a61ba8c89c0b64212c061ecb4922bf12f91a6431ac9d680200876939dfc264ba37542e6e995038a56bb3715a4f0d01a33019646efb3c66b482f15c7b6a363088363d11030caa6ebeb272e91d3496fd17ed2855c362c576d9715acfadf2acb51cb07ca44d60d4c205d6458f7", 0xc0}, {&(0x7f0000004cc0)="7c60fc116d23ae9cf57fa17abf3ba367f47550", 0x13}, {&(0x7f0000004d00)="7f4ab4f87d95592643307ab270af07d104ea1dbab37564a5f2d28e6ff919c593acbdefbcd1d11c5f575d34c7d34cb96dc7fc86a8dc26fa7734e2d1a2048de51f95cdbfb2952304bb418468e103611be31e1da5b0b3cf8739dc2fd7d1", 0x5c}, {&(0x7f0000004d80)="0358baadf10bcd96efacca9a7c7aba217e0f2f2bbbf403a1f6c9659417f22ee6f2a1550396ffcc37329f4860f74cff9e79821c2c2b0a749f812e95eb57b0d27c6b53bdfae55bd2f625658ca0271813931a869b36f44f984959a479a7e47f00b4c9acdb40dd1e070969387ff1c4cc600090e76ee77348f881ce2beb40aa3f085644da947d8ec75dc79097eb123ba95a6ac6f5d9a64156c69adff82cc15ea7366273d9845bbfaef5862304dde7008f", 0xae}], 0x7}, 0x40000) close(r2) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004f00)='/proc/cgroups\x00', 0x0, 0x0) setsockopt$sock_int(r11, 0x1, 0x2b, &(0x7f0000004f40)=0xe84b, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000004f80)={{0x1, 0x1, 0x18, r3, {0x20}}, './file0\x00'}) fallocate(r5, 0x33, 0x0, 0x9) 16:38:49 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x44) r1 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1, 0xee00}}, './file0\x00'}) r5 = geteuid() fstat(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000100)={{0x3, r6, r8, 0x0, r4, 0x10, 0x7}, 0x401, 0xffffffffffffffe0, 0x8, 0x20c, 0xffffffffffffffff, 0x0, 0x3}) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000780)={0x0, 0x0}) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000800)={{0x3, r3, r9, r5, r7, 0x108, 0x7}, 0x4e85fbe8, 0x4, 0x4f, 0x7, r10, r11, 0xffff}) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r12 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0, {r5, r12}}, './file0/file0\x00'}) r13 = syz_open_dev$mouse(&(0x7f0000000940), 0x3ff, 0x4a6000) sendmsg$TIPC_CMD_GET_LINKS(r13, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1a18}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x800) r14 = shmget(0x3, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r14, 0x0) shmat(r14, &(0x7f0000ffc000/0x2000)=nil, 0x5000) listen(r13, 0x6) 16:38:49 executing program 1: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffff8f94, 0x1}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)=@ng={0x4, 0x6, "66eb"}, 0x4, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual', 0x4, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000500)={0x1, 0x8, '\x00', 0x0, &(0x7f00000004c0)=[0x0]}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000540)={{r0}, "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"}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000001540)) epoll_pwait(r0, &(0x7f0000001580)=[{}, {}, {}, {}, {}], 0x5, 0x8, &(0x7f00000015c0)={[0x3]}, 0x8) epoll_pwait(r0, &(0x7f0000001600)=[{}, {}, {}], 0x3, 0xc22, &(0x7f0000001640)={[0x81]}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000001680)) readahead(r0, 0x100000000, 0x3ff) r2 = signalfd4(r1, &(0x7f00000016c0)={[0x9]}, 0x8, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x2000001, 0x100010, r2, 0x0) syz_io_uring_setup(0x7bbb, &(0x7f0000001700)={0x0, 0xf484, 0x0, 0x2, 0x38d, 0x0, r0}, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001780), &(0x7f00000017c0)=0x0) r5 = accept4$inet(r0, 0x0, &(0x7f0000001800), 0x80000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001840)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3, 0x0, {0x3, r6}}, 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000018c0)={'team0\x00', &(0x7f0000001880)=@ethtool_rxfh_indir={0x38, 0x6, [0xb23, 0x2, 0x3, 0x5, 0x8, 0x65]}}) rt_sigsuspend(&(0x7f0000001900)={[0x2]}, 0x8) close(r5) 16:38:49 executing program 6: ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f0000000040)={@lba=0x2, 0x2, 0x19, &(0x7f0000000000)=""/25}) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x7, 0x10001) sendto$unix(r1, &(0x7f0000000340)="90d37d6e2a6c42b9b93b378964a512ed8bc512586e3cae678fbd1c404d407598287cb5d0c79237e06c9b735276540ed0cf6b01c572a4212ac1a430c33f1da2522651b2589eb2a2ad42c01a08eeaa50b2e95f8b965d67f6793068bbfb887e6142b63acdce93019022e003291e7dd28a2a4494eec258fa76068fc71043b413ee633199b5dfbd714f249ba43e6150fc540b7a6cb2b53037c98aa72129f76422c27b1ded705e2f49d7cd43f248d965b27ad4d5a8bed82b38a0b97a6106a6", 0xbc, 0x48000, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x210280, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) sendfile(r0, r0, &(0x7f0000000580)=0x5, 0x9) timer_gettime(0x0, &(0x7f00000005c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001840)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000001940)=0xe8) r5 = syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x65d, 0x3, &(0x7f00000017c0)=[{&(0x7f0000000680)="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", 0x1000, 0xfffffffffffffff9}, {&(0x7f0000001680)="8fe7", 0x2, 0x4}, {&(0x7f00000016c0)="ca20dece6bca8d09bfb37984237af5bc2d7b7b5aa10ca94d5a01b33b06c27d0314284b7eb4a794014d74ad8aed745350feea409ab69af86a0b95a88cc234a72dc98b4b2da925e6f30b91be9ba8d8621d57ff47313dc8fc84c5a94ff0b0235408c654ecaee5154c9bec35ddcffdc002d25f7b71e73d8dd8a591c2647e9d5617c7bf5210b7e6e45b82693474300810fb88ad4d87bf7ec3f98ddbfafb3a79d53718512d2603509a70ba5b49d47a4e51884f9766b2b75757d3cfc7f9dbb7231464e2853758f3b52a22", 0xc7, 0x100000001}], 0x280a2, &(0x7f0000001980)={[{@uni_xlate}, {@fat=@uid={'uid', 0x3d, r4}}], [{@hash}, {@uid_lt={'uid<', 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@smackfshat={'smackfshat', 0x3d, '/dev/autofs\x00'}}, {@dont_appraise}, {@seclabel}]}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001a40)=0x0) fcntl$setown(r2, 0x8, r6) ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x6) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001a80), 0x881, 0x0) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f0000001b00)={{r3}, 0x6, &(0x7f0000001ac0)=[0x1c70, 0x10000, 0x6, 0x400, 0x2, 0x80000000], 0x2, 0x7, [0x6, 0x1, 0x9, 0x5]}) statx(r5, &(0x7f0000001b80)='./file0\x00', 0x400, 0x1, &(0x7f0000001bc0)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) 16:38:49 executing program 7: rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x800, 0xa29, 0x101}, 0x1}, 0x20, 0x1, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x4, 0xb31}, 0x6}, 0x20, 0x1, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1, 0x2, 0x2, 0x2}}, 0x20, 0x0, 0x0) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0x226, 0x3ff}, 0x1}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5, 0x9, 0xffffffff, 0x8}, 0x7}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x9, 0x0) rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x4, 0xb2, 0x1, 0x2}, 0x5}, 0x20, 0x1, 0x0) rseq(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x2, 0x6, 0x3ff, 0x2}, 0x4}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x2, 0xa27, 0x7, 0x6}}, 0x20, 0x1, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x6, 0x9, 0x81, 0x4}, 0x3}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x7, 0x7fffffff, 0x0, 0x3}, 0x3}, 0x20, 0x1, 0x0) rseq(&(0x7f0000000580)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x5, 0x2, 0x4}, 0x6}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) rseq(&(0x7f0000000680)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0) rseq(&(0x7f0000000700)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) rseq(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x50d, 0x0) rseq(&(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x5, 0x10000, 0x9, 0xfffffffffffffffe}, 0x2}, 0x20, 0x1, 0x0) [ 92.360953] Bluetooth: hci0: command 0x0409 tx timeout [ 92.424638] Bluetooth: hci1: command 0x0409 tx timeout [ 92.488771] Bluetooth: hci4: command 0x0409 tx timeout [ 92.552640] Bluetooth: hci2: command 0x0409 tx timeout [ 92.553321] Bluetooth: hci3: command 0x0409 tx timeout [ 92.616534] Bluetooth: hci7: command 0x0409 tx timeout [ 92.617187] Bluetooth: hci5: command 0x0409 tx timeout [ 92.617812] Bluetooth: hci6: command 0x0409 tx timeout [ 94.408539] Bluetooth: hci0: command 0x041b tx timeout [ 94.472557] Bluetooth: hci1: command 0x041b tx timeout [ 94.536563] Bluetooth: hci4: command 0x041b tx timeout [ 94.600533] Bluetooth: hci3: command 0x041b tx timeout [ 94.601221] Bluetooth: hci2: command 0x041b tx timeout [ 94.664566] Bluetooth: hci6: command 0x041b tx timeout [ 94.665258] Bluetooth: hci5: command 0x041b tx timeout [ 94.665927] Bluetooth: hci7: command 0x041b tx timeout [ 96.456525] Bluetooth: hci0: command 0x040f tx timeout [ 96.520572] Bluetooth: hci1: command 0x040f tx timeout [ 96.584582] Bluetooth: hci4: command 0x040f tx timeout [ 96.648537] Bluetooth: hci2: command 0x040f tx timeout [ 96.649244] Bluetooth: hci3: command 0x040f tx timeout [ 96.712650] Bluetooth: hci7: command 0x040f tx timeout [ 96.713353] Bluetooth: hci5: command 0x040f tx timeout [ 96.714423] Bluetooth: hci6: command 0x040f tx timeout [ 98.504526] Bluetooth: hci0: command 0x0419 tx timeout [ 98.568753] Bluetooth: hci1: command 0x0419 tx timeout [ 98.632511] Bluetooth: hci4: command 0x0419 tx timeout [ 98.696514] Bluetooth: hci3: command 0x0419 tx timeout [ 98.697169] Bluetooth: hci2: command 0x0419 tx timeout [ 98.760551] Bluetooth: hci6: command 0x0419 tx timeout [ 98.761213] Bluetooth: hci5: command 0x0419 tx timeout [ 98.762870] Bluetooth: hci7: command 0x0419 tx timeout [ 105.915510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.916427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.917727] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.000415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.001535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.002858] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.046058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.047070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.048552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.132638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.133603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.134659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.159607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.160527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.161464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.214575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.215498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.216599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.224062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.225100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.226251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.246953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.247857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.249131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.260051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.260989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.262298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 16:39:06 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, r1, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, r1, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf9, 0xff, 0x20, 0xff, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x80, 0xe41}, 0x20, 0xffffffff, 0x2, 0x1, 0x9, 0x62c6, 0xea, 0x0, 0x9, 0x0, 0x7}, r1, 0x0, r0, 0x3) r2 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000280), &(0x7f00000002c0)={0x0, 0xfb, 0x38, 0x1, 0x9, "e6929a6631894e053d68f751d69cf711", "a7314625f5289988663a41c0310b5e9ca5ea75d208c20f371bb525ec258fbf09f7fc62"}, 0x38, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 106.303887] audit: type=1400 audit(1785083946.602:8): avc: denied { open } for pid=3879 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 106.306352] audit: type=1400 audit(1785083946.602:9): avc: denied { kernel } for pid=3879 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 106.326894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.327824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.328999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.350294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.350306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.350350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.350903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.351321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.355035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:39:06 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, r1, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, r1, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf9, 0xff, 0x20, 0xff, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x80, 0xe41}, 0x20, 0xffffffff, 0x2, 0x1, 0x9, 0x62c6, 0xea, 0x0, 0x9, 0x0, 0x7}, r1, 0x0, r0, 0x3) r2 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000280), &(0x7f00000002c0)={0x0, 0xfb, 0x38, 0x1, 0x9, "e6929a6631894e053d68f751d69cf711", "a7314625f5289988663a41c0310b5e9ca5ea75d208c20f371bb525ec258fbf09f7fc62"}, 0x38, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 106.413388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.414333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.415644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:39:06 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000040)={0xa, 0x4e22, 0x7, @mcast1, 0xd0}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="8d55b5891ab24a6bc301aabdec7ed92a174f17f153aeea70c575009cb42e43f9eed03fc2c1831ccf29d99ea84f4a6636d23eafabcfb821502222d71a2c68d88d45553e12eadd16444bb8d24116186621bb973d8fa68ab2ffd1", 0x59}, {&(0x7f0000000180)="b76f82ea38d28c62fb4ecf5be88914b0de68e14e98c21428dcf3c9fad46d44539e0f51ee3e2d3bc474d3f85cede298699a7836340de2f1191d77ba6c28f6e1bc919bed64f2e0d55009edb942fc15c50b51591bbdbc76dc1103fde9c761da8704afa44b9ec0ca9e9c86675b5139b75f2f1227fa98943afa788cd65b87e9d504c2d37ba38395206d2e6ff88d6a8f00d38b1fa650a2767c0cde4faf0a0b31f10561c3923f8f173957a876deaa058dea03cfecd098295cfd19b99043e5f1020a71907727f3e22e", 0xc5}], 0x2, &(0x7f0000000280)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x81}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x1d, 0x5, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x81, 0x3ff, [0x7]}}, @jumbo={0xc2, 0x4, 0xe8b}, @hao={0xc9, 0x10, @loopback}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x81}}, @dontfrag={{0x14, 0x29, 0x3e, 0xb}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x1, 0x7f, 0x0, [@loopback]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @rthdr={{0x78, 0x29, 0x39, {0x16, 0xc, 0x1, 0x2, 0x0, [@local, @local, @private2, @private0, @mcast1, @private2]}}}], 0x160}, 0x80) mmap(&(0x7f0000176000/0x4000)=nil, 0x4000, 0x0, 0x1f011, r0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000177000/0x3000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x14) 16:39:06 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0xffff, 0x0, @empty}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, &(0x7f0000000180)="b7fe8e4e8d076b7524cb9896e9a6de6b8aced572c346a68a5cfa2f1ff00f4e2e7a41530f35bafffeb4ed470e5e946ea909648ffff27d7031b1c34603", 0x3c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r7 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r7, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcc}, 0x0, 0x0, 0x7}, 0x0, 0xa, r6, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x14c4, 0x0, 0x0, 0x0, 0x0) 16:39:06 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, "77004a6efdff0000000008002600", 0x9}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/85) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/10, 0xa, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r3 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r3, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3f, 0x6, 0x7f, 0x25, 0x0, 0x2, 0x0, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x3}, 0x0, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x2, 0x0, 0x7f, 0x0, 0x2}, 0xffffffffffffffff, 0xa, r2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000b, 0x10, r1, 0x1382a000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000000c0)={0x1, 0x7, 0x5, 0x0, 0x1c5, 0x3af1afcf}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) [ 106.481043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.482183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.484352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:39:06 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a500070000000000006dc000b26e9690f7fad59a03000000cd000000000000000000000400000000000000a580040000000000b664f17b02000000000000007eacf3177c4830dab89375770000ffff00000000000001000080000000080900000000328a00000004000048000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TIOCNOTTY(r2, 0x5422) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ftruncate(r2, 0x2) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8044}, {0xffffffffffffffff, 0x8000}], 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x11d9, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) [ 106.527505] hrtimer: interrupt took 16791 ns [ 106.552757] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 106.653862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.654825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.656037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.676445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.677445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.681157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.709816] loop6: detected capacity change from 0 to 135266304 [ 106.722857] loop6: detected capacity change from 0 to 135266304 [ 106.886956] loop3: detected capacity change from 0 to 135266304 [ 106.906737] loop3: detected capacity change from 0 to 135266304 16:39:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x35e7eaa4871bc4b0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000240)='./file0\x00', 0x2f) getpeername(r0, &(0x7f0000000540)=@isdn, &(0x7f0000000380)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x140) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x110) openat(r0, &(0x7f0000000280)='./file1\x00', 0x80800, 0x9) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1/file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') pread64(r3, 0x0, 0x13e, 0x0) openat(r3, &(0x7f00000003c0)='./file0\x00', 0x462000, 0x2a) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYRES16], 0xfdef) r5 = syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='\x00', 0x3, 0x8, &(0x7f0000000c80)=[{&(0x7f0000000940)="812f8732f2aa24a0b0bce7ac813b6da32c2b6fab497b6821db8a45481edf210c5268407d6022132af94efe8123f84b0bf7c4be7fc49fcab8881bdf3475808006ae6d3d2ad925f278352c", 0x4a, 0x5}, {&(0x7f00000009c0)="4de286b642e2016df65232401648638a071ad3e5e3e649e05eaece0161bded3a2beffbe11f7fb18c17529a94176cf740d4343f361498b45b4506db1342c75da28c34e41458dc5edbe7e4a155dee6b43352ea0b2e4cd859cc6917e3672441a81c28ef6fee36d10cafad298093127cc00a92a3b50a1f6d6509da7243daf3a0767dd8e793eb01be0fc35bd24817a01f9872ca8eedf106db8dba967ef8211cd62fea4e59f66f826ba14c65680a50ddac76a55a688fcd26d410c4285523bfcb4506ff28f6d5c4dd350ca0073482498c872f172be3eb8eda6ef5ef94f47ccd04cf9510d4da00666c66aee2a9f3c4", 0xeb, 0x7015}, {&(0x7f0000000ac0)="c1", 0x1, 0x1}, {&(0x7f0000000b00)="f6783221733966423809c105de", 0xd, 0xff}, {&(0x7f0000000b40)="6df328bfc5c90f3fdbf9d99e076b200809fc7ae87d1852e5314e79e949df269f97948a87ca6e944b8c2d6e85180f5ea9e08ae1003ecaf5b615c7279bb6e17a4a19269360331f", 0x46, 0xa12}, {&(0x7f0000000bc0), 0x0, 0x8}, {&(0x7f0000000c00)="190532d15729d93e2d243a12f1847e277e4d202b547b7d4ad3d2d97d5fb309194608f0014b9d890b94cdbdb58ed7b2325e6c0e59da48fdd179", 0x39, 0x20}, {&(0x7f0000000c40)="16e7ccf2b4883e65619eee08d63271c93cf3d9ba20a1bea5e4c8f61ffeb88a81c646ae83379bf99e43b52c503e543b", 0x2f, 0x100}], 0x1008, &(0x7f0000000d40)={[{@uni_xlate}], [{@appraise_type}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x3f}}, {@appraise}, {@obj_role}]}) openat(r5, &(0x7f0000000dc0)='./file0\x00', 0x2240, 0x51) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x640c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 16:39:20 executing program 0: r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x5, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="555f4823a59d409d412199f205418e2bab8c4517d748864b34caf07090577e08521d2d765a13d1154429ef1d3c20b225737202e0aee8bbe11f5c8966ea4f316fd2b57b32af361906fd2f433a5ff422d5961068cad06597818c53ed2e38742aacf01fae230cc4638da1ecd0a82bb2619dea90b6f0b253286103902d51670bc808bc3a9d", 0x83}], 0x2e1ac38983e17f36, &(0x7f00000015c0)={[{@fat=@quiet}, {@nodots}, {@dots}, {@nodots}], [{@context={'context', 0x3d, 'system_u'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@subj_user={'subj_user', 0x3d, 'trusted.overlay.opaque\x00'}}, {@euid_lt={'euid<', 0xee00}}, {@obj_type={'obj_type', 0x3d, ','}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&$)@'}}, {@context={'context', 0x3d, 'staff_u'}}, {@audit}]}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) fsmount(r2, 0x0, 0x8) preadv(r2, &(0x7f0000001580)=[{&(0x7f0000000500)=""/4102, 0x1006}], 0x10000000000001c7, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x2) r3 = signalfd(r1, &(0x7f0000000100)={[0xd9]}, 0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000140)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x4000003}) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xfffffed2, 0x99, {0xffffff3f, 0xe}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000008) epoll_create1(0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) 16:39:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1e013, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r0, 0x0) read(r0, &(0x7f0000000040)=""/238, 0xfffffdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105000, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x4, 0x8, 0x4, 0x0, 0xfff, 0x600, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffe0, 0x0, @perf_config_ext={0x9, 0x1}, 0x2421, 0x100, 0xb1, 0x0, 0xffff, 0xffffffff, 0x81, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x1, r0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0) io_uring_enter(r3, 0x4425, 0x6393, 0x7, &(0x7f0000000400)={[0x2]}, 0x8) ioctl$CDROM_SEND_PACKET(r1, 0x5393, &(0x7f0000000300)={"f1b2a1d969c9aa80011abae5", &(0x7f0000000200)="1edd77f3f5f084604b842800ba9d84e6625156383ec2ad14d96b97271b92384d04baa23a00311e5d867916de5ed15f35c16a0466e7f93971271409a3057c11a7e666a489508439079cd02ffdb229b984920a1159db9cf1a4dc7c1fe108f527601c183179360e6719a20a8bd35824cdf1532f7e7d8d45b4e87a09becf64c99b691e8a53d49cf20b54d349b594c0de3f943ff80e468fec2e1798b31809cd3ddb1d78ea1353e1b82d5166b08aff7d36455a37271308ba14cd0c38e316ea2d8167f906be6ed53346bb2ea1676b9764e439270d", 0xd1, 0x3ff, &(0x7f0000000140)={0x8, 0x0, 0x4d, 0x8, 0x0, 0x0, 0x0, "2cd21a6b", 0x7, "dd8649ac", 0x3, 0x84, 0x0, "422b83", "952f0f1e26fc623ff3f1637b69c8957f3395f627cbb74512e629454cd9051be2255181aab238d53ab5b70ec6244f"}, 0x2, 0x7, 0x80, &(0x7f0000000180)}) mmap(&(0x7f0000867000/0x4000)=nil, 0x4000, 0x3, 0x13, r2, 0x208fe000) read(r1, &(0x7f0000000000), 0x20002000) 16:39:20 executing program 6: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x2000c800) keyctl$update(0x2, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000090) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x70}, 0x1, 0x0, 0x0, 0x6050}, 0x4000000) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) 16:39:20 executing program 5: keyctl$update(0x2, 0x0, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x6, 0xc, 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "40d0a6685cfe82e90f4116a61ae984e2dad41e8a839f08f0328988ee417bd62ed2893b88e15c5bf59963c9b2bfbba868700a00"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r2, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x1) add_key$keyring(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = fcntl$dupfd(r0, 0x0, r0) clone3(&(0x7f00000002c0)={0x135186b00, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, &(0x7f00000001c0)={0x0, 0x7, 0x7f, {0x7f, 0x2, "10768d3d1513c6a58b47c7645405c57c9712f791b63190bf1be1ee324578bd7d93cb65a756bc1866c439366c51bfa64cf4019048568836c5feabaf5d826db361e70f6d5583d38389a96a57fbfacb01335d62c2b1c33afd11e56d0448649b01adc96c73f24b9ac62da0f7616bc66ccb13dd1820a94bbe209117b5dd02e3"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="00051f000000f4b816ad1d5f0e6d9141388423374ef9b913e5d642652b9bfb41d59b29899e"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}}) 16:39:20 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, "77004a6efdff0000000008002600", 0x9}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/85) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/10, 0xa, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r3 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r3, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3f, 0x6, 0x7f, 0x25, 0x0, 0x2, 0x0, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x3}, 0x0, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x2, 0x0, 0x7f, 0x0, 0x2}, 0xffffffffffffffff, 0xa, r2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000b, 0x10, r1, 0x1382a000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000000c0)={0x1, 0x7, 0x5, 0x0, 0x1c5, 0x3af1afcf}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) 16:39:20 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) syz_genetlink_get_family_id$fou(&(0x7f0000001800), 0xffffffffffffffff) 16:39:20 executing program 3: stat(&(0x7f00000013c0)='./cgroup.net/cgroup.procs\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r0) setreuid(0xffffffffffffffff, 0x0) stat(&(0x7f00000013c0)='./cgroup.net/cgroup.procs\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="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"], 0x158}}, 0x20004000) 16:39:20 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/sync_on_suspend', 0xc0002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r3 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r3, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="0018080000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000040)=0x2) sendfile(r0, r1, 0x0, 0x2) [ 120.172964] loop1: detected capacity change from 0 to 41948160 [ 120.212335] audit: type=1400 audit(1785083960.510:10): avc: denied { write } for pid=3985 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 16:39:20 executing program 3: syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f00000004c0), 0x0, 0x400}, {&(0x7f0000010400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x2203810, &(0x7f0000000280)=ANY=[@ANYBLOB="646174613d77726974656261632b2c61626f72742cc28987b8e4912d39fbe45bf948c6f6f5416ba6f64689615770cba697cf99b3e7aad38ce459d481204a759cabcf33be3f2b84c755001062838c513f26fbf497246a92a7e10ad505e2dd8db79eba8759287e2300469109000000e6ef0d705c16dcdebd304e59ee1ad06e3d6745e98f151f6cbc03583ae4854181a81dc57421f00e16ed033c0d4cd0cbedf6408b7cd2a8b0fb83de3d7d860263018354cea0f013d84537f7e043890173a9aa489823a24b569ec200d0c65fcac94f2bf1da2b4e7dbdf89f905b583883d2"]) syz_io_uring_setup(0x3, &(0x7f0000001780), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000d1a000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000780)=0x0) r2 = syz_mount_image$nfs(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x9, 0x2, &(0x7f0000000b80)=[{&(0x7f0000000980)="85788032a7b698d3ca7c96f00d659feefb35e4adf2db0acea2ce5ff489be1a616e39faf7eb7f6107add8db59ed8bb680224446dc10f744c45ec695864ab1eb60f3279809fc957198b50ad8296fa8c72cac5c845469e4db30a6eee1c7c5e71e2fca297c0bfdf9cec19d8ceba8ffb05d9eb795eb96a714219140173be6724e299e1687f56ef472a8f7812440cb6bd60113b7d1735c85dcf1b694bdec5218d0a2bc039b1a0197e9ecd5dfa37126328de13c1b28857e23ddb08656e9de854fa9423cf6442f651d338957b320b9320a89cc5a323cb1f728a5f4c3ad433a7808b9", 0xde, 0xffff}, {&(0x7f0000000380)="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", 0x21a, 0x9}], 0x4, &(0x7f0000000bc0)={[{'ext4\x00'}, {'\'-@]'}, {'/proc/timer_list\x00'}, {'\a\'a\xb5@'}], [{@smackfsdef={'smackfsdef', 0x3d, '/proc/timer_list\x00'}}, {@dont_appraise}]}) mkdirat(r2, &(0x7f0000000c40)='./file0\x00', 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r4, 0x80, &(0x7f0000000700)=@nl=@kern={0x10, 0x0, 0x0, 0x40}, 0x0, 0x0, 0x1}, 0x200000) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3, {0x634a482d}}, './file0\x00'}) chdir(&(0x7f00000005c0)='./file0\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0xe90, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000200002e33666902000000"]) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000140)=""/196, 0xc4, 0x80000000) ftruncate(r6, 0x8) io_uring_setup(0x56d6, &(0x7f0000000c80)={0x0, 0xc621, 0x20, 0x2, 0x29d}) 16:39:20 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) flistxattr(r3, &(0x7f00000002c0)=""/192, 0xc0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000010000000500000000000000", @ANYRES32=r0, @ANYBLOB="000000000200"/28, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r0, @ANYBLOB="00000000008000"/28, @ANYRES32=r2, @ANYBLOB="00000000af00"/28, @ANYRES32=r0, @ANYBLOB="000000002cffffffff00"/19]) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000040)=0x7) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000200)) 16:39:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=""/192, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1011c2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x3}, 0x4) accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14, 0x800) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x400000000000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x4}, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c) [ 120.470732] loop3: detected capacity change from 0 to 262144 [ 120.495833] loop3: detected capacity change from 0 to 130560 [ 120.500421] nfs: Unknown parameter 'ext4' 16:39:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="18000380"], 0x38}}, 0x0) [ 120.696966] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 16:39:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000c40)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0xc81}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x22480, 0x20) write$P9_RREADLINK(r0, &(0x7f0000000480)=ANY=[], 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88042, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1e013, r2, 0x0) r3 = accept$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c) finit_module(r2, &(0x7f0000000240)='\x00', 0x2) sendfile(0xffffffffffffffff, r3, 0x0, 0x1) read(r2, &(0x7f0000000040)=""/238, 0x2000012e) sendfile(r0, r1, 0x0, 0x100000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r4, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000280)={@mcast2, 0x2d}) [ 120.733270] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 16:39:21 executing program 6: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x2000c800) keyctl$update(0x2, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000090) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x70}, 0x1, 0x0, 0x0, 0x6050}, 0x4000000) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) [ 120.748040] loop3: detected capacity change from 0 to 262144 [ 120.779073] loop5: detected capacity change from 0 to 6144 [ 120.794439] loop3: detected capacity change from 0 to 130560 [ 120.800067] nfs: Unknown parameter 'ext4' [ 120.813764] attempt to access beyond end of device [ 120.813764] loop5: rw=2049, want=21, limit=12 [ 120.820673] attempt to access beyond end of device [ 120.820673] loop5: rw=2049, want=21, limit=12 [ 120.823134] Buffer I/O error on dev loop5, logical block 20, lost async page write 16:39:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x2b, 0x400, 0x70bd28, 0x25dfdbfb, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40480c5) [ 120.940391] attempt to access beyond end of device [ 120.940391] loop5: rw=1, want=21, limit=12 [ 120.943685] Buffer I/O error on dev loop5, logical block 20, lost async page write 16:39:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x35e7eaa4871bc4b0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000240)='./file0\x00', 0x2f) getpeername(r0, &(0x7f0000000540)=@isdn, &(0x7f0000000380)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x140) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x110) openat(r0, &(0x7f0000000280)='./file1\x00', 0x80800, 0x9) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1/file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') pread64(r3, 0x0, 0x13e, 0x0) openat(r3, &(0x7f00000003c0)='./file0\x00', 0x462000, 0x2a) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYRES16], 0xfdef) r5 = syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='\x00', 0x3, 0x8, &(0x7f0000000c80)=[{&(0x7f0000000940)="812f8732f2aa24a0b0bce7ac813b6da32c2b6fab497b6821db8a45481edf210c5268407d6022132af94efe8123f84b0bf7c4be7fc49fcab8881bdf3475808006ae6d3d2ad925f278352c", 0x4a, 0x5}, {&(0x7f00000009c0)="4de286b642e2016df65232401648638a071ad3e5e3e649e05eaece0161bded3a2beffbe11f7fb18c17529a94176cf740d4343f361498b45b4506db1342c75da28c34e41458dc5edbe7e4a155dee6b43352ea0b2e4cd859cc6917e3672441a81c28ef6fee36d10cafad298093127cc00a92a3b50a1f6d6509da7243daf3a0767dd8e793eb01be0fc35bd24817a01f9872ca8eedf106db8dba967ef8211cd62fea4e59f66f826ba14c65680a50ddac76a55a688fcd26d410c4285523bfcb4506ff28f6d5c4dd350ca0073482498c872f172be3eb8eda6ef5ef94f47ccd04cf9510d4da00666c66aee2a9f3c4", 0xeb, 0x7015}, {&(0x7f0000000ac0)="c1", 0x1, 0x1}, {&(0x7f0000000b00)="f6783221733966423809c105de", 0xd, 0xff}, {&(0x7f0000000b40)="6df328bfc5c90f3fdbf9d99e076b200809fc7ae87d1852e5314e79e949df269f97948a87ca6e944b8c2d6e85180f5ea9e08ae1003ecaf5b615c7279bb6e17a4a19269360331f", 0x46, 0xa12}, {&(0x7f0000000bc0), 0x0, 0x8}, {&(0x7f0000000c00)="190532d15729d93e2d243a12f1847e277e4d202b547b7d4ad3d2d97d5fb309194608f0014b9d890b94cdbdb58ed7b2325e6c0e59da48fdd179", 0x39, 0x20}, {&(0x7f0000000c40)="16e7ccf2b4883e65619eee08d63271c93cf3d9ba20a1bea5e4c8f61ffeb88a81c646ae83379bf99e43b52c503e543b", 0x2f, 0x100}], 0x1008, &(0x7f0000000d40)={[{@uni_xlate}], [{@appraise_type}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x3f}}, {@appraise}, {@obj_role}]}) openat(r5, &(0x7f0000000dc0)='./file0\x00', 0x2240, 0x51) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x640c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 16:39:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001600010d00000000"], 0x14}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000a80)="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") r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, &(0x7f0000000140)) sendmsg$nl_generic(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x17, 0x4, 0x70bd2b, 0x25dfdbfd, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x4001) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0), 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) [ 121.031340] loop1: detected capacity change from 0 to 41948160 [ 121.187955] syz-executor.2 (4017) used greatest stack depth: 23760 bytes left 16:39:36 executing program 5: sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="000825bd70080003008dde611dd84a0e5640a8fe5854f7281dd3e909dd59008ba1d37d7d17fb0c2a328163d765730e2c59a905e96e88158dfde96e2722a57d682a22e0a2785441c49484d0ac1bd329767a9cd96107cfb9786401000080000000008ad20622f7b54ab0830105cc3689badbaeeff86451b890583c0d17eab0c8f7dc0dc6b2ac6b257466c972d3e96057db40bdfeef891cd461b8b65622951647c956659b0efb851ab554b6f4b87bf5abc4b9247117d916bd6aa386f91142cd90ba858582000000", @ANYRES32=0x0, @ANYBLOB="3400228005000400000000000800030005000000080002000300000008000200020000000800030000000000080002000100000054002280080003000500000005000100200000000800030006000000050001000500000008000200000000000500040001000000080003000800000005000100c3000000050004000000000005000400000000000c0006000300000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4044000}, 0x14000080) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xf36, @private2, 0x2f}, 0x1c) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) syz_io_uring_setup(0x3545, &(0x7f00000002c0)={0x0, 0xb47, 0x0, 0x0, 0x39d}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) socket$inet(0x2, 0x3, 0x8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$tun(r3, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @private1, 0x9}, 0x1c) bind$802154_dgram(r3, &(0x7f0000000240), 0x14) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000340)={{0x5e, @local, 0x4e21, 0x3, 'lblcr\x00', 0x4c, 0x8001, 0xa}, {@broadcast, 0x4e23, 0x10000, 0x2, 0xffff}}, 0x44) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 16:39:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1e013, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r0, 0x0) read(r0, &(0x7f0000000040)=""/238, 0xfffffdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105000, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x4, 0x8, 0x4, 0x0, 0xfff, 0x600, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffe0, 0x0, @perf_config_ext={0x9, 0x1}, 0x2421, 0x100, 0xb1, 0x0, 0xffff, 0xffffffff, 0x81, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x1, r0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0) io_uring_enter(r3, 0x4425, 0x6393, 0x7, &(0x7f0000000400)={[0x2]}, 0x8) ioctl$CDROM_SEND_PACKET(r1, 0x5393, &(0x7f0000000300)={"f1b2a1d969c9aa80011abae5", &(0x7f0000000200)="1edd77f3f5f084604b842800ba9d84e6625156383ec2ad14d96b97271b92384d04baa23a00311e5d867916de5ed15f35c16a0466e7f93971271409a3057c11a7e666a489508439079cd02ffdb229b984920a1159db9cf1a4dc7c1fe108f527601c183179360e6719a20a8bd35824cdf1532f7e7d8d45b4e87a09becf64c99b691e8a53d49cf20b54d349b594c0de3f943ff80e468fec2e1798b31809cd3ddb1d78ea1353e1b82d5166b08aff7d36455a37271308ba14cd0c38e316ea2d8167f906be6ed53346bb2ea1676b9764e439270d", 0xd1, 0x3ff, &(0x7f0000000140)={0x8, 0x0, 0x4d, 0x8, 0x0, 0x0, 0x0, "2cd21a6b", 0x7, "dd8649ac", 0x3, 0x84, 0x0, "422b83", "952f0f1e26fc623ff3f1637b69c8957f3395f627cbb74512e629454cd9051be2255181aab238d53ab5b70ec6244f"}, 0x2, 0x7, 0x80, &(0x7f0000000180)}) mmap(&(0x7f0000867000/0x4000)=nil, 0x4000, 0x3, 0x13, r2, 0x208fe000) read(r1, &(0x7f0000000000), 0x20002000) 16:39:36 executing program 6: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x2000c800) keyctl$update(0x2, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000090) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x70}, 0x1, 0x0, 0x0, 0x6050}, 0x4000000) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) 16:39:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x35e7eaa4871bc4b0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000240)='./file0\x00', 0x2f) getpeername(r0, &(0x7f0000000540)=@isdn, &(0x7f0000000380)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x140) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x110) openat(r0, &(0x7f0000000280)='./file1\x00', 0x80800, 0x9) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1/file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') pread64(r3, 0x0, 0x13e, 0x0) openat(r3, &(0x7f00000003c0)='./file0\x00', 0x462000, 0x2a) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYRES16], 0xfdef) r5 = syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='\x00', 0x3, 0x8, &(0x7f0000000c80)=[{&(0x7f0000000940)="812f8732f2aa24a0b0bce7ac813b6da32c2b6fab497b6821db8a45481edf210c5268407d6022132af94efe8123f84b0bf7c4be7fc49fcab8881bdf3475808006ae6d3d2ad925f278352c", 0x4a, 0x5}, {&(0x7f00000009c0)="4de286b642e2016df65232401648638a071ad3e5e3e649e05eaece0161bded3a2beffbe11f7fb18c17529a94176cf740d4343f361498b45b4506db1342c75da28c34e41458dc5edbe7e4a155dee6b43352ea0b2e4cd859cc6917e3672441a81c28ef6fee36d10cafad298093127cc00a92a3b50a1f6d6509da7243daf3a0767dd8e793eb01be0fc35bd24817a01f9872ca8eedf106db8dba967ef8211cd62fea4e59f66f826ba14c65680a50ddac76a55a688fcd26d410c4285523bfcb4506ff28f6d5c4dd350ca0073482498c872f172be3eb8eda6ef5ef94f47ccd04cf9510d4da00666c66aee2a9f3c4", 0xeb, 0x7015}, {&(0x7f0000000ac0)="c1", 0x1, 0x1}, {&(0x7f0000000b00)="f6783221733966423809c105de", 0xd, 0xff}, {&(0x7f0000000b40)="6df328bfc5c90f3fdbf9d99e076b200809fc7ae87d1852e5314e79e949df269f97948a87ca6e944b8c2d6e85180f5ea9e08ae1003ecaf5b615c7279bb6e17a4a19269360331f", 0x46, 0xa12}, {&(0x7f0000000bc0), 0x0, 0x8}, {&(0x7f0000000c00)="190532d15729d93e2d243a12f1847e277e4d202b547b7d4ad3d2d97d5fb309194608f0014b9d890b94cdbdb58ed7b2325e6c0e59da48fdd179", 0x39, 0x20}, {&(0x7f0000000c40)="16e7ccf2b4883e65619eee08d63271c93cf3d9ba20a1bea5e4c8f61ffeb88a81c646ae83379bf99e43b52c503e543b", 0x2f, 0x100}], 0x1008, &(0x7f0000000d40)={[{@uni_xlate}], [{@appraise_type}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x3f}}, {@appraise}, {@obj_role}]}) openat(r5, &(0x7f0000000dc0)='./file0\x00', 0x2240, 0x51) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x640c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 16:39:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x0, {0x0, r2}}, 0x7fff) lchown(&(0x7f00000000c0)='./file0\x00', 0xee01, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0xf0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0x0, r5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xee00, r5}}, './file0\x00'}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3, 0x6, &(0x7f0000000840)=[{&(0x7f0000000400)="b774e8cabcc97b119f705823097710b9682c969742005dad33ab4dc89b5b93f0f48797b6ccca4dd086eb78575a07b4b1dace6bc85c691bbbe9ea04b5b66b0d622c2df4ca8a3274968b65e57126f3fc21436b47691b796d06a1da058a8e05769837b1984b983db6fb79ae433b1499c8e4517c165dbbaa7dbc38511d1c3337a2194dcf8ebd195c3134551717ecd36aeace26aa9f36612dc473ad7583", 0x9b, 0x1}, {&(0x7f00000004c0)="40a1c29b0a45cd470cd79ec4ca41b9fbb4ac64c825817a61eb3018b74bb74271e5558a030c857eec2479830e7470c45e6cc3e296036a0ba801fc99bb350058c3ca7a5e394d191e787280c7829a", 0x4d, 0x6}, {&(0x7f00000001c0)="9d5c8c90", 0x4, 0xd7e}, {&(0x7f0000000540)="292602a91810d607bf1abacce030cb6c302432d0f6a61c935f0900afa29eb92c836ba510e3258a8b39bb1eebeef5f30857265019591e3c9adf4b2f598a6645c95b6e57bcde1c1362ff236de29b0b94efdc9891b56a39d038a27f0d7cd93137bba7b8e045f2a5a8fa4be3980a37ac53d0176752265a999f6183def11b9ba7f61c5cf4e54d51153eff99707e664b7b6bf0eb787e2a88b965139eee144c6b5542dbe9d9f3b42cc2a735984f12d3bb2f57085bf15da188e2747287b5724a5a8b1eb2015518e9d5936ffa303f6662e2de26b85b41531507ddd8b2a44ea54469973dac8e2a578c59a920dd6acf2d95ed43229ef6e91c0da0", 0xf5, 0x4c}, {&(0x7f0000000640)="a4c9d1e4000e4fa7027eaaddfe32f2910689a8ee169db52a28720ae9063b30521720c4040247fe150ea9db41381bec5e2950138cfa8be6dedfb022d35d3c15f594bb6f7ddb5f33d3e7144f7f7f88575a710a0bac7f98a99ca109fdb69855ac57d40f007c08e9d974b1e0f10aaba3131b329569db642e0d8e003cea3f6a2fc00476a0a19d53ca7db4a054125dad5de3f81112d746deea0308814c61c59e7331d6ade08776dd639bafad6235e2595cb686ceafe18bb4f83ebac81dcdcf00aa1e546c0d04d59fa0dd9c7b3c57d83288a716369c6e39a63606", 0xd7}, {&(0x7f0000000740)="1ffc3b57ecb0586b01db48c281cbf8447bcbc5021f3ba0dbc7a748846353df6de32de5e53a012eea54adbba648ae691af67d840991f7667b6f3bd71a36f59540a4d7e6918cb4749589d9a3ab807f59cb999c15f9b7c86f0def0012a764114191dfb7d9888a61a51803585ea733bd885e71d4b12fc00dda67f02f6072d8bad027b23b509b300d5697a880a46024b783798578c40533334dfe8ff50711eaf1b94e41cc48b6010eeb4754981939f8092b5925b40dcec7f1b7ace9b94f7fa042b637c329c26d802e02bd06166a806fcfa83a7fc5c58a78182c489d6be74fe2425e338eee427568c2d0a69de7b4130066d9385772258375", 0xf5, 0x262}], 0x2000, &(0x7f0000000900)=ANY=[@ANYBLOB='discard,nouid32,resgid=', @ANYRESHEX=r5, @ANYBLOB="2c6e6f75696433322c7374726970653d3078303030303030303030303030303030381a6a71666d743d76667376302c61636c2c6d61736b3d4d41595f415050454e442c6d61736b3d5e4d41595f415050454e442c61707072616973652c7375626a5f757365723d002c7569643c", @ANYRESDEC=r6, @ANYBLOB=',\x00']) 16:39:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x35e7eaa4871bc4b0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000240)='./file0\x00', 0x2f) getpeername(r0, &(0x7f0000000540)=@isdn, &(0x7f0000000380)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x140) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x110) openat(r0, &(0x7f0000000280)='./file1\x00', 0x80800, 0x9) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1/file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') pread64(r3, 0x0, 0x13e, 0x0) openat(r3, &(0x7f00000003c0)='./file0\x00', 0x462000, 0x2a) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYRES16], 0xfdef) r5 = syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='\x00', 0x3, 0x8, &(0x7f0000000c80)=[{&(0x7f0000000940)="812f8732f2aa24a0b0bce7ac813b6da32c2b6fab497b6821db8a45481edf210c5268407d6022132af94efe8123f84b0bf7c4be7fc49fcab8881bdf3475808006ae6d3d2ad925f278352c", 0x4a, 0x5}, {&(0x7f00000009c0)="4de286b642e2016df65232401648638a071ad3e5e3e649e05eaece0161bded3a2beffbe11f7fb18c17529a94176cf740d4343f361498b45b4506db1342c75da28c34e41458dc5edbe7e4a155dee6b43352ea0b2e4cd859cc6917e3672441a81c28ef6fee36d10cafad298093127cc00a92a3b50a1f6d6509da7243daf3a0767dd8e793eb01be0fc35bd24817a01f9872ca8eedf106db8dba967ef8211cd62fea4e59f66f826ba14c65680a50ddac76a55a688fcd26d410c4285523bfcb4506ff28f6d5c4dd350ca0073482498c872f172be3eb8eda6ef5ef94f47ccd04cf9510d4da00666c66aee2a9f3c4", 0xeb, 0x7015}, {&(0x7f0000000ac0)="c1", 0x1, 0x1}, {&(0x7f0000000b00)="f6783221733966423809c105de", 0xd, 0xff}, {&(0x7f0000000b40)="6df328bfc5c90f3fdbf9d99e076b200809fc7ae87d1852e5314e79e949df269f97948a87ca6e944b8c2d6e85180f5ea9e08ae1003ecaf5b615c7279bb6e17a4a19269360331f", 0x46, 0xa12}, {&(0x7f0000000bc0), 0x0, 0x8}, {&(0x7f0000000c00)="190532d15729d93e2d243a12f1847e277e4d202b547b7d4ad3d2d97d5fb309194608f0014b9d890b94cdbdb58ed7b2325e6c0e59da48fdd179", 0x39, 0x20}, {&(0x7f0000000c40)="16e7ccf2b4883e65619eee08d63271c93cf3d9ba20a1bea5e4c8f61ffeb88a81c646ae83379bf99e43b52c503e543b", 0x2f, 0x100}], 0x1008, &(0x7f0000000d40)={[{@uni_xlate}], [{@appraise_type}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x3f}}, {@appraise}, {@obj_role}]}) openat(r5, &(0x7f0000000dc0)='./file0\x00', 0x2240, 0x51) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x640c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 16:39:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x2b, 0x400, 0x70bd28, 0x25dfdbfb, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40480c5) 16:39:36 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0xe90, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000200002e336669"]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000140)=""/196, 0xc4, 0x80000000) ftruncate(r0, 0x8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x56d6, &(0x7f0000000c80)={0x0, 0xc621, 0x20, 0x2, 0x29d}) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x3) [ 135.750146] loop1: detected capacity change from 0 to 41948160 [ 135.768370] loop7: detected capacity change from 0 to 41948160 16:39:36 executing program 3: r0 = socket$inet(0x2, 0x5, 0x6) r1 = socket$inet(0x2, 0x3, 0x6) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) recvmsg(r1, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x40000020) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1) 16:39:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x2b, 0x400, 0x70bd28, 0x25dfdbfb, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40480c5) 16:39:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="af", 0x1}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x881, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xd6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x6, 0x9, 0x0, 0x1, 0x4, 0x1}, 0x40) recvfrom$inet6(r1, &(0x7f0000001700)=""/4099, 0xffffff3e, 0xcd04, 0x0, 0xfffffffffffffed7) 16:39:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x2b, 0x400, 0x70bd28, 0x25dfdbfb, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40480c5) 16:39:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) 16:39:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000) [ 151.126120] loop1: detected capacity change from 0 to 41948160 16:39:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="af", 0x1}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x881, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xd6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x6, 0x9, 0x0, 0x1, 0x4, 0x1}, 0x40) recvfrom$inet6(r1, &(0x7f0000001700)=""/4099, 0xffffff3e, 0xcd04, 0x0, 0xfffffffffffffed7) 16:39:51 executing program 5: sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="000825bd70080003008dde611dd84a0e5640a8fe5854f7281dd3e909dd59008ba1d37d7d17fb0c2a328163d765730e2c59a905e96e88158dfde96e2722a57d682a22e0a2785441c49484d0ac1bd329767a9cd96107cfb9786401000080000000008ad20622f7b54ab0830105cc3689badbaeeff86451b890583c0d17eab0c8f7dc0dc6b2ac6b257466c972d3e96057db40bdfeef891cd461b8b65622951647c956659b0efb851ab554b6f4b87bf5abc4b9247117d916bd6aa386f91142cd90ba858582000000", @ANYRES32=0x0, @ANYBLOB="3400228005000400000000000800030005000000080002000300000008000200020000000800030000000000080002000100000054002280080003000500000005000100200000000800030006000000050001000500000008000200000000000500040001000000080003000800000005000100c3000000050004000000000005000400000000000c0006000300000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4044000}, 0x14000080) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xf36, @private2, 0x2f}, 0x1c) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) syz_io_uring_setup(0x3545, &(0x7f00000002c0)={0x0, 0xb47, 0x0, 0x0, 0x39d}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) socket$inet(0x2, 0x3, 0x8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$tun(r3, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @private1, 0x9}, 0x1c) bind$802154_dgram(r3, &(0x7f0000000240), 0x14) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000340)={{0x5e, @local, 0x4e21, 0x3, 'lblcr\x00', 0x4c, 0x8001, 0xa}, {@broadcast, 0x4e23, 0x10000, 0x2, 0xffff}}, 0x44) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 16:39:51 executing program 6: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x2000c800) keyctl$update(0x2, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000090) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x70}, 0x1, 0x0, 0x0, 0x6050}, 0x4000000) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) 16:39:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x35e7eaa4871bc4b0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000240)='./file0\x00', 0x2f) getpeername(r0, &(0x7f0000000540)=@isdn, &(0x7f0000000380)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x140) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x110) openat(r0, &(0x7f0000000280)='./file1\x00', 0x80800, 0x9) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1/file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') pread64(r3, 0x0, 0x13e, 0x0) openat(r3, &(0x7f00000003c0)='./file0\x00', 0x462000, 0x2a) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYRES16], 0xfdef) r5 = syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='\x00', 0x3, 0x8, &(0x7f0000000c80)=[{&(0x7f0000000940)="812f8732f2aa24a0b0bce7ac813b6da32c2b6fab497b6821db8a45481edf210c5268407d6022132af94efe8123f84b0bf7c4be7fc49fcab8881bdf3475808006ae6d3d2ad925f278352c", 0x4a, 0x5}, {&(0x7f00000009c0)="4de286b642e2016df65232401648638a071ad3e5e3e649e05eaece0161bded3a2beffbe11f7fb18c17529a94176cf740d4343f361498b45b4506db1342c75da28c34e41458dc5edbe7e4a155dee6b43352ea0b2e4cd859cc6917e3672441a81c28ef6fee36d10cafad298093127cc00a92a3b50a1f6d6509da7243daf3a0767dd8e793eb01be0fc35bd24817a01f9872ca8eedf106db8dba967ef8211cd62fea4e59f66f826ba14c65680a50ddac76a55a688fcd26d410c4285523bfcb4506ff28f6d5c4dd350ca0073482498c872f172be3eb8eda6ef5ef94f47ccd04cf9510d4da00666c66aee2a9f3c4", 0xeb, 0x7015}, {&(0x7f0000000ac0)="c1", 0x1, 0x1}, {&(0x7f0000000b00)="f6783221733966423809c105de", 0xd, 0xff}, {&(0x7f0000000b40)="6df328bfc5c90f3fdbf9d99e076b200809fc7ae87d1852e5314e79e949df269f97948a87ca6e944b8c2d6e85180f5ea9e08ae1003ecaf5b615c7279bb6e17a4a19269360331f", 0x46, 0xa12}, {&(0x7f0000000bc0), 0x0, 0x8}, {&(0x7f0000000c00)="190532d15729d93e2d243a12f1847e277e4d202b547b7d4ad3d2d97d5fb309194608f0014b9d890b94cdbdb58ed7b2325e6c0e59da48fdd179", 0x39, 0x20}, {&(0x7f0000000c40)="16e7ccf2b4883e65619eee08d63271c93cf3d9ba20a1bea5e4c8f61ffeb88a81c646ae83379bf99e43b52c503e543b", 0x2f, 0x100}], 0x1008, &(0x7f0000000d40)={[{@uni_xlate}], [{@appraise_type}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x3f}}, {@appraise}, {@obj_role}]}) openat(r5, &(0x7f0000000dc0)='./file0\x00', 0x2240, 0x51) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x640c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 16:39:51 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 16:39:51 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) 16:39:51 executing program 3: r0 = socket$inet(0x2, 0x5, 0x6) r1 = socket$inet(0x2, 0x3, 0x6) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) recvmsg(r1, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x40000020) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1) 16:39:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1e013, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r0, 0x0) read(r0, &(0x7f0000000040)=""/238, 0xfffffdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105000, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x4, 0x8, 0x4, 0x0, 0xfff, 0x600, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffe0, 0x0, @perf_config_ext={0x9, 0x1}, 0x2421, 0x100, 0xb1, 0x0, 0xffff, 0xffffffff, 0x81, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x1, r0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0) io_uring_enter(r3, 0x4425, 0x6393, 0x7, &(0x7f0000000400)={[0x2]}, 0x8) ioctl$CDROM_SEND_PACKET(r1, 0x5393, &(0x7f0000000300)={"f1b2a1d969c9aa80011abae5", &(0x7f0000000200)="1edd77f3f5f084604b842800ba9d84e6625156383ec2ad14d96b97271b92384d04baa23a00311e5d867916de5ed15f35c16a0466e7f93971271409a3057c11a7e666a489508439079cd02ffdb229b984920a1159db9cf1a4dc7c1fe108f527601c183179360e6719a20a8bd35824cdf1532f7e7d8d45b4e87a09becf64c99b691e8a53d49cf20b54d349b594c0de3f943ff80e468fec2e1798b31809cd3ddb1d78ea1353e1b82d5166b08aff7d36455a37271308ba14cd0c38e316ea2d8167f906be6ed53346bb2ea1676b9764e439270d", 0xd1, 0x3ff, &(0x7f0000000140)={0x8, 0x0, 0x4d, 0x8, 0x0, 0x0, 0x0, "2cd21a6b", 0x7, "dd8649ac", 0x3, 0x84, 0x0, "422b83", "952f0f1e26fc623ff3f1637b69c8957f3395f627cbb74512e629454cd9051be2255181aab238d53ab5b70ec6244f"}, 0x2, 0x7, 0x80, &(0x7f0000000180)}) mmap(&(0x7f0000867000/0x4000)=nil, 0x4000, 0x3, 0x13, r2, 0x208fe000) read(r1, &(0x7f0000000000), 0x20002000) 16:39:51 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) creat(&(0x7f0000000000)='./file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 16:39:51 executing program 7: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x46e2, 0x89) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@remote, 0x3f}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000340)={'lo\x00'}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x84800) setns(r3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private1, 0x1ff, 0x0, 0x2, 0x6, 0x101, 0x1000}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x4008, 0x2, 0x400, 0x8, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) 16:39:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="af", 0x1}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x881, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xd6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x6, 0x9, 0x0, 0x1, 0x4, 0x1}, 0x40) recvfrom$inet6(r1, &(0x7f0000001700)=""/4099, 0xffffff3e, 0xcd04, 0x0, 0xfffffffffffffed7) 16:39:51 executing program 5: sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="000825bd70080003008dde611dd84a0e5640a8fe5854f7281dd3e909dd59008ba1d37d7d17fb0c2a328163d765730e2c59a905e96e88158dfde96e2722a57d682a22e0a2785441c49484d0ac1bd329767a9cd96107cfb9786401000080000000008ad20622f7b54ab0830105cc3689badbaeeff86451b890583c0d17eab0c8f7dc0dc6b2ac6b257466c972d3e96057db40bdfeef891cd461b8b65622951647c956659b0efb851ab554b6f4b87bf5abc4b9247117d916bd6aa386f91142cd90ba858582000000", @ANYRES32=0x0, @ANYBLOB="3400228005000400000000000800030005000000080002000300000008000200020000000800030000000000080002000100000054002280080003000500000005000100200000000800030006000000050001000500000008000200000000000500040001000000080003000800000005000100c3000000050004000000000005000400000000000c0006000300000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4044000}, 0x14000080) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xf36, @private2, 0x2f}, 0x1c) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) syz_io_uring_setup(0x3545, &(0x7f00000002c0)={0x0, 0xb47, 0x0, 0x0, 0x39d}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) socket$inet(0x2, 0x3, 0x8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$tun(r3, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @private1, 0x9}, 0x1c) bind$802154_dgram(r3, &(0x7f0000000240), 0x14) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000340)={{0x5e, @local, 0x4e21, 0x3, 'lblcr\x00', 0x4c, 0x8001, 0xa}, {@broadcast, 0x4e23, 0x10000, 0x2, 0xffff}}, 0x44) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 16:39:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="af", 0x1}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x881, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xd6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x6, 0x9, 0x0, 0x1, 0x4, 0x1}, 0x40) recvfrom$inet6(r1, &(0x7f0000001700)=""/4099, 0xffffff3e, 0xcd04, 0x0, 0xfffffffffffffed7) 16:39:51 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) creat(&(0x7f0000000000)='./file1\x00', 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) [ 151.415276] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 16:39:51 executing program 5: sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="000825bd70080003008dde611dd84a0e5640a8fe5854f7281dd3e909dd59008ba1d37d7d17fb0c2a328163d765730e2c59a905e96e88158dfde96e2722a57d682a22e0a2785441c49484d0ac1bd329767a9cd96107cfb9786401000080000000008ad20622f7b54ab0830105cc3689badbaeeff86451b890583c0d17eab0c8f7dc0dc6b2ac6b257466c972d3e96057db40bdfeef891cd461b8b65622951647c956659b0efb851ab554b6f4b87bf5abc4b9247117d916bd6aa386f91142cd90ba858582000000", @ANYRES32=0x0, @ANYBLOB="3400228005000400000000000800030005000000080002000300000008000200020000000800030000000000080002000100000054002280080003000500000005000100200000000800030006000000050001000500000008000200000000000500040001000000080003000800000005000100c3000000050004000000000005000400000000000c0006000300000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4044000}, 0x14000080) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xf36, @private2, 0x2f}, 0x1c) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) syz_io_uring_setup(0x3545, &(0x7f00000002c0)={0x0, 0xb47, 0x0, 0x0, 0x39d}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) socket$inet(0x2, 0x3, 0x8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$tun(r3, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @private1, 0x9}, 0x1c) bind$802154_dgram(r3, &(0x7f0000000240), 0x14) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000340)={{0x5e, @local, 0x4e21, 0x3, 'lblcr\x00', 0x4c, 0x8001, 0xa}, {@broadcast, 0x4e23, 0x10000, 0x2, 0xffff}}, 0x44) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 16:39:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000810000002400000000f28268bb76bbb3001000"/36], 0x40) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, 0x19, 0x1, 0x0, 0x0, {0x2}, [@typed={0x13, 0x0, 0x0, 0x0, @str='*%),[./%\'!{]\\(\x00'}]}, 0x28}}, 0x0) 16:39:51 executing program 4: setitimer(0x2, &(0x7f0000000180)={{}, {0x0, 0xea60}}, 0x0) setitimer(0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x1000007, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x327c, &(0x7f00000000c0)={0x0, 0xe875, 0x0, 0x3, 0x329}, &(0x7f0000ff2000/0x7000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x9, 0x0, 0x0, 0x0, 0x1}, 0xfff) setitimer(0x0, &(0x7f0000000040)={{}, {r0, r1/1000+60000}}, &(0x7f0000000080)) [ 151.550943] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 16:39:51 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) [ 151.558666] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.576417] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 151.592858] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 16:40:07 executing program 1: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) r1 = accept(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x80) accept4$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:40:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00', '\x00']}, 0x278) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) write$binfmt_elf64(r0, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00', '\x00', '\x00']}, 0x378) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 16:40:07 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r1 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4003}], 0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRES32]) chdir(&(0x7f0000000140)='./file1\x00') r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000340)={@id={0x2, 0x0, @d}}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x8400, 0x0) bind$packet(r3, &(0x7f0000000240)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000180)={0x1}, 0x4) sendfile(r2, r3, 0x0, 0x10000000c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000f, 0x30, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file2\x00', 0x8000, 0xa7c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="3cf59ab4a33963d4770482924f36df03e4142eb4a3afc6b9a4e087203c6906ba52e229d0cfb911cc291ef20879a2f05913689d4fd617cb3ab7d6cadc7eb4d5b3edab87217f5724349912f632e7b5272c35755273f1bc533648a9cc972f1630da25204aa62b7835e88ab2c2e4930a151e985606610196984892d3bea5182d2224439ad02f55832ad6dbcc05f156ecf8b962f61a93b73e36909b0ea8fe03ad1bf89fdb7c29f27c96b6bdaf7eeef285bd7632ca3f277a525e3817bf7c261cd99cab956fb921caed89b68196bfd1befd81d9983451db5de8ecf161b31039637accfdebb216a1ffcdddd31a5ad1832ca8deba95dc76", @ANYRES64]) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x400080, 0x8) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000001c0)) creat(&(0x7f0000000280)='./file2\x00', 0x4) 16:40:07 executing program 4: keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000340)='asymmetric\x00', &(0x7f00000000c0)=@chain) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "36fd4f17204a039b971e5b06ce7d00295f9f2579e0ed6bd4f43bd7c77859b1a83f0e4c21498d83174d6d69054e74de250a04833a9a7ed41ca2c852d48891e11e", 0xfffffffd}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, r1, 0x0, 0x0) flock(r0, 0x9) timer_gettime(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x3, 0x40000000, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdc, 0x5, 0x5, 0x8, 0x0, 0xfffffffffffffffc, 0x20, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000300)}, 0x1821, 0x1, 0x0, 0x0, 0x5, 0x80000001, 0x8, 0x0, 0x1, 0x0, 0x80000000}, 0x0, 0x0, r0, 0xe7bd6b610a7b432d) r3 = add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000400)="b53b2ae14bc508ce84ada05444f7dc30c167fa087dd0a290a9013b4d3c6f369f8e906fd9a42cb15821d79d4d8bb6733c6a055771283662e58e1cf0a6eccf5a80fae295d0ad452b8c291a3f40843898f106b7ffea1c25e5ac1f4913c21f92c1974d537265798b21293d4e78544ecaa0c417ced5c582cd157321e782fbb35502a975c8a2cc699ac6b2c377532eaf137bbddf5ae21caf256142f31d1e945d374b37fced15f8c12737b35611adcd1a2bf1bdd9a438b415dafddbba900a", 0xbb, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @auto=[0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x62]}, &(0x7f0000000740)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x0) keyctl$invalidate(0x15, r4) keyctl$KEYCTL_MOVE(0x1e, r3, r1, r4, 0x0) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:40:07 executing program 7: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x46e2, 0x89) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@remote, 0x3f}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000340)={'lo\x00'}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x84800) setns(r3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private1, 0x1ff, 0x0, 0x2, 0x6, 0x101, 0x1000}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x4008, 0x2, 0x400, 0x8, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) 16:40:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 16:40:07 executing program 3: r0 = socket$inet(0x2, 0x5, 0x6) r1 = socket$inet(0x2, 0x3, 0x6) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) recvmsg(r1, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x40000020) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1) 16:40:07 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$snapshot(r6, &(0x7f0000000500)=""/227, 0xe3) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x9, 0x9, 0x1, 0x8, 0x0, 0x62f2, 0x4000, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x4, 0x7f}, 0x400, 0x0, 0x7, 0x5, 0x9, 0x5, 0x7f, 0x0, 0xfffffff9, 0x0, 0x8f85}, r5, 0x7, r7, 0x3) [ 167.247740] loop5: detected capacity change from 0 to 32768 [ 167.250822] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 167.259691] loop1: detected capacity change from 0 to 16776704 [ 167.264389] FAT-fs (loop5): Unrecognized mount option "" or missing value 16:40:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) [ 167.382666] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 167.456742] loop5: detected capacity change from 0 to 32768 [ 167.480933] FAT-fs (loop5): Unrecognized mount option "" or missing value 16:40:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r4, &(0x7f0000000140)="af", 0x1, 0xffffff) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x7ff) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 16:40:23 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="4207e7217131b9cac6a37916326a2949127c8c95cf7b83ad244b5615486a4c5b3fe7e074eaa3ef54c04bf24e665b3c09263d84969658f9ec977afd2660bf4a6fbfabbff2cf989502b30404c62505cecf358abc6b1babe61d8552a85f1369bf47102d4f7f007d46697f64d1b7ef504c55cb146329961d14030000000102b25c329858b5bf8c2f71189b3d073e37500cc76eb211173839de3ce6090e74f45f4fb814b951216903ce280c54e8d64db29502c8b7674d1cd9c77ca28b3e232f06cfb07573a0ada4abf14f0fcbc83293529085f4adea501722799159cba3b41746c723cdc570000000000000"]) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) pipe2(&(0x7f00000001c0), 0x80000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mmap(&(0x7f0000414000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @private0, 0x81}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044008) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x5, 0x3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r4, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f00000000c0)=0x9, 0x4) 16:40:23 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$snapshot(r6, &(0x7f0000000500)=""/227, 0xe3) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x9, 0x9, 0x1, 0x8, 0x0, 0x62f2, 0x4000, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x4, 0x7f}, 0x400, 0x0, 0x7, 0x5, 0x9, 0x5, 0x7f, 0x0, 0xfffffff9, 0x0, 0x8f85}, r5, 0x7, r7, 0x3) 16:40:23 executing program 1: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) r1 = accept(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x80) accept4$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:40:23 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r3 = gettid() capset(&(0x7f0000000600)={0x19980330, r3}, 0x0) 16:40:23 executing program 4: keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000340)='asymmetric\x00', &(0x7f00000000c0)=@chain) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "36fd4f17204a039b971e5b06ce7d00295f9f2579e0ed6bd4f43bd7c77859b1a83f0e4c21498d83174d6d69054e74de250a04833a9a7ed41ca2c852d48891e11e", 0xfffffffd}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, r1, 0x0, 0x0) flock(r0, 0x9) timer_gettime(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x3, 0x40000000, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdc, 0x5, 0x5, 0x8, 0x0, 0xfffffffffffffffc, 0x20, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000300)}, 0x1821, 0x1, 0x0, 0x0, 0x5, 0x80000001, 0x8, 0x0, 0x1, 0x0, 0x80000000}, 0x0, 0x0, r0, 0xe7bd6b610a7b432d) r3 = add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000400)="b53b2ae14bc508ce84ada05444f7dc30c167fa087dd0a290a9013b4d3c6f369f8e906fd9a42cb15821d79d4d8bb6733c6a055771283662e58e1cf0a6eccf5a80fae295d0ad452b8c291a3f40843898f106b7ffea1c25e5ac1f4913c21f92c1974d537265798b21293d4e78544ecaa0c417ced5c582cd157321e782fbb35502a975c8a2cc699ac6b2c377532eaf137bbddf5ae21caf256142f31d1e945d374b37fced15f8c12737b35611adcd1a2bf1bdd9a438b415dafddbba900a", 0xbb, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @auto=[0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x62]}, &(0x7f0000000740)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x0) keyctl$invalidate(0x15, r4) keyctl$KEYCTL_MOVE(0x1e, r3, r1, r4, 0x0) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:40:23 executing program 7: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x46e2, 0x89) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@remote, 0x3f}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000340)={'lo\x00'}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x84800) setns(r3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private1, 0x1ff, 0x0, 0x2, 0x6, 0x101, 0x1000}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x4008, 0x2, 0x400, 0x8, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) 16:40:23 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) chroot(&(0x7f00000011c0)='./file0\x00') unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8000000000000005}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x10) 16:40:23 executing program 0: syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) [ 183.522424] loop1: detected capacity change from 0 to 16776704 [ 183.611010] cgroup2: Unknown parameter '' [ 183.634916] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 183.639430] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 16:40:23 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="4207e7217131b9cac6a37916326a2949127c8c95cf7b83ad244b5615486a4c5b3fe7e074eaa3ef54c04bf24e665b3c09263d84969658f9ec977afd2660bf4a6fbfabbff2cf989502b30404c62505cecf358abc6b1babe61d8552a85f1369bf47102d4f7f007d46697f64d1b7ef504c55cb146329961d14030000000102b25c329858b5bf8c2f71189b3d073e37500cc76eb211173839de3ce6090e74f45f4fb814b951216903ce280c54e8d64db29502c8b7674d1cd9c77ca28b3e232f06cfb07573a0ada4abf14f0fcbc83293529085f4adea501722799159cba3b41746c723cdc570000000000000"]) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) pipe2(&(0x7f00000001c0), 0x80000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mmap(&(0x7f0000414000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @private0, 0x81}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044008) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x5, 0x3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r4, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f00000000c0)=0x9, 0x4) 16:40:23 executing program 0: syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 16:40:24 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="39730549f4635c8f4352262fe26b4415b2c11f4f59a80161aceb0e3deee77a26dfd3fb601ac7cc5dd73961f4346e691b24bfbac5840c01f09c432f6f15012e6f1e0a1200564abdfbdc91e0df5b02a38d96798bbb5a119e88dd46ed98ccbbc7faee19b966aec28453cc7c2cf0337587f3f30625f31f68f001bcdeaf0a0db281197e6f66b42b04781be6c69386a90c04d11820574a3deba907536947d2a5a135ea0ef80d882d13472ec466668385309924d9c185d0900b18f39a5a76421c447e4f1ca84f3b08bada7918b69a85bcbf1b97f162c44eaeb160a2562d11dbe2cba69003f0c6bd0263caf6ce0d4ac11282739bc4dbff91beca88d4c9cfb5844a6a1fe99268286fec6ce82271f73bc58cde24d186afdb91b177f4baa03b5f4ce0a6ece629117bc6b872ab41a77c050074000000000004001900140179800c0089000200000000000000f4ce6b0a9517dfdf734e18f13915287697bf4a60659419d3ad092c22f8a4e642c3fa05e8dc52c469c4eb6e5f35195c006516e165bd11381fd76fa2b21e1ec36a9a41913870e169a755501be2d85dd8a8f1a90296f2c0275238338e0a632077a21b19b1c4965ca8dba07b62a65d71201e0c0cedad01b7ff51f29b0187fc33c5bbf29302f0913443614971a81ee0f5c0496d9336962b798749cbd6df731c9eb6554d56ab825cd13415e8428a084926dbdfda06da9e5a9eb0818b0735d88b06fcde503b28776a6935b59038b61c5724b6b9a7e068cf42ecbb18ec40eb97b4b5f43cc8f907b5f4dca007336eba85727d6037e67d7b0c10d08e9c9c01455431ed8555038e327d"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$snapshot(r6, &(0x7f0000000500)=""/227, 0xe3) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x9, 0x9, 0x1, 0x8, 0x0, 0x62f2, 0x4000, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x4, 0x7f}, 0x400, 0x0, 0x7, 0x5, 0x9, 0x5, 0x7f, 0x0, 0xfffffff9, 0x0, 0x8f85}, r5, 0x7, r7, 0x3) 16:40:36 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$snapshot(r6, &(0x7f0000000500)=""/227, 0xe3) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x9, 0x9, 0x1, 0x8, 0x0, 0x62f2, 0x4000, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x4, 0x7f}, 0x400, 0x0, 0x7, 0x5, 0x9, 0x5, 0x7f, 0x0, 0xfffffff9, 0x0, 0x8f85}, r5, 0x7, r7, 0x3) 16:40:36 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$snapshot(r6, &(0x7f0000000500)=""/227, 0xe3) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x9, 0x9, 0x1, 0x8, 0x0, 0x62f2, 0x4000, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x4, 0x7f}, 0x400, 0x0, 0x7, 0x5, 0x9, 0x5, 0x7f, 0x0, 0xfffffff9, 0x0, 0x8f85}, r5, 0x7, r7, 0x3) 16:40:36 executing program 0: syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 16:40:36 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="3400000000000000000080d92995da5f4b3900"/92]}) fsetxattr$security_selinux(r1, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:crypt_device_t:s0\x00', 0x24, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r0, 0x8000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="340000000000000000007982d7e00000000000000000000000008bf5000000000000000000000000000000000000edffffff00120000000000000000000000000000000000000000000000000000000000000000000000000000000004572c7dbc9dc4863aa597464069ab4da030f89053abf1bcd0f217589dab431913e04275e9d8ebf4f559fbf06a6817515680f2d7cefef7e7af16ac7267df9dfeb492d1dd9af89e0805bcaa535353a2a110ed02acf511c365cc0dfba2de74200c5dc64c58f2a962f8df4ff891e6141dd31e71fb525a4d2eecefbe0db7c4bdbe1ec591e8a5e94e4f"]}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r5 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0xe90, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x6, &(0x7f0000000580)=[{&(0x7f0000000200)="8089f318251f6c9011a9640496baa1d55a919d12d7ca2e2d0cef6483aae75bcd2bdaf105cd8cec989616c655202ec008244ca2e9507296debb2c447f7a591a159c1b559bd5e2c105fdd09e4673cb000708aec4565663ac7445ae322eaee3a0a234da30577e8cc5a738f4f4417f93f9015a6433bd660f0dea8cc6861cc2db8b5cf1f1bfe18aa1ef1b1ea13cb97a32375f9ad27bce8575b11b6dffde8bead0474e80e1aa607153b883732623c986cfcfadff982c10d766", 0xb6, 0x7}, {&(0x7f00000002c0)="63d1a7a3c82b3a3005a17efb81e18a855b81e68d83dba1444392d7a5000af632b074a962d5b17c4272b71cc426268df78b1f60228c74b3d62d7b4128d60198be7ba1c85b9bf8cbf1e9fa2b66cc457e98aeef209d7e4b0f468a3d194a7e77645d51fa29a1731ab4e26e0d1b538f358f919c5b0797ec8997", 0x77, 0x2}, {&(0x7f0000000340)="8421bc395a5f96551898ce10577ab232209e9c63c2efeab88077639eeb0c943720e4eadd1b52c2e2a00d8519666467563cee9d2b9f5a8a9c5147feb0c8ae8c19e30028b9dcf1d7e9aa6e89bca083a2156542503ffd0c26af648fbb32206263ca89872606b646c2dc65a738f9a175ee7b3861e7a341dfa2cf6be58cde009a4e3deb99b0aa5ba632e5707f374461fc0860945fc8e6118fac57e224cefbf9359ad6d01657d5c4e25ab11a0bfc127d523ac7e7663f7c165fe0ad2c284b44bf31b5d4f5015dd764c8413f66c4b13a62e1a0aed5cf94b137e0bf4497139a6aa8741d73f2853b08bcee4c1d", 0xe8, 0x8}, {&(0x7f0000000440)="be71d5d6b090b495c2af68afd92343b52b366ad4394ef658e69a96efde34990fa7508d0a4a7a878bc0eb5d40652d25d2ef1abbdf53e34ce202de9fe3f4b0957099cdda85bf38adf0d4ba6b3bae2656c9ea01244a6a567a4b8f6ade349747df75e23a11c131dd", 0x66, 0x98a}, {&(0x7f00000004c0)="0ea5313a7700e6de23fce8784cbfad03edacc5a17cf72afdb83d06ed53e77d9e133ac1153c82181cf12f36214e6bd965c0b7d75bfd62c5c71d2ef51f79391e694090d684918bc88ff8e277b3fe785257c47744b4b1d49a6335c5f2c77a4eac0ab33615066d35b6a062ce2b1d4cb5668a8e3809328ea04702df6b17064fffa8b58412ce7a1bc13b1dc06c0d5d6c479fabd04a2113a42e590b1fcc3aa55b865c9c5df021498012656611", 0xa9, 0xc00}, {&(0x7f0000002100)="c289355bda6a0cbcc81230070a9aa765cc2fd2a6157f57b1d4576ccbf96b5188c9aa00f06297f24869ddfd3f2e0cd5f71ed5af60abc7a5b729795601b58b587c9d7f51024303e3cfda30bbf634c8f903f74b1c91747eac58082c5ce1930ec9ad4295fd66ea9e5e9a6087645854e424d296a2bdceb90d9ec5be2054b74fd4da02d8ecb5960cb46d382ee7eafdf7f248c1e09137ee3aaf728cb71ccfdec9494161f33a4f1b12ef96ae28399063208b5065ec3330ea35810676a49497e63338e828d063446bcf674abe755d02bd359dcef034129222ff0fe8f1fac45e312377b07d476851ecd893f3844e670f87539bbd4e9c5bdb8b959988352c1b5288aea8e11c22d71d7514c23e76ce625e3362fca4a60363380a2a6e1c439d8756c81ba40550d9eaa2c52b518814a021753611be31e3466a81306eeb8e05cc493890a5ec7dabcecf6564f66e770d66029c9ab7e1c2c251d6cd485b299d79bfb8645405db18870e41c5a41d356909996d5a81b38329848d95794949ec7dfe7e5437f9c9eeb2ff5756da6abf8ec709016c46ab803ad5ff4c43422fe29c1f4b6dc52fca72d92d5983116f6082fae98e911efdac87d7ef729c6a3b35fa36ec7f2775f93d670d371607692b5be7eebf0d64f77c14844773aa3e0de55d88c09681dfc4c9db22f554a64c327557ea1c3dde1174fe7d9b63078702d9f41a7bd0756a374ce062de171301024d2f75eeca5e7afda769ff9362def623a30cd315769169931b18c4bdf034aed892037f0c0ad9344aec86ff7e9fb7d4caf5abdde2ecbd96720c6915e1e20852f7ea99db3b8eb8c9aa28cf952d02dd9ff44ee1caca0773982d339fe704fb03844c8632a8b267e6658befc06fefad40e4b6e1e8db2374e63d61063854ed050bf22f8e86dbe13b35e6db7c9366059fe5d0d406b785326445f082586efb36d9b7737e9e458632c66cf97c28bb63926cdd24a59fa3e3de2e53f2bbee0090ba518531079ad125d458d04c068bce4e228be0ceb8c538e46885b37e2db9afcbe95f494b96f3a4f211f5f9c469c9c1c0ce6bb735378320af065da8f4fae052c7c6dcc5fbc252f50709117f9ea4c8b000ed2f7d0035323865f6f541020f948e9d377c8aaf59670fdc3a603407c796d84d628be168c16ab4028ff5fbd4f8a91ea9762f1dfe3c1ce18370d5700bfe8193bcb09e31a4aed2762e74c3c4e4e5fdb07e3e0e1e007611c3f68d097e41fb8c6601e3a9a107e785905c16ceab84ede2b8db14f4fe1ace58a6142cac89875fd73c4a121ee8515cb1bef5c670400230140c3952834ab39f396aadf4a971acf21ff325dcf99b084a4ce6a0afd0402bb2e17dc13fabf3eb666b43c0184838ec5f156fb313e4d613c781e41b1252574fa03e85983cd48a3724932ff773308fb5ea73642f06bf5e968ed923878e3141668a9894339afbc53a46a6e4a3aaf0eb3a13f88cd99eb54e6166fd88ef3df590a6139d06170e25458569608d2053b603a6fa8ba913e4ab26c9bc3fc4979dd0e114cb9072fb43b7312d9b36c29f1fccd30d48f626b90d7eb61fd830365d53e63fa858dfe472d3c49f33f2de4765f8d33ec28c4efc43e01c0541a383e5d96c1e73125c135123f217577a99eb049d67f003f67073e1367bcbc9c90f7a368800e943fb94c8ec1d2d1a71e03cf58cf9837f3aeb2affa9393b30233f01810335b567429fe09206f721e07ee88e7cf499089636cb1a73506c6f8090a9cd4e466735ff8699f298695db81fd605a14e5cc556473832cb34a48b3721a55e3ddb18625bb921110e586f9b08bd32dd34d45f564dfa2abd8f45fc269f781f6ad9ea8ac3d1fde2a7281388472a24e756fb38225d480d419732e2eb28a3eef3fd4aa145f6a60734305fa95793722ef6bcbd6031d68c96954bdd8c514066faec69b1bce6c9fcc8c1ceed9abdec95d2797872cd373f6ed384e37008e0d1a151c4d5662a433e5b3ad54e571aec34bf6acc5fa9b360203aa1263aa83560b4afd38019e54eee949262c4fb9f8f1d576598ca05e5f1fda65e70f5427d28849dbb5ebe1fb3b32401bd48641fe9db7de7485a319a51c577903e34a93d2b4694e9a1c3e8666d1fd90b68b31a23aed34e64616d9a5f0273627214be87e5712ee27c7ba17133b75f432336974a6846d76df70e82d54498a8890d0ccd661331017e4c94a4c57c2a1b750f268d25dd9e0c073cd2936385d51daaa30b09ea41bd98c79c2b0037afd7df5334af9f5ce2d5b77a28fc2e2617907a98b82635bd1fa4c3d85e52d1c48596e0e7bf08cefd1fe372c0ec3c2b34330f955f91b9e802d5c67a745ca2e434df76fabd7435ff7a98817620eef7e7d62d36f44b97f45ee0cfda012dd0dfe534889e6e4afdf11cb5f1cb1a30a46be0001b4fa8ee0d6065700cf2c6482bd51cb8a2361c4e518d9e184d21619a58615b91b0fefa181dd4fb0af06ee51e5d044d9cd51d369fe4afb14605517d6a8601f83d825172bc40fb6ba98b978f09ca2f2a36aad938fc625b57b91bad5e4c1096ed82ad294359c7a271827468f011a82832c2d7c69bdd3f744e6d46a637f9a02d128d54f91fb57da65d594050ef7976bc623d31d41b84dfa391a3ddda26f580bc0206d9fd34a5aa7ce7d128167a43b24aa28d63f3a9dcf4714747cb78145fe11b85aff95af63635ba338b8d65e09860645c950e1d9a58308e9b8f2ae84fc29f81893b2f17985705827796ac7a6d9ec4ddeae421cf7ceaf19f298e40783194a0ffd6a2f1e9d045d7948667937e1d5b969e5849b1d73671ebd622335ea6b0b2defd4f952a706e5cbd241281895601333ca92631f8db42397357aa49610b5a1adec8d0ad45887e57d986d6ecef3bb231195a811123d03f064fa3bf67491ab4e76f62fa301c9cd7df5ad35099374331fb076e540d35604d45160f06906c4fe5d8590359cc139c3e2c1c731d8c988c3a219a631579fa74d32a1d31c08007139f53dbe457c23fa4368e999d2a76150cbca371222d35be384158dc41c6501800837152351fe6250c7db6e9c2d75b78cdf660f386e102d915cf065dc3e01029996c1c6bf4c8e26b2bc83d633a79dd4cc2b0eceea0b938120f6bcd07a4df596c64f5959bf20302759b683411265c4833035190e672c35c39d2d0904da591a64b053f0a98c2d38c594737c72ad3d8f7fad81b0c55c3322e0b252de391bc9eaa03ff76f02a23805467ec26d92dd2387a2462392afac4fd594cb4d37b48f53bc7b80a6b569dfa5a9d61cbbe4d67b513cc590f63dfbc8c1b9c6738ea296cf8ec9ebb98dd8a5d6300050b2f796b1a1219f7fe516e43dca79f2eea4a3b23dcceb923dd16f6c02293a197ca6c31132689db4b18971d6983051a029b78a099e9f05745237358cc395ea4da5f029208fa4dc43bb808112c9a84f7f7adc1eabc2b372f1e01b0c6968d061336fbf8ca4dacba1c20611913e3d9ce31f9b687b0a7e0f4de56b773b830a8f0a6923647b5154aee760770e7a7a7e03e7f67f61f785ca6596e28c0476333ab6b21bdb63009064a80311e0b2b9ea06ef458e1aaf49f6856c66303e0499bba8edffe6246a47d326609534b25709e3acd1408a223e3d71878576178f356f6da2ad067ee421cf9aa0fcf5cce46d66602f4f6430c75983ca92489e9717309c241dd0b21460dd594a74e7e7a75f4bccb19338494f8e14d68edc3c45c7b03586c4c0cad55e5b768a115a9b2bba95e8f470f1aa4a5c4680a7380b7e6f02465cc7e8ccc7d36369e7357fb6c3a8a8e88556f603b8e6bd93bad47a81701de308a9ee16b2ff3500a93eced072f49c3c8aa3cd260faa37f0eabce23e87e6c3b2434006ceec73090719eec1549450b6bf36274172953d52664cb779f9256113f8e08f459f9dc0025a47473d6611f7eb4e7f5b7a856ba8d6dfad3853666c92a915bb87748099437d6c30d723103a2cfa4b0c69035895a47171172b17284d74563c0b01b063a2dd1167d3d8b18e83ed59f947c45e6dd4ced2ca1c013ac4750a175a7d486e0fec4c7829d54ac5f677dfd81e34a8e1617040f3a2d6c3ab82564ed297d756aadf53cb4d8fbe4082796bffb3f80dd3c8366110906a1998ae4e90ae47a73b3cae5e409754106902658da35cab24934c8ac3a19e81a9d6f899cc4f359d9462766dfccc33b947709b51861bb31f9dc82f9e2be13ce223b54cf0fcad5e96ca1dea1fcf5f39c3b4a7bdce2497159b854bb526af0f4e1332ce93f86ff3a9c508e67ba415087f7b085665d7f9adf1b4cf7971a20f37ed4f7d2665e3001994e9cb697bb4e365dcec369f39ed2e221e64bf274cc5b21d8c5308d4bbe1a12f881255b247ec1dd7a01d94d5827c6bc734d4dd3a758c2e778ad380d9db6e8bf41adfd60dcdf7991496dabe3d1c919f7c781c080d372264ef31da92c91f414b52ee100612ce548a4f7037280d2e96d1f2fb7384fee13a57a0a4556fbdfbb209fed217333d6d416ad3778f849bd9335f3b966b3c14919cdd9da4d82b79ecdd07c641e3c2553f60a8a463a2f27720330eb436ececd02f37f1350573375c472a3db2617adfc35ee46ef6b68b4d9a4f6e4b87d9092cb3025b117999860a354ee5d9930617d1e213adf376e2a18d19f413af33ac52bd9e4d61a7cdef3d1eb32ae06979bbe4bd79678864fe6cfde8bbe53655f4a5d1647f26a1c48d9dddc6f381786514f5d0a80f3e1ba22526837ce7a60085f1d637588d03ba814b2a066a4c5f7ba1dcdb2dc56c700519fe79d52ad807317073df694f3178436331fb6687f690730e32159dc79f81b7cba85cae0b69fc3f8b785d292c7f2626fa2ec0e14e432446d45649278e96af54ed34c21c39486f7a45f758db5f078bcb2639b641ab85d6ada85942e0e8747291791a15debd663fe344e79e50286b36a0e0f9a80689b622b2994d86dec4338afe8bcc82952187eeb0963d666988a38b95557f872094e6388e0ef9df8044695150abb8ddb9ff1caadc99364e2abb2e6cd74f82089c7885a3c062e4c130b523fc3a3deb7736adaa14a10c1c9949aced07836991e080a335ace1e3b49b7fef5e8ef5f0fe41427574b1a61f7aa07b1c6d25ed1ae048594210d006042fb6ef2dc43118c2f0c6225cc0244929a381aaa7470e7f4cf73de70b80bb075b155daac2cae65ba9301e3205c1d3bea51c96d4b5045533d5480b6572c75b9d6f038ab2eb646b33fe9a3c55c6d0cf801e192b2651f412ddcc780852e604a6eb6e50c73ee91cff14efbd14747eb827661a20755afe2fa6e780bae4a8a7dcb77b462307a472e6cfc0f05120c013a84d04a584c10bcdb57de2af3021e2431d49e8bf7844a996f5f4f678cd0f1bcc7e1997c995551b94d5f62efe5090f923ebe9b292eb2a008ffa9f158bb334fb0398b8b274a9c1ae00e45bfd7f435ebe92e4d442537d97691d0bd1668a202d2e2ae2a3f869bcbdc822e1a9a07f9a845b77c46a9b491592825d200b19640d81c57346348f39a082747d7b25e8d6a23dd4e587b08dc2d5884f141ecf637db9f52692f0b7110c00e6c229f96caae9471dd525874a38d3aafd4ee3f3100758fbdb785d18d7d18f454ad33fef2eec8f28a096a2265c616cf946f082d2092cdc464d232afd46275f4dba066051606256eb139c6b0f3b25a82fbe3cea7fd7728fed58f012940c32f3935c2413a91dc9ffb1427f0337ef215afeac4fa27d0a6b17614c5b2ab2979fd0084393a122b11b303f0eaa91931bc1e10c764d9017777f49042f4e6f63df2e9a214b427bb69b700f23c9bea1365b420ffb7885e19be2e7c9f1d8704671a", 0x1000, 0xb55e}], 0x20020, &(0x7f0000000800)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@dax}, {@nodelalloc}, {@orlov}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3ff}}, {@noauto_da_alloc}, {@noquota}, {@usrquota}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, '(.,'}}, {@permit_directio}, {@fsmagic}, {@smackfsroot={'smackfsroot', 0x3d, '!!}-$//'}}]}) pread64(r4, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) perf_event_open(&(0x7f0000000780)={0x5, 0x80, 0x0, 0x9f, 0x1, 0x7, 0x0, 0x401, 0x20400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000740), 0x9}, 0x412, 0x41, 0x10001, 0x0, 0x100000001, 0x6, 0x7, 0x0, 0x2, 0x0, 0x40}, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x401, 0x0, 0x1, {0x0, r3, r4}}, 0xb7) 16:40:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100002, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0) 16:40:37 executing program 1: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) r1 = accept(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x80) accept4$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:40:37 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="0100000000000d143a00c259b97ac7b14dd7469c08000300b665bd8ed4dffd69d653a1c87c7391c6de63d7e6b5e1", @ANYRESOCT=r0, @ANYBLOB="18005a80595fcbc598de699a383ee62f9ffcb84c4368"], 0x34}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000140)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000200)=""/33) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508) fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) r5 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT_ANY(r5, 0x0, 0x14, &(0x7f0000000300)=""/85) 16:40:37 executing program 7: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038679de021f8c801000000000000009d1fa459d07100000000bc7ae631f7a54805ff070000000000093393d0e1c7391515c7ab7c8e0600"}, 0x48, 0x0) r1 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffefb9856842eb69443042c30caac33d7dda6ea62a6b177f00000000c630874d222c8bb47f31ee549b6a921e231ef07ee0f7fca620afa44000"}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000580)='dns_resolver\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000007c0)='{N$pF\x03\xea0\xc9UY\xb1y\x9a\x03\r\xc8y8\xb5\x15\xb2\xa6\x11\x9e\xaf\xd3bj\xd0\xee0%`\xf7\x99\xaa\xa1\x0f\x8a\x0f\x7f\x93#\xd6\xf3\xf3\x03\x8da7\xa6\x95\x01\x80\x00\x00\x00\x00\x00\x00\x90C\x13\xba\x1c0q3\tETN\x80\x83|\x05\xed\xf0\xd2\x9b\xe4\x19\xf9\x7fs\xe9\x97\xc8\xd3_o\xbd\xe2\xbe\x9d\x12\xc7rp\\\x85\xa3\a\xd6\x02\xaf\xc3\xc8\x95\xe0 \xa40x0, &(0x7f0000000140)=0x0) clock_gettime(0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1, 0x1, 0x1}, 0x0) r3 = fork() r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)={0x1000, 0x50, 0x2}, &(0x7f0000000240)='\x00', 0x18, 0x0, 0x23456}, 0x2) rt_sigqueueinfo(r5, 0xa, &(0x7f0000000140)={0x35, 0x80000004, 0x4}) ptrace(0x11, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x111200, 0x0) io_uring_enter(r7, 0x20f4, 0xd4a9, 0x1, &(0x7f0000000040)={[0x4]}, 0x8) ptrace(0x11, r5) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x100000000, 0x6c) ptrace(0x4207, r3) [ 196.769618] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 16:40:37 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) [ 196.820336] loop6: detected capacity change from 0 to 92672 16:40:37 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 16:40:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r4 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r4, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x50}, {r1, 0x520}, {r3, 0x2501}, {0xffffffffffffffff, 0x2004}, {0xffffffffffffffff, 0x10}], 0x5, 0x8) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x11, r1, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x10, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001700)=""/4099, 0xffffff3e, 0xcd04, 0x0, 0xfffffffffffffed7) 16:40:37 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 16:40:37 executing program 1: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) r1 = accept(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x80) accept4$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:40:37 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a69f4629016ba45506826d4b81edd9595a97eb707658cce59f04a4685029e4314f03ee6a66c836a73ae9e825b2c0d238d6edbd0faa04fe7d7bf89175f3a5f9d93bc925d044d91571414e7200f522e1f487eac99e7656842935e515ec99d4d2a053d37f911"], 0x24}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="0100000000000d143a00c259b97ac7b14dd7469c08000300b665bd8ed4dffd69d653a1c87c7391c6de63d7e6b5e1", @ANYRESOCT=r0, @ANYBLOB="18005a80595fcbc598de699a383ee62f9ffcb84c4368"], 0x34}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000140)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000200)=""/33) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508) fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) r5 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT_ANY(r5, 0x0, 0x14, &(0x7f0000000300)=""/85) [ 197.001996] loop1: detected capacity change from 0 to 16776704 16:40:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) [ 197.018466] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 197.090761] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 197.540746] audit: type=1400 audit(1785084037.838:12): avc: denied { ioctl } for pid=4299 comm="syz-executor.6" path="socket:[15462]" dev="sockfs" ino=15462 ioctlcmd=0x8946 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:crypt_device_t:s0 tclass=sock_file permissive=1 [ 197.560253] loop6: detected capacity change from 0 to 92672 [ 197.866318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.867190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.869599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.873156] syz-executor.5 (4356) used greatest stack depth: 23600 bytes left 16:40:49 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a69f4629016ba45506826d4b81edd9595a97eb707658cce59f04a4685029e4314f03ee6a66c836a73ae9e825b2c0d238d6edbd0faa04fe7d7bf89175f3a5f9d93bc925d044d91571414e7200f522e1f487eac99e7656842935e515ec99d4d2a053d37f911"], 0x24}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="0100000000000d143a00c259b97ac7b14dd7469c08000300b665bd8ed4dffd69d653a1c87c7391c6de63d7e6b5e1", @ANYRESOCT=r0, @ANYBLOB="18005a80595fcbc598de699a383ee62f9ffcb84c4368"], 0x34}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000140)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000200)=""/33) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508) fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) r5 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT_ANY(r5, 0x0, 0x14, &(0x7f0000000300)=""/85) 16:40:49 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="3400000000000000000080d92995da5f4b3900"/92]}) fsetxattr$security_selinux(r1, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:crypt_device_t:s0\x00', 0x24, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r0, 0x8000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="340000000000000000007982d7e00000000000000000000000008bf5000000000000000000000000000000000000edffffff00120000000000000000000000000000000000000000000000000000000000000000000000000000000004572c7dbc9dc4863aa597464069ab4da030f89053abf1bcd0f217589dab431913e04275e9d8ebf4f559fbf06a6817515680f2d7cefef7e7af16ac7267df9dfeb492d1dd9af89e0805bcaa535353a2a110ed02acf511c365cc0dfba2de74200c5dc64c58f2a962f8df4ff891e6141dd31e71fb525a4d2eecefbe0db7c4bdbe1ec591e8a5e94e4f"]}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r5 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0xe90, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x6, &(0x7f0000000580)=[{&(0x7f0000000200)="8089f318251f6c9011a9640496baa1d55a919d12d7ca2e2d0cef6483aae75bcd2bdaf105cd8cec989616c655202ec008244ca2e9507296debb2c447f7a591a159c1b559bd5e2c105fdd09e4673cb000708aec4565663ac7445ae322eaee3a0a234da30577e8cc5a738f4f4417f93f9015a6433bd660f0dea8cc6861cc2db8b5cf1f1bfe18aa1ef1b1ea13cb97a32375f9ad27bce8575b11b6dffde8bead0474e80e1aa607153b883732623c986cfcfadff982c10d766", 0xb6, 0x7}, {&(0x7f00000002c0)="63d1a7a3c82b3a3005a17efb81e18a855b81e68d83dba1444392d7a5000af632b074a962d5b17c4272b71cc426268df78b1f60228c74b3d62d7b4128d60198be7ba1c85b9bf8cbf1e9fa2b66cc457e98aeef209d7e4b0f468a3d194a7e77645d51fa29a1731ab4e26e0d1b538f358f919c5b0797ec8997", 0x77, 0x2}, {&(0x7f0000000340)="8421bc395a5f96551898ce10577ab232209e9c63c2efeab88077639eeb0c943720e4eadd1b52c2e2a00d8519666467563cee9d2b9f5a8a9c5147feb0c8ae8c19e30028b9dcf1d7e9aa6e89bca083a2156542503ffd0c26af648fbb32206263ca89872606b646c2dc65a738f9a175ee7b3861e7a341dfa2cf6be58cde009a4e3deb99b0aa5ba632e5707f374461fc0860945fc8e6118fac57e224cefbf9359ad6d01657d5c4e25ab11a0bfc127d523ac7e7663f7c165fe0ad2c284b44bf31b5d4f5015dd764c8413f66c4b13a62e1a0aed5cf94b137e0bf4497139a6aa8741d73f2853b08bcee4c1d", 0xe8, 0x8}, {&(0x7f0000000440)="be71d5d6b090b495c2af68afd92343b52b366ad4394ef658e69a96efde34990fa7508d0a4a7a878bc0eb5d40652d25d2ef1abbdf53e34ce202de9fe3f4b0957099cdda85bf38adf0d4ba6b3bae2656c9ea01244a6a567a4b8f6ade349747df75e23a11c131dd", 0x66, 0x98a}, {&(0x7f00000004c0)="0ea5313a7700e6de23fce8784cbfad03edacc5a17cf72afdb83d06ed53e77d9e133ac1153c82181cf12f36214e6bd965c0b7d75bfd62c5c71d2ef51f79391e694090d684918bc88ff8e277b3fe785257c47744b4b1d49a6335c5f2c77a4eac0ab33615066d35b6a062ce2b1d4cb5668a8e3809328ea04702df6b17064fffa8b58412ce7a1bc13b1dc06c0d5d6c479fabd04a2113a42e590b1fcc3aa55b865c9c5df021498012656611", 0xa9, 0xc00}, {&(0x7f0000002100)="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", 0x1000, 0xb55e}], 0x20020, &(0x7f0000000800)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@dax}, {@nodelalloc}, {@orlov}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3ff}}, {@noauto_da_alloc}, {@noquota}, {@usrquota}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, '(.,'}}, {@permit_directio}, {@fsmagic}, {@smackfsroot={'smackfsroot', 0x3d, '!!}-$//'}}]}) pread64(r4, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) perf_event_open(&(0x7f0000000780)={0x5, 0x80, 0x0, 0x9f, 0x1, 0x7, 0x0, 0x401, 0x20400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000740), 0x9}, 0x412, 0x41, 0x10001, 0x0, 0x100000001, 0x6, 0x7, 0x0, 0x2, 0x0, 0x40}, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x401, 0x0, 0x1, {0x0, r3, r4}}, 0xb7) 16:40:49 executing program 4: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038679de021f8c801000000000000009d1fa459d07100000000bc7ae631f7a54805ff070000000000093393d0e1c7391515c7ab7c8e0600"}, 0x48, 0x0) r1 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffefb9856842eb69443042c30caac33d7dda6ea62a6b177f00000000c630874d222c8bb47f31ee549b6a921e231ef07ee0f7fca620afa44000"}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000580)='dns_resolver\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000007c0)='{N$pF\x03\xea0\xc9UY\xb1y\x9a\x03\r\xc8y8\xb5\x15\xb2\xa6\x11\x9e\xaf\xd3bj\xd0\xee0%`\xf7\x99\xaa\xa1\x0f\x8a\x0f\x7f\x93#\xd6\xf3\xf3\x03\x8da7\xa6\x95\x01\x80\x00\x00\x00\x00\x00\x00\x90C\x13\xba\x1c0q3\tETN\x80\x83|\x05\xed\xf0\xd2\x9b\xe4\x19\xf9\x7fs\xe9\x97\xc8\xd3_o\xbd\xe2\xbe\x9d\x12\xc7rp\\\x85\xa3\a\xd6\x02\xaf\xc3\xc8\x95\xe0 \xa40x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$snapshot(r6, &(0x7f0000000500)=""/227, 0xe3) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x9, 0x9, 0x1, 0x8, 0x0, 0x62f2, 0x4000, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x4, 0x7f}, 0x400, 0x0, 0x7, 0x5, 0x9, 0x5, 0x7f, 0x0, 0xfffffff9, 0x0, 0x8f85}, r5, 0x7, r7, 0x3) 16:40:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 16:40:50 executing program 1: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) accept(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:40:50 executing program 7: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038679de021f8c801000000000000009d1fa459d07100000000bc7ae631f7a54805ff070000000000093393d0e1c7391515c7ab7c8e0600"}, 0x48, 0x0) r1 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffefb9856842eb69443042c30caac33d7dda6ea62a6b177f00000000c630874d222c8bb47f31ee549b6a921e231ef07ee0f7fca620afa44000"}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000580)='dns_resolver\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000007c0)='{N$pF\x03\xea0\xc9UY\xb1y\x9a\x03\r\xc8y8\xb5\x15\xb2\xa6\x11\x9e\xaf\xd3bj\xd0\xee0%`\xf7\x99\xaa\xa1\x0f\x8a\x0f\x7f\x93#\xd6\xf3\xf3\x03\x8da7\xa6\x95\x01\x80\x00\x00\x00\x00\x00\x00\x90C\x13\xba\x1c0q3\tETN\x80\x83|\x05\xed\xf0\xd2\x9b\xe4\x19\xf9\x7fs\xe9\x97\xc8\xd3_o\xbd\xe2\xbe\x9d\x12\xc7rp\\\x85\xa3\a\xd6\x02\xaf\xc3\xc8\x95\xe0 \xa4r1, {0x1}}, './file1\x00'}) openat(r3, &(0x7f0000000580)='./file1\x00', 0x86000, 0xa4) open_by_handle_at(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYRESOCT], 0x901440) getpeername$inet(r2, &(0x7f00000000c0), &(0x7f0000000300)=0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}}, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x400, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, 0x0, 0x1}, 0xff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xa}, 0x4b58, 0xfffffffffffffffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0xb) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1f95f24aa78fef82c889a74111"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3b79f356aa"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x6) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x3, 0x7a93, 0x8, 0x7, 0x2, 0x1ff}, {0x10000, 0x200, 0x9, 0x8, 0xffff, 0xf6e}], ['\x00']}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={0x3f8, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x3f8}}, 0x0) 16:40:50 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:40:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) [ 210.118904] netlink: 996 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.203938] netlink: 996 bytes leftover after parsing attributes in process `syz-executor.3'. 16:40:50 executing program 7: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) accept(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:40:50 executing program 4: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038679de021f8c801000000000000009d1fa459d07100000000bc7ae631f7a54805ff070000000000093393d0e1c7391515c7ab7c8e0600"}, 0x48, 0x0) r1 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffefb9856842eb69443042c30caac33d7dda6ea62a6b177f00000000c630874d222c8bb47f31ee549b6a921e231ef07ee0f7fca620afa44000"}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000580)='dns_resolver\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000007c0)='{N$pF\x03\xea0\xc9UY\xb1y\x9a\x03\r\xc8y8\xb5\x15\xb2\xa6\x11\x9e\xaf\xd3bj\xd0\xee0%`\xf7\x99\xaa\xa1\x0f\x8a\x0f\x7f\x93#\xd6\xf3\xf3\x03\x8da7\xa6\x95\x01\x80\x00\x00\x00\x00\x00\x00\x90C\x13\xba\x1c0q3\tETN\x80\x83|\x05\xed\xf0\xd2\x9b\xe4\x19\xf9\x7fs\xe9\x97\xc8\xd3_o\xbd\xe2\xbe\x9d\x12\xc7rp\\\x85\xa3\a\xd6\x02\xaf\xc3\xc8\x95\xe0 \xa40x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$snapshot(r5, &(0x7f0000000500)=""/227, 0xe3) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:41:03 executing program 7: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) accept(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 222.780733] loop5: detected capacity change from 0 to 16776704 16:41:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4005) syz_io_uring_setup(0x80002b7c, &(0x7f00000001c0)={0x0, 0x3, 0x8, 0x0, 0xea}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) [ 222.821838] loop7: detected capacity change from 0 to 16776704 [ 222.825343] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 16:41:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) [ 222.928341] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 222.941107] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 16:41:03 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/exec\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) dup3(r1, r3, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000180)) r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]) statx(r4, &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000480)) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x4f52) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd, 0x0, 0x0, 0x401, 0x0, 0x1}, 0xb7) openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x2, 0x4, {}, 0x78, 0x5, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x100) 16:41:03 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000380)=0xbc) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000180)) r3 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0xa7a, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x3}, {&(0x7f0000000440)="2fa9c58ea930e648aa191153d1e7ce9b9d0a25ffd80897b82538b4ae686d9ae512fbdc894264f0c0043d68627468f8dcdb18fa463bd3326d83d53ac41c668ecbe1e3000000", 0x45, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]) statx(r4, &(0x7f00000003c0)='./file0\x00', 0x6000, 0x80, &(0x7f0000000580)) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000680), 0x200410, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000240), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r5, 0xffffffffffffffff) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000400)={'ip6_vti0\x00'}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 16:41:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 223.188291] loop1: detected capacity change from 0 to 16776704 16:41:03 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:03 executing program 7: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) accept(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 223.208580] loop5: detected capacity change from 0 to 16776704 [ 223.219815] loop7: detected capacity change from 0 to 16776704 16:41:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) [ 223.242683] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 223.275976] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 223.276094] loop6: detected capacity change from 0 to 16776704 [ 223.290100] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 16:41:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 223.354543] EXT4-fs (loop6): Unrecognized mount option "â" or missing value [ 223.431069] loop3: detected capacity change from 0 to 16896 [ 223.566390] loop6: detected capacity change from 0 to 16776704 [ 223.578472] EXT4-fs (loop6): Unrecognized mount option "â" or missing value [ 223.599054] loop1: detected capacity change from 0 to 16776704 [ 223.636102] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 224.042241] EXT4-fs (loop3): Unrecognized mount option "Í [ 224.042241] ÓBÿBU…^U^Á|»6Ç+«Ø8mâ" or missing value 16:41:16 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/exec\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) dup3(r1, r3, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000180)) r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="e20600639503c13f0808002ef77354f41ff86368fde48a7a5ffc6047fcd4668197d1da2dda4c712c3d300c4dcf8b73b6d9d6cefe4e98ed34d46875e68eda5560edd3805604af108775c4569ff63aa46942aa7eb1c75a9d3ef3a31997f14902ac1367f8cc1a279b7debdf348a2fb2b9caa1daf117294e446fc6d1e0c7afcc9c0cad9e1db6549e30ee731bf5b880ce0a80c94df98073d84e39f59e115303c92cda5bed93c45868ac9dc99fa286c05a0b10883dcf93fab63ab9c52a9ace8443ac596c9fb16fad91d8a87d2584cb810bd22dd14a17e159ccd8fd83d3217140b3141b92b25bd9ef71ea053cba2a200f509f357b06ac8289edacb2f303f0d0b4d31c43ea769035d2a79e0000000000000000000000000000005d035d60a190675ec7bff3d313ea1edbb7a8dec5cc72039203860bd05d02bb598ed2244c39646525b3bd22765cd182f970098ed0043f067b12e4419219655548fb4625f25e03b3a0aa476a0db35229cfa11e7c1c0b9af7be3adf3416ede021b072bfffc04d9ed984ece12e818bdc9c54c632c79630fca28a25f99266ba5eb800000000000000000000000000000000b672a85ff9404c3fe53215edbb7841c8ce6f82dbb2f778c3d00e37eadc093afe269d12b93b2f6465da"]) statx(r4, &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000480)) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x4f52) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd, 0x0, 0x0, 0x401, 0x0, 0x1}, 0xb7) openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x2, 0x4, {}, 0x78, 0x5, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x100) 16:41:16 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:16 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$snapshot(r5, &(0x7f0000000500)=""/227, 0xe3) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:41:16 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/exec\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) dup3(r1, r3, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000180)) r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]) statx(r4, &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000480)) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x4f52) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd, 0x0, 0x0, 0x401, 0x0, 0x1}, 0xb7) openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x2, 0x4, {}, 0x78, 0x5, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x100) [ 236.187434] loop7: detected capacity change from 0 to 16776704 16:41:16 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:41:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 16:41:16 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 236.207452] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 236.232305] loop5: detected capacity change from 0 to 16776704 16:41:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) [ 236.267897] loop1: detected capacity change from 0 to 16776704 [ 236.301200] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 236.323257] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 236.340547] loop7: detected capacity change from 0 to 16776704 [ 236.351165] loop6: detected capacity change from 0 to 16776704 16:41:16 executing program 1: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 236.380805] EXT4-fs (loop6): Unrecognized mount option "â" or missing value [ 236.395499] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 16:41:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 16:41:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 236.454051] loop3: detected capacity change from 0 to 16776704 [ 236.462813] loop1: detected capacity change from 0 to 16776704 16:41:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) [ 236.504549] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 16:41:16 executing program 1: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 236.529001] loop5: detected capacity change from 0 to 16776704 [ 236.546667] loop7: detected capacity change from 0 to 16776704 [ 236.555960] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 236.578592] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 236.611382] loop1: detected capacity change from 0 to 16776704 [ 236.637780] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 16:41:31 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:41:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:31 executing program 4: syz_io_uring_setup(0x75a, 0x0, &(0x7f00003b4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000740000/0x3000)=nil, &(0x7f00003cd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x40, 0x1000, 0x1}, 0x0) r3 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r6, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/152, 0x98}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x3, &(0x7f0000001640)=""/246, 0xf6}, 0x0, 0x10140, 0x0, {0x2}}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00009ab000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r9 = syz_io_uring_setup(0x1d59, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r13 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r13, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x4000, @fd_index=0x1, 0x1}, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10002, 0x23456, {0x0, r12}}, 0x3f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 16:41:31 executing program 6: mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/169) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 16:41:31 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffd, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0xb0}], 0x1, 0x0, 0x1}, 0x0) r0 = syz_io_uring_setup(0x39e, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x3a0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00008eb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="eaffffff43bd2853e9000000002e2f66"]) 16:41:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 16:41:31 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:31 executing program 1: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 250.876650] loop7: detected capacity change from 0 to 16776704 [ 250.933957] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 16:41:31 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 250.958430] loop5: detected capacity change from 0 to 16776704 [ 250.974908] loop1: detected capacity change from 0 to 16776704 [ 251.079592] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 251.117305] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 16:41:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000100)) 16:41:31 executing program 7: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:31 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:31 executing program 4: syz_io_uring_setup(0x75a, 0x0, &(0x7f00003b4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000740000/0x3000)=nil, &(0x7f00003cd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x40, 0x1000, 0x1}, 0x0) r3 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r6, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/152, 0x98}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x3, &(0x7f0000001640)=""/246, 0xf6}, 0x0, 0x10140, 0x0, {0x2}}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00009ab000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r9 = syz_io_uring_setup(0x1d59, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r13 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r13, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x4000, @fd_index=0x1, 0x1}, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10002, 0x23456, {0x0, r12}}, 0x3f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 16:41:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000100)) 16:41:31 executing program 7: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 251.504196] loop7: detected capacity change from 0 to 16776704 [ 251.538828] loop5: detected capacity change from 0 to 16776704 [ 251.554162] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 251.561307] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 16:41:44 executing program 4: syz_io_uring_setup(0x75a, 0x0, &(0x7f00003b4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000740000/0x3000)=nil, &(0x7f00003cd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x40, 0x1000, 0x1}, 0x0) r3 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r6, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/152, 0x98}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x3, &(0x7f0000001640)=""/246, 0xf6}, 0x0, 0x10140, 0x0, {0x2}}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00009ab000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r9 = syz_io_uring_setup(0x1d59, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r13 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r13, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x4000, @fd_index=0x1, 0x1}, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10002, 0x23456, {0x0, r12}}, 0x3f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 16:41:44 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:44 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="39730549f4635c8f4352262fe26b4415b2c11f4f59a80161aceb0e3deee77a26dfd3fb601ac7cc5dd73961f4346e691b24bfbac5840c01f09c432f6f15012e6f1e0a1200564abdfbdc91e0df5b02a38d96798bbb5a119e88dd46ed98ccbbc7faee19b966aec28453cc7c2cf0337587f3f30625f31f68f001bcdeaf0a0db281197e6f66b42b04781be6c69386a90c04d11820574a3deba907536947d2a5a135ea0ef80d882d13472ec466668385309924d9c185d0900b18f39a5a76421c447e4f1ca84f3b08bada7918b69a85bcbf1b97f162c44eaeb160a2562d11dbe2cba69003f0c6bd0263caf6ce0d4ac11282739bc4dbff91beca88d4c9cfb5844a6a1fe99268286fec6ce82271f73bc58cde24d186afdb91b177f4baa03b5f4ce0a6ece629117bc6b872ab41a77c050074000000000004001900140179800c0089000200000000000000f4ce6b0a9517dfdf734e18f13915287697bf4a60659419d3ad092c22f8a4e642c3fa05e8dc52c469c4eb6e5f35195c006516e165bd11381fd76fa2b21e1ec36a9a41913870e169a755501be2d85dd8a8f1a90296f2c0275238338e0a632077a21b19b1c4965ca8dba07b62a65d71201e0c0cedad01b7ff51f29b0187fc33c5bbf29302f0913443614971a81ee0f5c0496d9336962b798749cbd6df731c9eb6554d56ab825cd13415e8428a084926dbdfda06da9e5a9eb0818b0735d88b06fcde503b28776a6935b59038b61c5724b6b9a7e068cf42ecbb18ec40eb97b4b5f43cc8f907b5f4dca007336eba85727d6037e67d7b0c10d08e9c9c01455431ed8555038e327d"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:41:44 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffd, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0xb0}], 0x1, 0x0, 0x1}, 0x0) r0 = syz_io_uring_setup(0x39e, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x3a0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00008eb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="eaffffff43bd2853e9000000002e2f66"]) 16:41:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000100)) 16:41:44 executing program 7: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:44 executing program 5: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:44 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 263.765560] loop7: detected capacity change from 0 to 16776704 [ 263.774757] loop5: detected capacity change from 0 to 16776704 [ 263.781637] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 263.785245] loop1: detected capacity change from 0 to 16776704 16:41:44 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:44 executing program 4: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:44 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="39730549f4635c8f4352262fe26b4415b2c11f4f59a80161aceb0e3deee77a26dfd3fb601ac7cc5dd73961f4346e691b24bfbac5840c01f09c432f6f15012e6f1e0a1200564abdfbdc91e0df5b02a38d96798bbb5a119e88dd46ed98ccbbc7faee19b966aec28453cc7c2cf0337587f3f30625f31f68f001bcdeaf0a0db281197e6f66b42b04781be6c69386a90c04d11820574a3deba907536947d2a5a135ea0ef80d882d13472ec466668385309924d9c185d0900b18f39a5a76421c447e4f1ca84f3b08bada7918b69a85bcbf1b97f162c44eaeb160a2562d11dbe2cba69003f0c6bd0263caf6ce0d4ac11282739bc4dbff91beca88d4c9cfb5844a6a1fe99268286fec6ce82271f73bc58cde24d186afdb91b177f4baa03b5f4ce0a6ece629117bc6b872ab41a77c050074000000000004001900140179800c0089000200000000000000f4ce6b0a9517dfdf734e18f13915287697bf4a60659419d3ad092c22f8a4e642c3fa05e8dc52c469c4eb6e5f35195c006516e165bd11381fd76fa2b21e1ec36a9a41913870e169a755501be2d85dd8a8f1a90296f2c0275238338e0a632077a21b19b1c4965ca8dba07b62a65d71201e0c0cedad01b7ff51f29b0187fc33c5bbf29302f0913443614971a81ee0f5c0496d9336962b798749cbd6df731c9eb6554d56ab825cd13415e8428a084926dbdfda06da9e5a9eb0818b0735d88b06fcde503b28776a6935b59038b61c5724b6b9a7e068cf42ecbb18ec40eb97b4b5f43cc8f907b5f4dca007336eba85727d6037e67d7b0c10d08e9c9c01455431ed8555038e327d"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 263.857884] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 263.870653] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 16:41:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), 0x0) [ 263.907957] loop4: detected capacity change from 0 to 16776704 16:41:44 executing program 5: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:44 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 263.920063] loop7: detected capacity change from 0 to 16776704 [ 263.933651] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 263.942187] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 263.961424] loop1: detected capacity change from 0 to 16776704 [ 263.967475] loop5: detected capacity change from 0 to 16776704 16:41:44 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:44 executing program 4: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 264.001796] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 16:41:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), 0x0) [ 264.040384] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 264.071886] loop4: detected capacity change from 0 to 16776704 [ 264.080802] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 264.089128] loop7: detected capacity change from 0 to 16776704 [ 264.113428] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 16:41:56 executing program 5: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:56 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:56 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="39730549f4635c8f4352262fe26b4415b2c11f4f59a80161aceb0e3deee77a26dfd3fb601ac7cc5dd73961f4346e691b24bfbac5840c01f09c432f6f15012e6f1e0a1200564abdfbdc91e0df5b02a38d96798bbb5a119e88dd46ed98ccbbc7faee19b966aec28453cc7c2cf0337587f3f30625f31f68f001bcdeaf0a0db281197e6f66b42b04781be6c69386a90c04d11820574a3deba907536947d2a5a135ea0ef80d882d13472ec466668385309924d9c185d0900b18f39a5a76421c447e4f1ca84f3b08bada7918b69a85bcbf1b97f162c44eaeb160a2562d11dbe2cba69003f0c6bd0263caf6ce0d4ac11282739bc4dbff91beca88d4c9cfb5844a6a1fe99268286fec6ce82271f73bc58cde24d186afdb91b177f4baa03b5f4ce0a6ece629117bc6b872ab41a77c050074000000000004001900140179800c0089000200000000000000f4ce6b0a9517dfdf734e18f13915287697bf4a60659419d3ad092c22f8a4e642c3fa05e8dc52c469c4eb6e5f35195c006516e165bd11381fd76fa2b21e1ec36a9a41913870e169a755501be2d85dd8a8f1a90296f2c0275238338e0a632077a21b19b1c4965ca8dba07b62a65d71201e0c0cedad01b7ff51f29b0187fc33c5bbf29302f0913443614971a81ee0f5c0496d9336962b798749cbd6df731c9eb6554d56ab825cd13415e8428a084926dbdfda06da9e5a9eb0818b0735d88b06fcde503b28776a6935b59038b61c5724b6b9a7e068cf42ecbb18ec40eb97b4b5f43cc8f907b5f4dca007336eba85727d6037e67d7b0c10d08e9c9c01455431ed8555038e327d"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:41:56 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:41:56 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:56 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10010, r3, 0xa2540000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x200000a, 0x120812, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) pread64(r3, &(0x7f0000000080), 0x0, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff9, 0x3, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000280), 0x0, 0x100000000}, {&(0x7f0000000500)="8aea8f036ed2bc08af3d5c84302e8aea94e8f672691f64679348a7c9dea3f5fffabf0d263fc243c5f5455a58c13203ca1628386b2ef7ede9e13918fd9b971669db0c1d0e8a2eca0eab9f8ad07202167f6d94758ce908371801ae84aa6778846168bf6d75e5c641e1415e4f6a781a09dd53f4b2739e528e7d47c128b20cde488fa3f9ff449e20bc20cb9e3e40048879ac258d7c", 0x93}], 0x1000, &(0x7f0000001700)={[{@block}, {@map_acorn}, {}, {@nojoliet}], [{@dont_measure}, {@dont_appraise}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@seclabel}, {@fsname={'fsname', 0x3d, '!).@,%\x15,\xc9'}}, {@smackfsroot={'smackfsroot', 0x3d, ']{%&}\'!\\}(#$\\\xe9'}}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '/proc/stat\x00'}}, {@permit_directio}]}) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:41:56 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:41:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), 0x0) [ 276.458164] loop7: detected capacity change from 0 to 16776704 [ 276.466146] loop5: detected capacity change from 0 to 16776704 [ 276.471330] loop4: detected capacity change from 0 to 135266304 [ 276.492082] loop1: detected capacity change from 0 to 16776704 [ 276.515791] loop4: detected capacity change from 0 to 135266304 [ 276.521605] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 276.522130] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 276.525743] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 16:41:56 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 276.609383] loop1: detected capacity change from 0 to 16776704 [ 276.614874] loop5: detected capacity change from 0 to 16776704 16:41:56 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:56 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 1) 16:41:56 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 276.664942] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 276.675570] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 16:41:56 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 276.717049] FAULT_INJECTION: forcing a failure. [ 276.717049] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 276.719517] CPU: 1 PID: 4815 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 276.720922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 276.722613] Call Trace: [ 276.723188] dump_stack+0x107/0x167 [ 276.723945] should_fail.cold+0x5/0xa [ 276.724733] _copy_from_user+0x2e/0x1b0 [ 276.725556] io_uring_setup+0x9b/0x2980 [ 276.726399] ? __mutex_unlock_slowpath+0xe1/0x600 [ 276.727410] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 276.728715] ? wait_for_completion_io+0x270/0x270 [ 276.729717] ? perf_trace_preemptirq_template+0x26d/0x400 [ 276.731141] ? perf_trace_preemptirq_template+0x26d/0x400 [ 276.731245] loop7: detected capacity change from 0 to 16776704 [ 276.732272] ? rcu_read_lock_any_held+0x75/0xa0 [ 276.732293] ? __traceiter_irq_enable+0xc0/0xc0 [ 276.735109] ? __traceiter_irq_enable+0xc0/0xc0 16:41:57 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 276.736187] ? fput_many+0x2f/0x1a0 [ 276.737117] ? trace_rcu_dyntick+0x2f/0x170 [ 276.738094] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 276.739206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 276.740360] do_syscall_64+0x33/0x40 [ 276.741160] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 276.742213] RIP: 0033:0x7f77bfc9fb19 [ 276.742997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 276.747047] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 276.748721] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 276.750268] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 276.751842] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 276.753387] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 276.754950] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:41:57 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 276.775042] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 16:41:57 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 276.806040] loop5: detected capacity change from 0 to 16776704 [ 276.830752] loop1: detected capacity change from 0 to 16776704 16:41:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 2) [ 276.848499] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 276.849801] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 276.875922] FAULT_INJECTION: forcing a failure. [ 276.875922] name failslab, interval 1, probability 0, space 0, times 1 [ 276.877271] CPU: 0 PID: 4830 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 276.878049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 276.878992] Call Trace: [ 276.879340] dump_stack+0x107/0x167 [ 276.879757] should_fail.cold+0x5/0xa [ 276.880192] ? io_uring_setup+0x258/0x2980 [ 276.880672] should_failslab+0x5/0x20 [ 276.881110] kmem_cache_alloc_trace+0x55/0x320 [ 276.881632] io_uring_setup+0x258/0x2980 [ 276.882100] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 276.882679] ? perf_trace_preemptirq_template+0x266/0x400 [ 276.883311] ? perf_trace_preemptirq_template+0x26d/0x400 [ 276.883940] ? perf_trace_preemptirq_template+0x26d/0x400 [ 276.884582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 276.885188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 276.885782] do_syscall_64+0x33/0x40 [ 276.886210] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 276.886795] RIP: 0033:0x7f77bfc9fb19 [ 276.887229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 276.889333] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 276.890201] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 276.891021] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 276.891846] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 276.892663] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 276.893483] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 276.895715] loop7: detected capacity change from 0 to 16776704 [ 276.924452] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 16:41:57 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:41:57 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:41:57 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:57 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:57 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:41:57 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:41:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 3) [ 277.335932] loop1: detected capacity change from 0 to 16776704 [ 277.341571] FAULT_INJECTION: forcing a failure. [ 277.341571] name failslab, interval 1, probability 0, space 0, times 0 [ 277.341599] loop7: detected capacity change from 0 to 16776704 [ 277.344042] CPU: 1 PID: 4845 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 277.346232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 277.348098] Call Trace: [ 277.348694] dump_stack+0x107/0x167 [ 277.349499] should_fail.cold+0x5/0xa [ 277.350337] ? create_object.isra.0+0x3a/0xa30 [ 277.351358] should_failslab+0x5/0x20 [ 277.352202] kmem_cache_alloc+0x5b/0x310 [ 277.353101] create_object.isra.0+0x3a/0xa30 [ 277.354076] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 277.355213] kmem_cache_alloc_trace+0x151/0x320 [ 277.356265] io_uring_setup+0x258/0x2980 [ 277.357179] ? __mutex_unlock_slowpath+0xe1/0x600 [ 277.358257] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 277.359389] ? wait_for_completion_io+0x270/0x270 [ 277.360462] ? perf_trace_preemptirq_template+0x26d/0x400 [ 277.361679] ? perf_trace_preemptirq_template+0x26d/0x400 [ 277.362923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 277.364110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 277.365274] do_syscall_64+0x33/0x40 [ 277.366114] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 277.367277] RIP: 0033:0x7f77bfc9fb19 [ 277.368112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 277.372324] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 277.374074] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 277.375728] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 277.377372] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 277.379009] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 277.380666] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 277.382917] loop5: detected capacity change from 0 to 16776704 16:41:57 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 277.425358] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 16:41:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 4) 16:41:57 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 277.488773] loop7: detected capacity change from 0 to 16776704 [ 277.489312] FAULT_INJECTION: forcing a failure. [ 277.489312] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 277.492211] CPU: 1 PID: 4882 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 277.493709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 277.495530] Call Trace: [ 277.496111] dump_stack+0x107/0x167 [ 277.496906] should_fail.cold+0x5/0xa [ 277.497744] __alloc_pages_nodemask+0x182/0x600 [ 277.498756] ? lock_release+0x680/0x680 [ 277.499629] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 277.500937] ? lock_downgrade+0x6d0/0x6d0 [ 277.501861] ? rcu_nmi_exit+0x71/0xe0 [ 277.502696] alloc_pages_current+0x187/0x280 [ 277.503693] kmalloc_order+0x35/0x160 [ 277.504544] kmalloc_order_trace+0x14/0xa0 [ 277.505489] io_uring_setup+0x33c/0x2980 [ 277.506399] ? __mutex_unlock_slowpath+0xe1/0x600 [ 277.507486] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 277.508611] ? wait_for_completion_io+0x270/0x270 [ 277.509684] ? perf_trace_preemptirq_template+0x26d/0x400 [ 277.510906] ? perf_trace_preemptirq_template+0x26d/0x400 [ 277.512167] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 277.513349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 277.514513] do_syscall_64+0x33/0x40 [ 277.515359] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 277.516515] RIP: 0033:0x7f77bfc9fb19 [ 277.517350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 277.521508] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 277.523233] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 277.524842] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 277.526450] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 277.528068] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 277.529674] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:42:12 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="39730549f4635c8f4352262fe26b4415b2c11f4f59a80161aceb0e3deee77a26dfd3fb601ac7cc5dd73961f4346e691b24bfbac5840c01f09c432f6f15012e6f1e0a1200564abdfbdc91e0df5b02a38d96798bbb5a119e88dd46ed98ccbbc7faee19b966aec28453cc7c2cf0337587f3f30625f31f68f001bcdeaf0a0db281197e6f66b42b04781be6c69386a90c04d11820574a3deba907536947d2a5a135ea0ef80d882d13472ec466668385309924d9c185d0900b18f39a5a76421c447e4f1ca84f3b08bada7918b69a85bcbf1b97f162c44eaeb160a2562d11dbe2cba69003f0c6bd0263caf6ce0d4ac11282739bc4dbff91beca88d4c9cfb5844a6a1fe99268286fec6ce82271f73bc58cde24d186afdb91b177f4baa03b5f4ce0a6ece629117bc6b872ab41a77c050074000000000004001900140179800c0089000200000000000000f4ce6b0a9517dfdf734e18f13915287697bf4a60659419d3ad092c22f8a4e642c3fa05e8dc52c469c4eb6e5f35195c006516e165bd11381fd76fa2b21e1ec36a9a41913870e169a755501be2d85dd8a8f1a90296f2c0275238338e0a632077a21b19b1c4965ca8dba07b62a65d71201e0c0cedad01b7ff51f29b0187fc33c5bbf29302f0913443614971a81ee0f5c0496d9336962b798749cbd6df731c9eb6554d56ab825cd13415e8428a084926dbdfda06da9e5a9eb0818b0735d88b06fcde503b28776a6935b59038b61c5724b6b9a7e068cf42ecbb18ec40eb97b4b5f43cc8f907b5f4dca007336eba85727d6037e67d7b0c10d08e9c9c01455431ed8555038e327d"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:42:12 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:42:12 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:42:12 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:42:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 5) 16:42:12 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="39730549f4635c8f4352262fe26b4415b2c11f4f59a80161aceb0e3deee77a26dfd3fb601ac7cc5dd73961f4346e691b24bfbac5840c01f09c432f6f15012e6f1e0a1200564abdfbdc91e0df5b02a38d96798bbb5a119e88dd46ed98ccbbc7faee19b966aec28453cc7c2cf0337587f3f30625f31f68f001bcdeaf0a0db281197e6f66b42b04781be6c69386a90c04d11820574a3deba907536947d2a5a135ea0ef80d882d13472ec466668385309924d9c185d0900b18f39a5a76421c447e4f1ca84f3b08bada7918b69a85bcbf1b97f162c44eaeb160a2562d11dbe2cba69003f0c6bd0263caf6ce0d4ac11282739bc4dbff91beca88d4c9cfb5844a6a1fe99268286fec6ce82271f73bc58cde24d186afdb91b177f4baa03b5f4ce0a6ece629117bc6b872ab41a77c050074000000000004001900140179800c0089000200000000000000f4ce6b0a9517dfdf734e18f13915287697bf4a60659419d3ad092c22f8a4e642c3fa05e8dc52c469c4eb6e5f35195c006516e165bd11381fd76fa2b21e1ec36a9a41913870e169a755501be2d85dd8a8f1a90296f2c0275238338e0a632077a21b19b1c4965ca8dba07b62a65d71201e0c0cedad01b7ff51f29b0187fc33c5bbf29302f0913443614971a81ee0f5c0496d9336962b798749cbd6df731c9eb6554d56ab825cd13415e8428a084926dbdfda06da9e5a9eb0818b0735d88b06fcde503b28776a6935b59038b61c5724b6b9a7e068cf42ecbb18ec40eb97b4b5f43cc8f907b5f4dca007336eba85727d6037e67d7b0c10d08e9c9c01455431ed8555038e327d"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:42:12 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="39730549f4635c8f4352262fe26b4415b2c11f4f59a80161aceb0e3deee77a26dfd3fb601ac7cc5dd73961f4346e691b24bfbac5840c01f09c432f6f15012e6f1e0a1200564abdfbdc91e0df5b02a38d96798bbb5a119e88dd46ed98ccbbc7faee19b966aec28453cc7c2cf0337587f3f30625f31f68f001bcdeaf0a0db281197e6f66b42b04781be6c69386a90c04d11820574a3deba907536947d2a5a135ea0ef80d882d13472ec466668385309924d9c185d0900b18f39a5a76421c447e4f1ca84f3b08bada7918b69a85bcbf1b97f162c44eaeb160a2562d11dbe2cba69003f0c6bd0263caf6ce0d4ac11282739bc4dbff91beca88d4c9cfb5844a6a1fe99268286fec6ce82271f73bc58cde24d186afdb91b177f4baa03b5f4ce0a6ece629117bc6b872ab41a77c050074000000000004001900140179800c0089000200000000000000f4ce6b0a9517dfdf734e18f13915287697bf4a60659419d3ad092c22f8a4e642c3fa05e8dc52c469c4eb6e5f35195c006516e165bd11381fd76fa2b21e1ec36a9a41913870e169a755501be2d85dd8a8f1a90296f2c0275238338e0a632077a21b19b1c4965ca8dba07b62a65d71201e0c0cedad01b7ff51f29b0187fc33c5bbf29302f0913443614971a81ee0f5c0496d9336962b798749cbd6df731c9eb6554d56ab825cd13415e8428a084926dbdfda06da9e5a9eb0818b0735d88b06fcde503b28776a6935b59038b61c5724b6b9a7e068cf42ecbb18ec40eb97b4b5f43cc8f907b5f4dca007336eba85727d6037e67d7b0c10d08e9c9c01455431ed8555038e327d"], 0x3bc}}, 0xc0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:42:12 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 291.880940] FAULT_INJECTION: forcing a failure. [ 291.880940] name failslab, interval 1, probability 0, space 0, times 0 [ 291.882496] CPU: 0 PID: 4888 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 291.883372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 291.884395] Call Trace: [ 291.884736] dump_stack+0x107/0x167 [ 291.885198] should_fail.cold+0x5/0xa [ 291.885685] ? create_object.isra.0+0x3a/0xa30 [ 291.886251] should_failslab+0x5/0x20 [ 291.886724] kmem_cache_alloc+0x5b/0x310 [ 291.887229] create_object.isra.0+0x3a/0xa30 [ 291.887779] ? kasan_unpoison_shadow+0x33/0x50 [ 291.888346] kmalloc_order+0xfe/0x160 [ 291.888823] kmalloc_order_trace+0x14/0xa0 [ 291.889348] io_uring_setup+0x33c/0x2980 [ 291.889858] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 291.890486] ? perf_trace_preemptirq_template+0x266/0x400 [ 291.891165] ? perf_trace_preemptirq_template+0x26d/0x400 [ 291.891863] ? perf_trace_preemptirq_template+0x26d/0x400 [ 291.892557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 291.893212] ? syscall_enter_from_user_mode+0x1d/0x50 [ 291.893853] do_syscall_64+0x33/0x40 [ 291.894315] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 291.894949] RIP: 0033:0x7f77bfc9fb19 [ 291.895446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 291.897761] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 291.898701] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 291.899593] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 291.900478] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 291.901358] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 291.902234] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 291.902855] loop5: detected capacity change from 0 to 16776704 [ 291.933217] loop7: detected capacity change from 0 to 16776704 [ 291.949695] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 291.953829] loop1: detected capacity change from 0 to 16776704 16:42:12 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:42:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 6) 16:42:12 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:42:12 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 292.044346] loop7: detected capacity change from 0 to 16776704 [ 292.056117] loop1: detected capacity change from 0 to 16776704 [ 292.056346] FAULT_INJECTION: forcing a failure. [ 292.056346] name failslab, interval 1, probability 0, space 0, times 0 [ 292.059472] CPU: 1 PID: 4948 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 292.060933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 292.062702] Call Trace: [ 292.063265] dump_stack+0x107/0x167 [ 292.064048] should_fail.cold+0x5/0xa [ 292.064862] ? io_uring_setup+0x40b/0x2980 [ 292.065747] should_failslab+0x5/0x20 [ 292.066550] kmem_cache_alloc_trace+0x55/0x320 [ 292.067533] io_uring_setup+0x40b/0x2980 [ 292.068398] ? __mutex_unlock_slowpath+0xe1/0x600 [ 292.069414] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 292.070474] ? wait_for_completion_io+0x270/0x270 [ 292.071494] ? perf_trace_preemptirq_template+0x26d/0x400 [ 292.072658] ? perf_trace_preemptirq_template+0x26d/0x400 [ 292.073828] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 292.074936] ? syscall_enter_from_user_mode+0x1d/0x50 [ 292.076034] do_syscall_64+0x33/0x40 [ 292.076827] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 292.077907] RIP: 0033:0x7f77bfc9fb19 16:42:12 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 292.078687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 292.082692] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 292.084297] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 292.085793] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 292.087315] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 292.088815] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 292.090316] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 292.122930] loop5: detected capacity change from 0 to 16776704 [ 292.125710] loop7: detected capacity change from 0 to 16776704 [ 292.152803] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 16:42:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 7) 16:42:12 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:42:12 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 292.204394] FAULT_INJECTION: forcing a failure. [ 292.204394] name failslab, interval 1, probability 0, space 0, times 0 [ 292.205857] CPU: 0 PID: 4958 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 292.206661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 292.207633] Call Trace: [ 292.207962] dump_stack+0x107/0x167 [ 292.208405] should_fail.cold+0x5/0xa [ 292.208867] ? create_object.isra.0+0x3a/0xa30 [ 292.209412] should_failslab+0x5/0x20 [ 292.209865] kmem_cache_alloc+0x5b/0x310 [ 292.210332] create_object.isra.0+0x3a/0xa30 [ 292.210833] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 292.211429] kmem_cache_alloc_trace+0x151/0x320 [ 292.211970] io_uring_setup+0x40b/0x2980 [ 292.212437] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 292.213029] ? perf_trace_preemptirq_template+0x266/0x400 [ 292.213660] ? perf_trace_preemptirq_template+0x26d/0x400 [ 292.214290] ? perf_trace_preemptirq_template+0x26d/0x400 [ 292.214928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 292.215540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 292.216129] do_syscall_64+0x33/0x40 [ 292.216563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 292.217149] RIP: 0033:0x7f77bfc9fb19 [ 292.217575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 292.219696] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 292.220575] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 292.221388] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 292.222206] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 292.223028] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 292.223853] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 292.238666] loop1: detected capacity change from 0 to 16776704 [ 292.245071] loop7: detected capacity change from 0 to 16776704 16:42:26 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:42:26 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:42:26 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 16:42:26 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 306.022417] FAULT_INJECTION: forcing a failure. [ 306.022417] name failslab, interval 1, probability 0, space 0, times 0 [ 306.024395] CPU: 0 PID: 4981 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 306.025364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 306.026537] Call Trace: [ 306.026922] dump_stack+0x107/0x167 [ 306.027455] should_fail.cold+0x5/0xa [ 306.027860] loop5: detected capacity change from 0 to 16776704 [ 306.027999] ? create_object.isra.0+0x3a/0xa30 [ 306.028019] should_failslab+0x5/0x20 [ 306.030525] kmem_cache_alloc+0x5b/0x310 [ 306.031103] create_object.isra.0+0x3a/0xa30 [ 306.031738] kmemleak_alloc_percpu+0xa0/0x100 [ 306.032383] pcpu_alloc+0x4e2/0x1240 [ 306.032921] ? io_tctx_exit_cb+0xf0/0xf0 [ 306.033500] percpu_ref_init+0x31/0x3d0 [ 306.034063] io_uring_setup+0x47a/0x2980 [ 306.034667] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 306.035415] ? perf_trace_preemptirq_template+0x266/0x400 [ 306.036223] ? perf_trace_preemptirq_template+0x26d/0x400 [ 306.037027] ? perf_trace_preemptirq_template+0x26d/0x400 [ 306.037825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 306.038595] ? syscall_enter_from_user_mode+0x1d/0x50 [ 306.039353] do_syscall_64+0x33/0x40 [ 306.039906] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 306.040662] RIP: 0033:0x7f77bfc9fb19 [ 306.041206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 306.043893] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 306.045017] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 306.046038] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 306.047083] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 306.048136] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 306.049184] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:42:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 8) 16:42:26 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:42:26 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:42:26 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 306.065989] loop1: detected capacity change from 0 to 16776704 [ 306.079811] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 16:42:26 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 16:42:40 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="39730549f4635c8f4352262fe26b4415b2c11f4f59a80161aceb0e3deee77a26dfd3fb601ac7cc5dd73961f4346e691b24bfbac5840c01f09c432f6f15012e6f1e0a1200564abdfbdc91e0df5b02a38d96798bbb5a119e88dd46ed98ccbbc7faee19b966aec28453cc7c2cf0337587f3f30625f31f68f001bcdeaf0a0db281197e6f66b42b04781be6c69386a90c04d11820574a3deba907536947d2a5a135ea0ef80d882d13472ec466668385309924d9c185d0900b18f39a5a76421c447e4f1ca84f3b08bada7918b69a85bcbf1b97f162c44eaeb160a2562d11dbe2cba69003f0c6bd0263caf6ce0d4ac11282739bc4dbff91beca88d4c9cfb5844a6a1fe99268286fec6ce82271f73bc58cde24d186afdb91b177f4baa03b5f4ce0a6ece629117bc6b872ab41a77c050074000000000004001900140179800c0089000200000000000000f4ce6b0a9517dfdf734e18f13915287697bf4a60659419d3ad092c22f8a4e642c3fa05e8dc52c469c4eb6e5f35195c006516e165bd11381fd76fa2b21e1ec36a9a41913870e169a755501be2d85dd8a8f1a90296f2c0275238338e0a632077a21b19b1c4965ca8dba07b62a65d71201e0c0cedad01b7ff51f29b0187fc33c5bbf29302f0913443614971a81ee0f5c0496d9336962b798749cbd6df731c9eb6554d56ab825cd13415e8428a084926dbdfda06da9e5a9eb0818b0735d88b06fcde503b28776a6935b59038b61c5724b6b9a7e068cf42ecbb18ec40eb97b4b5f43cc8f907b5f4dca007336eba85727d6037e67d7b0c10d08e9c9c01455431ed8555038e327d"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:42:40 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:42:40 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:42:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 9) 16:42:40 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 16:42:40 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 16:42:40 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:42:40 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 320.492702] loop5: detected capacity change from 0 to 16776704 [ 320.509360] FAULT_INJECTION: forcing a failure. [ 320.509360] name failslab, interval 1, probability 0, space 0, times 0 [ 320.511877] CPU: 0 PID: 5029 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 320.513342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 320.515124] Call Trace: [ 320.515711] dump_stack+0x107/0x167 [ 320.516507] should_fail.cold+0x5/0xa [ 320.517336] ? create_object.isra.0+0x3a/0xa30 [ 320.518321] should_failslab+0x5/0x20 [ 320.519139] kmem_cache_alloc+0x5b/0x310 [ 320.520021] create_object.isra.0+0x3a/0xa30 [ 320.520963] kmemleak_alloc_percpu+0xa0/0x100 [ 320.521921] pcpu_alloc+0x4e2/0x1240 [ 320.522723] ? io_tctx_exit_cb+0xf0/0xf0 [ 320.523604] percpu_ref_init+0x31/0x3d0 [ 320.524456] io_uring_setup+0x47a/0x2980 [ 320.525330] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 320.526406] ? perf_trace_preemptirq_template+0x266/0x400 [ 320.527573] ? perf_trace_preemptirq_template+0x26d/0x400 [ 320.528751] ? perf_trace_preemptirq_template+0x26d/0x400 [ 320.529936] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 320.531048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 320.532162] do_syscall_64+0x33/0x40 [ 320.532955] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 320.534043] RIP: 0033:0x7f77bfc9fb19 [ 320.534836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 320.538756] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 320.540374] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 320.541905] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 320.543436] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 320.544983] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 320.546515] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:42:40 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:42:40 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 16:42:40 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000100)) 16:42:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 10) [ 320.599142] loop7: detected capacity change from 0 to 16776704 [ 320.604693] loop5: detected capacity change from 0 to 16776704 [ 320.616981] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 320.626724] EXT4-fs (loop7): get root inode failed [ 320.627322] EXT4-fs (loop7): mount failed [ 320.632068] FAULT_INJECTION: forcing a failure. [ 320.632068] name failslab, interval 1, probability 0, space 0, times 0 [ 320.633503] CPU: 1 PID: 5087 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 320.634320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 320.635316] Call Trace: [ 320.635665] dump_stack+0x107/0x167 [ 320.636130] should_fail.cold+0x5/0xa [ 320.636604] ? percpu_ref_init+0xd8/0x3d0 [ 320.637120] should_failslab+0x5/0x20 [ 320.637569] kmem_cache_alloc_trace+0x55/0x320 [ 320.638108] ? io_tctx_exit_cb+0xf0/0xf0 [ 320.638584] percpu_ref_init+0xd8/0x3d0 [ 320.639056] io_uring_setup+0x47a/0x2980 [ 320.639546] ? __mutex_unlock_slowpath+0xe1/0x600 [ 320.640129] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 320.640724] ? wait_for_completion_io+0x270/0x270 [ 320.641294] ? perf_trace_preemptirq_template+0x26d/0x400 [ 320.641948] ? perf_trace_preemptirq_template+0x26d/0x400 [ 320.642617] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 320.643236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 320.643855] do_syscall_64+0x33/0x40 [ 320.644302] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 320.644902] RIP: 0033:0x7f77bfc9fb19 [ 320.645337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 320.647493] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 320.648400] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 320.649249] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 320.650099] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 320.650944] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 320.651803] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:42:40 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:42:40 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 16:42:41 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000100)) [ 320.738168] loop5: detected capacity change from 0 to 16776704 16:42:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 11) [ 320.759140] loop7: detected capacity change from 0 to 16776704 [ 320.771998] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 320.774802] EXT4-fs (loop7): get root inode failed [ 320.776114] EXT4-fs (loop7): mount failed [ 320.778055] FAULT_INJECTION: forcing a failure. [ 320.778055] name failslab, interval 1, probability 0, space 0, times 0 [ 320.779526] CPU: 1 PID: 5098 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 320.780342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 320.781310] Call Trace: [ 320.781636] dump_stack+0x107/0x167 [ 320.782064] should_fail.cold+0x5/0xa [ 320.782520] ? create_object.isra.0+0x3a/0xa30 [ 320.783053] should_failslab+0x5/0x20 [ 320.783500] kmem_cache_alloc+0x5b/0x310 [ 320.783988] create_object.isra.0+0x3a/0xa30 [ 320.784506] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 320.785100] kmem_cache_alloc_trace+0x151/0x320 [ 320.785653] ? io_tctx_exit_cb+0xf0/0xf0 [ 320.786129] percpu_ref_init+0xd8/0x3d0 [ 320.786601] io_uring_setup+0x47a/0x2980 [ 320.787076] ? __mutex_unlock_slowpath+0xe1/0x600 [ 320.787653] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 320.788242] ? wait_for_completion_io+0x270/0x270 [ 320.788811] ? perf_trace_preemptirq_template+0x26d/0x400 [ 320.789457] ? perf_trace_preemptirq_template+0x26d/0x400 [ 320.790111] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 320.790724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 320.791329] do_syscall_64+0x33/0x40 [ 320.791785] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 320.792385] RIP: 0033:0x7f77bfc9fb19 [ 320.792824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 320.794996] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 320.795896] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 320.796736] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 320.797578] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 320.798420] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 320.799255] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:42:41 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="39730549f4635c8f4352262fe26b4415b2c11f4f59a80161aceb0e3deee77a26dfd3fb601ac7cc5dd73961f4346e691b24bfbac5840c01f09c432f6f15012e6f1e0a1200564abdfbdc91e0df5b02a38d96798bbb5a119e88dd46ed98ccbbc7faee19b966aec28453cc7c2cf0337587f3f30625f31f68f001bcdeaf0a0db281197e6f66b42b04781be6c69386a90c04d11820574a3deba907536947d2a5a135ea0ef80d882d13472ec466668385309924d9c185d0900b18f39a5a76421c447e4f1ca84f3b08bada7918b69a85bcbf1b97f162c44eaeb160a2562d11dbe2cba69003f0c6bd0263caf6ce0d4ac11282739bc4dbff91beca88d4c9cfb5844a6a1fe99268286fec6ce82271f73bc58cde24d186afdb91b177f4baa03b5f4ce0a6ece629117bc6b872ab41a77c050074000000000004001900140179800c0089000200000000000000f4ce6b0a9517dfdf734e18f13915287697bf4a60659419d3ad092c22f8a4e642c3fa05e8dc52c469c4eb6e5f35195c006516e165bd11381fd76fa2b21e1ec36a9a41913870e169a755501be2d85dd8a8f1a90296f2c0275238338e0a632077a21b19b1c4965ca8dba07b62a65d71201e0c0cedad01b7ff51f29b0187fc33c5bbf29302f0913443614971a81ee0f5c0496d9336962b798749cbd6df731c9eb6554d56ab825cd13415e8428a084926dbdfda06da9e5a9eb0818b0735d88b06fcde503b28776a6935b59038b61c5724b6b9a7e068cf42ecbb18ec40eb97b4b5f43cc8f907b5f4dca007336eba85727d6037e67d7b0c10d08e9c9c01455431ed8555038e327d"], 0x3bc}}, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:42:41 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:42:41 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000100)) 16:42:41 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000100)) 16:42:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 12) [ 321.354803] loop5: detected capacity change from 0 to 16776704 [ 321.367886] loop7: detected capacity change from 0 to 16776704 16:42:41 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="39730549f4635c8f4352262fe26b4415b2c11f4f59a80161aceb0e3deee77a26dfd3fb601ac7cc5dd73961f4346e691b24bfbac5840c01f09c432f6f15012e6f1e0a1200564abdfbdc91e0df5b02a38d96798bbb5a119e88dd46ed98ccbbc7faee19b966aec28453cc7c2cf0337587f3f30625f31f68f001bcdeaf0a0db281197e6f66b42b04781be6c69386a90c04d11820574a3deba907536947d2a5a135ea0ef80d882d13472ec466668385309924d9c185d0900b18f39a5a76421c447e4f1ca84f3b08bada7918b69a85bcbf1b97f162c44eaeb160a2562d11dbe2cba69003f0c6bd0263caf6ce0d4ac11282739bc4dbff91beca88d4c9cfb5844a6a1fe99268286fec6ce82271f73bc58cde24d186afdb91b177f4baa03b5f4ce0a6ece629117bc6b872ab41a77c050074000000000004001900140179800c0089000200000000000000f4ce6b0a9517dfdf734e18f13915287697bf4a60659419d3ad092c22f8a4e642c3fa05e8dc52c469c4eb6e5f35195c006516e165bd11381fd76fa2b21e1ec36a9a41913870e169a755501be2d85dd8a8f1a90296f2c0275238338e0a632077a21b19b1c4965ca8dba07b62a65d71201e0c0cedad01b7ff51f29b0187fc33c5bbf29302f0913443614971a81ee0f5c0496d9336962b798749cbd6df731c9eb6554d56ab825cd13415e8428a084926dbdfda06da9e5a9eb0818b0735d88b06fcde503b28776a6935b59038b61c5724b6b9a7e068cf42ecbb18ec40eb97b4b5f43cc8f907b5f4dca007336eba85727d6037e67d7b0c10d08e9c9c01455431ed8555038e327d"], 0x3bc}}, 0xc0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 321.397677] FAULT_INJECTION: forcing a failure. [ 321.397677] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 321.400601] CPU: 0 PID: 5113 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 321.402297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 321.404371] Call Trace: [ 321.405029] dump_stack+0x107/0x167 [ 321.405921] should_fail.cold+0x5/0xa [ 321.406868] __alloc_pages_nodemask+0x182/0x600 [ 321.408033] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 321.409512] ? cap_capable+0x1cd/0x230 [ 321.410474] alloc_pages_current+0x187/0x280 [ 321.411551] __get_free_pages+0xc/0xa0 [ 321.412525] io_uring_setup+0xe27/0x2980 [ 321.413541] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 321.414786] ? perf_trace_preemptirq_template+0x266/0x400 [ 321.416146] ? perf_trace_preemptirq_template+0x26d/0x400 [ 321.417500] ? perf_trace_preemptirq_template+0x26d/0x400 [ 321.418868] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 321.420165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 321.421431] do_syscall_64+0x33/0x40 [ 321.421829] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 321.422346] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 321.422365] RIP: 0033:0x7f77bfc9fb19 [ 321.424303] EXT4-fs (loop7): get root inode failed [ 321.425254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 321.425266] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 321.425287] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 321.425305] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 321.425839] EXT4-fs (loop7): mount failed [ 321.427007] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 321.427019] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 321.427031] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 321.436946] loop1: detected capacity change from 0 to 16776704 [ 321.472855] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 321.485736] EXT4-fs (loop1): get root inode failed [ 321.487064] EXT4-fs (loop1): mount failed 16:42:56 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:42:56 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="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"], 0x3bc}}, 0xc0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:42:56 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000100)) 16:42:56 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:42:56 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:42:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 13) 16:42:56 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000100)) 16:42:56 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc030000080a010428bd7000fddbdf2500000002bd00408011e41ec36acfb2aa200fbaf8ca98f7e74f27b4c8693c82887e5c5763831aa6cce1e04010807ec98152b995eacb0ce2f12521d75a353b736aac24564adf40fe035b08006e000e070000292e20d08a6c04ed307464281d49193bded5e9106e258fd8476594508a7c5b97fff74b000020d86868528f4bd92a5dd493e561359e0a054b50162cc583bf08f3af5cd9f7773d8003b417e92478720ad0c5db00cefa3f32e7d0fac0e0d934f47c95c60433ab2c4f608408002200", @ANYRES32=0x0, @ANYBLOB="400000f2ac5b542c2c004f", @ANYRES32, @ANYBLOB="31002100334cdc1e30ca09aaf4f40a7bbea0159984ab523f0b2ff3510bb136e525869a874536c9823a41530ac18d91246400000008007400", @ANYRES32, @ANYBLOB="3501213d0000", @ANYRES32=0x0, @ANYBLOB="08008300", @ANYRES32=0x0, @ANYBLOB="0800590003000000a224c1c5dc2ba4271411413d14dbdc96c47c4e8c7ebdef63e47975112beb214badc510ca08008000", @ANYRES32=r4, @ANYBLOB="39730549f4635c8f4352262fe26b4415b2c11f4f59a80161aceb0e3deee77a26dfd3fb601ac7cc5dd73961f4346e691b24bfbac5840c01f09c432f6f15012e6f1e0a1200564abdfbdc91e0df5b02a38d96798bbb5a119e88dd46ed98ccbbc7faee19b966aec28453cc7c2cf0337587f3f30625f31f68f001bcdeaf0a0db281197e6f66b42b04781be6c69386a90c04d11820574a3deba907536947d2a5a135ea0ef80d882d13472ec466668385309924d9c185d0900b18f39a5a76421c447e4f1ca84f3b08bada7918b69a85bcbf1b97f162c44eaeb160a2562d11dbe2cba69003f0c6bd0263caf6ce0d4ac11282739bc4dbff91beca88d4c9cfb5844a6a1fe99268286fec6ce82271f73bc58cde24d186afdb91b177f4baa03b5f4ce0a6ece629117bc6b872ab41a77c050074000000000004001900140179800c0089000200000000000000f4ce6b0a9517dfdf734e18f13915287697bf4a60659419d3ad092c22f8a4e642c3fa05e8dc52c469c4eb6e5f35195c006516e165bd11381fd76fa2b21e1ec36a9a41913870e169a755501be2d85dd8a8f1a90296f2c0275238338e0a632077a21b19b1c4965ca8dba07b62a65d71201e0c0cedad01b7ff51f29b0187fc33c5bbf29302f0913443614971a81ee0f5c0496d9336962b798749cbd6df731c9eb6554d56ab825cd13415e8428a084926dbdfda06da9e5a9eb0818b0735d88b06fcde503b28776a6935b59038b61c5724b6b9a7e068cf42ecbb18ec40eb97b4b5f43cc8f907b5f4dca007336eba85727d6037e67d7b0c10d08e9c9c01455431ed8555038e327d"], 0x3bc}}, 0xc0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 336.544254] FAULT_INJECTION: forcing a failure. [ 336.544254] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 336.546853] CPU: 1 PID: 5152 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 336.548294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 336.550005] Call Trace: [ 336.550574] dump_stack+0x107/0x167 [ 336.551333] should_fail.cold+0x5/0xa [ 336.552150] __alloc_pages_nodemask+0x182/0x600 [ 336.553115] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 336.554383] ? cap_capable+0x1cd/0x230 [ 336.555222] alloc_pages_current+0x187/0x280 [ 336.556155] __get_free_pages+0xc/0xa0 [ 336.556994] io_uring_setup+0xf9a/0x2980 [ 336.557859] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 336.558930] ? wait_for_completion_io+0x270/0x270 [ 336.559937] ? perf_trace_preemptirq_template+0x26d/0x400 [ 336.561084] ? perf_trace_preemptirq_template+0x26d/0x400 [ 336.562260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 336.563382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 336.564455] do_syscall_64+0x33/0x40 [ 336.565245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 336.566327] RIP: 0033:0x7f77bfc9fb19 [ 336.567121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 336.571047] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 336.572656] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 336.574157] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 336.575647] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 336.577150] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 336.578641] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 336.581936] loop5: detected capacity change from 0 to 16776704 [ 336.593993] loop1: detected capacity change from 0 to 16776704 [ 336.605608] loop7: detected capacity change from 0 to 16776704 [ 336.623330] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 336.630645] EXT4-fs (loop7): get root inode failed [ 336.631799] EXT4-fs (loop7): mount failed [ 336.643177] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 336.647004] EXT4-fs (loop1): get root inode failed [ 336.648303] EXT4-fs (loop1): mount failed 16:42:56 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:42:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 14) 16:42:57 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000100)) [ 336.720904] FAULT_INJECTION: forcing a failure. 16:42:57 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000100)) [ 336.720904] name failslab, interval 1, probability 0, space 0, times 0 [ 336.723666] CPU: 0 PID: 5198 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 336.725172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 336.727040] Call Trace: [ 336.727706] dump_stack+0x107/0x167 [ 336.728153] loop5: detected capacity change from 0 to 16776704 [ 336.728566] should_fail.cold+0x5/0xa [ 336.728590] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 336.728607] should_failslab+0x5/0x20 [ 336.728636] kmem_cache_alloc_trace+0x55/0x320 [ 336.733892] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 336.735145] io_uring_setup+0x14f6/0x2980 [ 336.736109] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 336.737259] ? perf_trace_preemptirq_template+0x266/0x400 [ 336.738597] ? perf_trace_preemptirq_template+0x26d/0x400 [ 336.739829] ? perf_trace_preemptirq_template+0x26d/0x400 [ 336.741035] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 336.742140] ? syscall_enter_from_user_mode+0x1d/0x50 [ 336.743319] do_syscall_64+0x33/0x40 [ 336.744168] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 336.745319] RIP: 0033:0x7f77bfc9fb19 [ 336.746159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 336.750245] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 336.751906] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 336.753422] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 336.755127] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 336.756654] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 336.758241] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 336.795464] loop7: detected capacity change from 0 to 16776704 [ 336.808172] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 336.811346] EXT4-fs (loop7): get root inode failed [ 336.812594] EXT4-fs (loop7): mount failed 16:42:57 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) [ 336.822762] loop1: detected capacity change from 0 to 16776704 [ 336.834548] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 336.837658] EXT4-fs (loop1): get root inode failed [ 336.838819] EXT4-fs (loop1): mount failed 16:42:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 15) 16:42:57 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000100)) [ 336.900780] loop1: detected capacity change from 0 to 16776704 16:42:57 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000100)) [ 336.923134] FAULT_INJECTION: forcing a failure. [ 336.923134] name failslab, interval 1, probability 0, space 0, times 0 [ 336.925579] CPU: 1 PID: 5215 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 336.926996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 336.928720] Call Trace: [ 336.929270] dump_stack+0x107/0x167 [ 336.929543] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 336.930041] should_fail.cold+0x5/0xa [ 336.932908] EXT4-fs (loop1): get root inode failed [ 336.933359] ? create_object.isra.0+0x3a/0xa30 [ 336.934541] EXT4-fs (loop1): mount failed [ 336.935397] should_failslab+0x5/0x20 [ 336.937084] kmem_cache_alloc+0x5b/0x310 [ 336.937944] create_object.isra.0+0x3a/0xa30 [ 336.938862] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 336.939937] kmem_cache_alloc_trace+0x151/0x320 [ 336.940909] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 336.942030] io_uring_setup+0x14f6/0x2980 [ 336.942904] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 336.943968] ? wait_for_completion_io+0x270/0x270 [ 336.944969] ? perf_trace_preemptirq_template+0x26d/0x400 [ 336.946126] ? perf_trace_preemptirq_template+0x26d/0x400 [ 336.947305] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 336.948419] ? syscall_enter_from_user_mode+0x1d/0x50 [ 336.949482] do_syscall_64+0x33/0x40 [ 336.950268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 336.951329] RIP: 0033:0x7f77bfc9fb19 [ 336.952110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 336.955953] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 336.957524] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 336.958998] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 336.960501] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 336.962005] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 336.963496] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 337.011088] loop7: detected capacity change from 0 to 16776704 [ 337.038547] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 337.041867] EXT4-fs (loop7): get root inode failed [ 337.043128] EXT4-fs (loop7): mount failed 16:42:57 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000100)) [ 337.433993] loop1: detected capacity change from 0 to 16776704 [ 337.452157] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 337.457714] EXT4-fs (loop1): get root inode failed [ 337.458866] EXT4-fs (loop1): mount failed 16:43:11 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 16:43:11 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 351.136012] loop1: detected capacity change from 0 to 16776704 [ 351.154308] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 351.164064] EXT4-fs (loop1): get root inode failed [ 351.165221] EXT4-fs (loop1): mount failed 16:43:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 16) 16:43:11 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000100)) 16:43:11 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:43:11 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:43:11 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000100)) 16:43:11 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 351.188404] FAULT_INJECTION: forcing a failure. [ 351.188404] name failslab, interval 1, probability 0, space 0, times 0 [ 351.191193] CPU: 0 PID: 5251 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 351.192779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 351.194685] Call Trace: [ 351.195300] dump_stack+0x107/0x167 [ 351.196150] should_fail.cold+0x5/0xa [ 351.197031] ? create_object.isra.0+0x3a/0xa30 [ 351.198090] should_failslab+0x5/0x20 [ 351.198974] kmem_cache_alloc+0x5b/0x310 [ 351.199928] create_object.isra.0+0x3a/0xa30 [ 351.200954] kmemleak_alloc_percpu+0xa0/0x100 [ 351.202003] pcpu_alloc+0x4e2/0x1240 [ 351.202879] ? io_async_queue_proc+0x80/0x80 [ 351.203911] percpu_ref_init+0x31/0x3d0 [ 351.204839] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 351.206091] io_uring_setup+0x14f6/0x2980 [ 351.207060] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 351.208244] ? perf_trace_preemptirq_template+0x266/0x400 [ 351.209515] ? perf_trace_preemptirq_template+0x26d/0x400 [ 351.210786] ? perf_trace_preemptirq_template+0x26d/0x400 [ 351.212085] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 351.213310] ? syscall_enter_from_user_mode+0x1d/0x50 [ 351.214515] do_syscall_64+0x33/0x40 [ 351.215385] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 351.216601] RIP: 0033:0x7f77bfc9fb19 [ 351.217472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 351.221790] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 351.223566] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 351.225275] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 351.226954] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 351.228645] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 351.230324] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:43:11 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000100)) [ 351.238954] loop7: detected capacity change from 0 to 16776704 [ 351.277414] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 351.280642] EXT4-fs (loop7): get root inode failed [ 351.281848] EXT4-fs (loop7): mount failed [ 351.285953] loop1: detected capacity change from 0 to 16776704 [ 351.304996] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 351.309671] EXT4-fs (loop1): get root inode failed [ 351.311060] EXT4-fs (loop1): mount failed 16:43:25 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:43:25 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:43:25 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000100)) 16:43:25 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 17) 16:43:25 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000100)) 16:43:25 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:43:25 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, 0x0, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:43:25 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) [ 364.882688] loop7: detected capacity change from 0 to 16776704 [ 364.905141] FAULT_INJECTION: forcing a failure. [ 364.905141] name failslab, interval 1, probability 0, space 0, times 0 [ 364.906599] CPU: 0 PID: 5299 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 364.907466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 364.908525] Call Trace: [ 364.908877] dump_stack+0x107/0x167 [ 364.909348] should_fail.cold+0x5/0xa [ 364.909847] ? create_object.isra.0+0x3a/0xa30 [ 364.910433] should_failslab+0x5/0x20 [ 364.910903] kmem_cache_alloc+0x5b/0x310 [ 364.911412] create_object.isra.0+0x3a/0xa30 [ 364.911955] kmemleak_alloc_percpu+0xa0/0x100 [ 364.912515] pcpu_alloc+0x4e2/0x1240 [ 364.912983] ? io_async_queue_proc+0x80/0x80 [ 364.913524] percpu_ref_init+0x31/0x3d0 [ 364.914015] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 364.914681] io_uring_setup+0x14f6/0x2980 [ 364.915194] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 364.915823] ? perf_trace_preemptirq_template+0x266/0x400 [ 364.916503] ? perf_trace_preemptirq_template+0x26d/0x400 [ 364.917179] ? perf_trace_preemptirq_template+0x26d/0x400 [ 364.917874] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 364.918517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 364.919150] do_syscall_64+0x33/0x40 [ 364.919611] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 364.920246] RIP: 0033:0x7f77bfc9fb19 [ 364.920704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 364.922958] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 364.923903] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 364.924753] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 364.925629] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 364.926463] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 364.927292] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 364.930224] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 364.935509] EXT4-fs (loop7): get root inode failed [ 364.936150] EXT4-fs (loop7): mount failed [ 364.952371] loop1: detected capacity change from 0 to 16776704 [ 364.985659] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 364.992886] EXT4-fs (loop1): get root inode failed [ 364.993587] EXT4-fs (loop1): mount failed 16:43:39 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:43:39 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000100)) 16:43:39 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:43:39 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000100)) 16:43:39 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000100)) 16:43:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 18) 16:43:39 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:43:39 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 379.355706] loop5: detected capacity change from 0 to 16776704 [ 379.388810] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 379.393265] EXT4-fs (loop5): get root inode failed [ 379.394444] EXT4-fs (loop5): mount failed [ 379.406689] FAULT_INJECTION: forcing a failure. [ 379.406689] name failslab, interval 1, probability 0, space 0, times 0 [ 379.409189] CPU: 1 PID: 5358 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 379.410628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 379.412402] Call Trace: [ 379.412975] dump_stack+0x107/0x167 [ 379.413743] should_fail.cold+0x5/0xa [ 379.414559] ? percpu_ref_init+0xd8/0x3d0 [ 379.415434] should_failslab+0x5/0x20 [ 379.416262] kmem_cache_alloc_trace+0x55/0x320 [ 379.417218] ? io_async_queue_proc+0x80/0x80 [ 379.418136] percpu_ref_init+0xd8/0x3d0 [ 379.418971] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 379.420070] io_uring_setup+0x14f6/0x2980 [ 379.420948] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 379.422006] ? wait_for_completion_io+0x270/0x270 [ 379.423001] ? perf_trace_preemptirq_template+0x26d/0x400 [ 379.424129] ? perf_trace_preemptirq_template+0x26d/0x400 [ 379.425362] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 379.426455] ? syscall_enter_from_user_mode+0x1d/0x50 [ 379.427511] do_syscall_64+0x33/0x40 [ 379.428299] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 379.429356] RIP: 0033:0x7f77bfc9fb19 [ 379.430130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 379.434009] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 379.435601] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 379.437085] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 379.438569] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 379.440037] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 379.441554] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 379.446350] loop7: detected capacity change from 0 to 16776704 [ 379.461769] loop1: detected capacity change from 0 to 16776704 [ 379.481795] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 379.484781] EXT4-fs (loop7): get root inode failed [ 379.485957] EXT4-fs (loop7): mount failed [ 379.495881] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 379.499815] EXT4-fs (loop1): get root inode failed [ 379.500907] EXT4-fs (loop1): mount failed 16:43:39 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000100)) 16:43:39 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000100)) 16:43:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 19) 16:43:39 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000100)) [ 379.587773] loop7: detected capacity change from 0 to 16776704 [ 379.599372] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 379.601992] EXT4-fs (loop7): get root inode failed [ 379.603008] EXT4-fs (loop7): mount failed [ 379.614807] loop1: detected capacity change from 0 to 16776704 [ 379.620610] FAULT_INJECTION: forcing a failure. [ 379.620610] name failslab, interval 1, probability 0, space 0, times 0 [ 379.622892] CPU: 1 PID: 5388 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 379.624235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 379.625825] Call Trace: [ 379.626345] dump_stack+0x107/0x167 [ 379.627046] should_fail.cold+0x5/0xa [ 379.627763] ? percpu_ref_init+0xd8/0x3d0 [ 379.628567] should_failslab+0x5/0x20 [ 379.629289] kmem_cache_alloc_trace+0x55/0x320 [ 379.630146] ? io_async_queue_proc+0x80/0x80 [ 379.630962] percpu_ref_init+0xd8/0x3d0 [ 379.631716] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 379.632768] io_uring_setup+0x14f6/0x2980 [ 379.633561] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 379.634511] ? wait_for_completion_io+0x270/0x270 [ 379.635415] ? perf_trace_preemptirq_template+0x26d/0x400 [ 379.636448] ? perf_trace_preemptirq_template+0x26d/0x400 [ 379.637487] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 379.638471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 379.639442] do_syscall_64+0x33/0x40 [ 379.640136] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 379.641108] RIP: 0033:0x7f77bfc9fb19 [ 379.641803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 379.645232] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 379.646616] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 379.647919] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 379.649245] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 379.650556] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 379.651859] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:43:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 20) [ 379.694268] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 379.698032] EXT4-fs (loop1): get root inode failed [ 379.699119] EXT4-fs (loop1): mount failed 16:43:40 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000100)) 16:43:40 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000100)) [ 379.743213] FAULT_INJECTION: forcing a failure. [ 379.743213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.745335] CPU: 1 PID: 5402 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 379.746548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 379.747984] Call Trace: [ 379.748472] dump_stack+0x107/0x167 [ 379.749128] should_fail.cold+0x5/0xa [ 379.749795] _copy_to_user+0x2e/0x180 [ 379.750463] io_uring_setup+0x11b5/0x2980 [ 379.751186] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 379.752069] ? wait_for_completion_io+0x270/0x270 [ 379.752922] ? perf_trace_preemptirq_template+0x26d/0x400 [ 379.753854] ? perf_trace_preemptirq_template+0x26d/0x400 [ 379.754818] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 379.755723] ? syscall_enter_from_user_mode+0x1d/0x50 [ 379.756664] do_syscall_64+0x33/0x40 [ 379.757324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 379.757677] loop5: detected capacity change from 0 to 16776704 [ 379.758205] RIP: 0033:0x7f77bfc9fb19 [ 379.758229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 379.763260] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 379.764600] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 379.765832] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 379.767059] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 379.768307] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 379.769537] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:43:40 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000100)) [ 379.787661] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 379.794848] EXT4-fs (loop5): get root inode failed [ 379.796074] EXT4-fs (loop5): mount failed [ 379.797798] loop7: detected capacity change from 0 to 16776704 [ 379.819254] loop1: detected capacity change from 0 to 16776704 [ 379.828327] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 379.830821] EXT4-fs (loop7): get root inode failed [ 379.831694] EXT4-fs (loop7): mount failed [ 379.851063] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 379.855133] EXT4-fs (loop1): get root inode failed [ 379.856396] EXT4-fs (loop1): mount failed 16:43:53 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 393.433184] loop1: detected capacity change from 0 to 16776704 [ 393.441528] FAULT_INJECTION: forcing a failure. [ 393.441528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.444179] CPU: 0 PID: 5424 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 393.445747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 393.447627] Call Trace: [ 393.448230] dump_stack+0x107/0x167 [ 393.449068] should_fail.cold+0x5/0xa [ 393.449941] _copy_to_user+0x2e/0x180 [ 393.450811] io_uring_setup+0x11b5/0x2980 [ 393.451755] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 393.452908] ? perf_trace_preemptirq_template+0x266/0x400 [ 393.454284] ? perf_trace_preemptirq_template+0x26d/0x400 [ 393.455548] ? perf_trace_preemptirq_template+0x26d/0x400 [ 393.456811] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 393.457993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 393.459157] do_syscall_64+0x33/0x40 [ 393.459998] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 393.461162] RIP: 0033:0x7f77bfc9fb19 [ 393.461992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 393.466301] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 393.468060] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 393.469723] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 393.471379] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 393.473045] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 393.474683] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 393.476964] loop5: detected capacity change from 0 to 16776704 16:43:53 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:43:53 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000100)) 16:43:53 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000100)) 16:43:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 21) 16:43:53 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:43:53 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:43:53 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000100)) [ 393.485249] loop7: detected capacity change from 0 to 16776704 [ 393.488077] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 393.490600] EXT4-fs (loop1): get root inode failed [ 393.491206] EXT4-fs (loop1): mount failed [ 393.491910] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 393.493516] EXT4-fs (loop5): get root inode failed [ 393.494073] EXT4-fs (loop5): mount failed [ 393.505998] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 393.509227] EXT4-fs (loop7): get root inode failed [ 393.509827] EXT4-fs (loop7): mount failed 16:43:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 22) 16:43:53 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000100)) 16:43:53 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000100)) [ 393.561324] FAULT_INJECTION: forcing a failure. [ 393.561324] name failslab, interval 1, probability 0, space 0, times 0 [ 393.564022] CPU: 0 PID: 5446 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 393.565574] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 393.567459] Call Trace: [ 393.568061] dump_stack+0x107/0x167 [ 393.568904] should_fail.cold+0x5/0xa [ 393.569765] ? create_object.isra.0+0x3a/0xa30 [ 393.570785] should_failslab+0x5/0x20 [ 393.571659] kmem_cache_alloc+0x5b/0x310 [ 393.572598] create_object.isra.0+0x3a/0xa30 [ 393.573603] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 393.574765] kmem_cache_alloc+0x159/0x310 [ 393.575723] __d_alloc+0x2a/0x990 [ 393.576527] ? find_held_lock+0x2c/0x110 [ 393.577450] d_alloc_pseudo+0x19/0x70 [ 393.578301] alloc_file_pseudo+0xce/0x250 [ 393.579226] ? trace_hardirqs_on+0x5b/0x180 [ 393.580194] ? alloc_file+0x5a0/0x5a0 [ 393.581086] anon_inode_getfile+0xc8/0x1f0 [ 393.582073] io_uring_setup+0x138b/0x2980 [ 393.583043] ? __do_sys_io_uring_enter+0x1890/0x1890 16:43:53 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000100)) [ 393.584225] ? perf_trace_preemptirq_template+0x266/0x400 [ 393.585665] ? perf_trace_preemptirq_template+0x26d/0x400 [ 393.586940] ? perf_trace_preemptirq_template+0x26d/0x400 [ 393.588236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 393.589474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 393.590682] do_syscall_64+0x33/0x40 [ 393.591538] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 393.592719] RIP: 0033:0x7f77bfc9fb19 [ 393.593567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 393.597785] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 393.599556] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 393.601200] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 393.602853] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 393.604489] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 393.606141] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:43:53 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000100)) [ 393.616372] loop5: detected capacity change from 0 to 16776704 [ 393.619645] loop7: detected capacity change from 0 to 16776704 [ 393.633425] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 393.639173] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 393.640798] EXT4-fs (loop5): get root inode failed [ 393.641385] EXT4-fs (loop5): mount failed [ 393.644807] EXT4-fs (loop7): get root inode failed [ 393.645374] EXT4-fs (loop7): mount failed 16:43:53 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000100)) 16:43:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 23) 16:43:53 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000100)) [ 393.693554] FAULT_INJECTION: forcing a failure. [ 393.693554] name failslab, interval 1, probability 0, space 0, times 0 [ 393.694912] CPU: 1 PID: 5465 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 393.695689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 393.696643] Call Trace: [ 393.696965] dump_stack+0x107/0x167 [ 393.697395] should_fail.cold+0x5/0xa [ 393.697841] ? __alloc_file+0x21/0x320 [ 393.698299] should_failslab+0x5/0x20 [ 393.698746] kmem_cache_alloc+0x5b/0x310 [ 393.699223] __alloc_file+0x21/0x320 [ 393.699653] alloc_empty_file+0x6d/0x170 [ 393.700128] alloc_file+0x5e/0x5a0 [ 393.700542] alloc_file_pseudo+0x16a/0x250 [ 393.701042] ? alloc_file+0x5a0/0x5a0 [ 393.701496] anon_inode_getfile+0xc8/0x1f0 [ 393.702005] io_uring_setup+0x138b/0x2980 [ 393.702506] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 393.703089] ? wait_for_completion_io+0x270/0x270 [ 393.703646] ? perf_trace_preemptirq_template+0x26d/0x400 [ 393.704274] ? perf_trace_preemptirq_template+0x26d/0x400 [ 393.704920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 393.705524] ? syscall_enter_from_user_mode+0x1d/0x50 [ 393.706119] do_syscall_64+0x33/0x40 [ 393.706548] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 393.707144] RIP: 0033:0x7f77bfc9fb19 [ 393.707581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 393.709770] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 393.710651] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 393.711488] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 393.712336] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 393.713179] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 393.714016] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:44:08 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:44:08 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:44:08 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000100)) 16:44:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 24) 16:44:08 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:44:08 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:44:08 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000100)) [ 408.250368] loop5: detected capacity change from 0 to 16776704 16:44:08 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000100)) [ 408.259923] loop7: detected capacity change from 0 to 16776704 [ 408.261304] FAULT_INJECTION: forcing a failure. [ 408.261304] name failslab, interval 1, probability 0, space 0, times 0 [ 408.261325] CPU: 0 PID: 5482 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 408.261339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 408.266079] Call Trace: [ 408.266500] dump_stack+0x107/0x167 [ 408.267073] should_fail.cold+0x5/0xa [ 408.267670] ? __alloc_file+0x21/0x320 [ 408.268283] should_failslab+0x5/0x20 [ 408.268906] kmem_cache_alloc+0x5b/0x310 [ 408.269541] __alloc_file+0x21/0x320 [ 408.270122] alloc_empty_file+0x6d/0x170 [ 408.270761] alloc_file+0x5e/0x5a0 [ 408.271339] alloc_file_pseudo+0x16a/0x250 [ 408.272004] ? alloc_file+0x5a0/0x5a0 [ 408.272618] anon_inode_getfile+0xc8/0x1f0 [ 408.273288] io_uring_setup+0x138b/0x2980 [ 408.273962] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 408.274750] ? perf_trace_preemptirq_template+0x266/0x400 [ 408.275615] ? perf_trace_preemptirq_template+0x26d/0x400 [ 408.276441] ? perf_trace_preemptirq_template+0x26d/0x400 [ 408.277376] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 408.278191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 408.279010] do_syscall_64+0x33/0x40 [ 408.279580] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 408.280382] RIP: 0033:0x7f77bfc9fb19 [ 408.280995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 408.283881] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 408.285047] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 408.286163] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 408.287293] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 408.288415] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 408.289580] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 408.295260] loop1: detected capacity change from 0 to 16776704 [ 408.300419] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 408.302946] EXT4-fs (loop5): get root inode failed [ 408.303866] EXT4-fs (loop5): mount failed [ 408.305384] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 408.308969] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 408.312035] EXT4-fs (loop1): get root inode failed [ 408.313238] EXT4-fs (loop1): mount failed [ 408.314592] EXT4-fs (loop7): get root inode failed [ 408.315843] EXT4-fs (loop7): mount failed 16:44:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 25) 16:44:08 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000100)) 16:44:08 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000100)) 16:44:08 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000100)) [ 408.395296] FAULT_INJECTION: forcing a failure. [ 408.395296] name failslab, interval 1, probability 0, space 0, times 0 [ 408.398061] CPU: 1 PID: 5494 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 408.399555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 408.401399] Call Trace: [ 408.401996] dump_stack+0x107/0x167 [ 408.402794] should_fail.cold+0x5/0xa [ 408.403621] ? security_file_alloc+0x34/0x170 [ 408.404604] should_failslab+0x5/0x20 [ 408.405420] kmem_cache_alloc+0x5b/0x310 [ 408.406311] security_file_alloc+0x34/0x170 [ 408.407243] __alloc_file+0xb7/0x320 [ 408.408060] alloc_empty_file+0x6d/0x170 [ 408.408952] alloc_file+0x5e/0x5a0 [ 408.409715] alloc_file_pseudo+0x16a/0x250 [ 408.410783] ? alloc_file+0x5a0/0x5a0 [ 408.411842] anon_inode_getfile+0xc8/0x1f0 [ 408.413024] io_uring_setup+0x138b/0x2980 [ 408.414178] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 408.415424] ? wait_for_completion_io+0x270/0x270 [ 408.416481] ? perf_trace_preemptirq_template+0x26d/0x400 [ 408.417657] ? perf_trace_preemptirq_template+0x26d/0x400 [ 408.418863] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 408.419990] ? syscall_enter_from_user_mode+0x1d/0x50 [ 408.421116] do_syscall_64+0x33/0x40 [ 408.421450] loop7: detected capacity change from 0 to 16776704 [ 408.421937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 408.421950] RIP: 0033:0x7f77bfc9fb19 [ 408.421973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 408.428837] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 408.430476] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 408.432018] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 408.433553] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 408.435089] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 408.436640] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 408.437963] loop5: detected capacity change from 0 to 16776704 [ 408.444221] loop1: detected capacity change from 0 to 16776704 [ 408.451995] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 408.454381] EXT4-fs (loop7): get root inode failed [ 408.455391] EXT4-fs (loop7): mount failed [ 408.468659] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 408.474703] EXT4-fs (loop1): get root inode failed [ 408.475655] EXT4-fs (loop1): mount failed 16:44:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 26) [ 408.490093] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 408.493557] EXT4-fs (loop5): get root inode failed [ 408.494624] EXT4-fs (loop5): mount failed 16:44:08 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000100)) [ 408.582208] FAULT_INJECTION: forcing a failure. [ 408.582208] name failslab, interval 1, probability 0, space 0, times 0 [ 408.586679] CPU: 0 PID: 5515 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 408.588188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 408.590031] Call Trace: [ 408.590608] dump_stack+0x107/0x167 [ 408.591410] should_fail.cold+0x5/0xa [ 408.592252] ? create_object.isra.0+0x3a/0xa30 [ 408.593271] should_failslab+0x5/0x20 [ 408.594117] kmem_cache_alloc+0x5b/0x310 [ 408.595017] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 408.596240] create_object.isra.0+0x3a/0xa30 [ 408.597243] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 408.598469] kmem_cache_alloc+0x159/0x310 [ 408.599387] security_file_alloc+0x34/0x170 [ 408.600334] __alloc_file+0xb7/0x320 [ 408.601500] alloc_empty_file+0x6d/0x170 [ 408.602613] alloc_file+0x5e/0x5a0 [ 408.603593] alloc_file_pseudo+0x16a/0x250 [ 408.604744] ? alloc_file+0x5a0/0x5a0 [ 408.605730] anon_inode_getfile+0xc8/0x1f0 [ 408.606658] io_uring_setup+0x138b/0x2980 [ 408.607573] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 408.608688] ? perf_trace_preemptirq_template+0x266/0x400 [ 408.609898] ? perf_trace_preemptirq_template+0x26d/0x400 [ 408.611100] ? perf_trace_preemptirq_template+0x26d/0x400 [ 408.612323] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 408.613484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 408.614619] do_syscall_64+0x33/0x40 [ 408.615442] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 408.616578] RIP: 0033:0x7f77bfc9fb19 [ 408.617392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 408.621430] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 408.623084] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 408.624669] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 408.626239] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 408.627813] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 408.629411] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:44:08 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000100)) 16:44:08 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000100)) [ 408.679134] loop1: detected capacity change from 0 to 16776704 [ 408.682901] loop5: detected capacity change from 0 to 16776704 [ 408.686117] loop7: detected capacity change from 0 to 16776704 [ 408.703231] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 408.707249] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 408.710135] EXT4-fs (loop1): get root inode failed [ 408.711383] EXT4-fs (loop1): mount failed [ 408.718916] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 408.726125] EXT4-fs (loop5): get root inode failed [ 408.727513] EXT4-fs (loop5): mount failed [ 408.730438] EXT4-fs (loop7): get root inode failed [ 408.731638] EXT4-fs (loop7): mount failed 16:44:24 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:44:24 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:44:24 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:44:24 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000100)) 16:44:24 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000100)) 16:44:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 27) 16:44:24 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000100)) 16:44:24 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 423.941395] loop7: detected capacity change from 0 to 16776704 [ 423.954982] loop1: detected capacity change from 0 to 16776704 [ 423.962028] FAULT_INJECTION: forcing a failure. [ 423.962028] name failslab, interval 1, probability 0, space 0, times 0 [ 423.965004] CPU: 1 PID: 5550 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 423.966546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 423.967278] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 423.968291] Call Trace: [ 423.968317] dump_stack+0x107/0x167 [ 423.968347] should_fail.cold+0x5/0xa [ 423.973336] ? io_uring_alloc_task_context+0x99/0x6a0 [ 423.974639] should_failslab+0x5/0x20 [ 423.975601] kmem_cache_alloc_trace+0x55/0x320 [ 423.976787] io_uring_alloc_task_context+0x99/0x6a0 [ 423.977961] ? io_import_iovec+0x1120/0x1120 [ 423.978601] EXT4-fs (loop7): get root inode failed [ 423.978888] ? lock_downgrade+0x6d0/0x6d0 [ 423.979985] EXT4-fs (loop7): mount failed [ 423.980793] ? do_raw_spin_lock+0x121/0x260 [ 423.980810] ? rwlock_bug.part.0+0x90/0x90 [ 423.980833] __io_uring_add_tctx_node+0x2c6/0x520 [ 423.984449] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 423.985546] ? alloc_fd+0x2e7/0x670 [ 423.986315] io_uring_setup+0x1fbb/0x2980 [ 423.987186] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 423.988253] ? wait_for_completion_io+0x270/0x270 [ 423.989269] ? perf_trace_preemptirq_template+0x26d/0x400 [ 423.990412] ? perf_trace_preemptirq_template+0x26d/0x400 [ 423.991594] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 423.992704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 423.993784] do_syscall_64+0x33/0x40 [ 423.994567] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 423.995644] RIP: 0033:0x7f77bfc9fb19 [ 423.996422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 424.000298] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 424.001902] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 424.003401] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 424.004904] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 424.006394] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 424.007877] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 424.021303] loop5: detected capacity change from 0 to 16776704 [ 424.025213] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 424.026775] EXT4-fs (loop1): mount failed [ 424.054870] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated 16:44:24 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000100)) [ 424.063223] EXT4-fs (loop5): get root inode failed [ 424.064500] EXT4-fs (loop5): mount failed 16:44:24 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000100)) 16:44:24 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000100)) 16:44:24 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000100)) 16:44:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 28) [ 424.161146] loop5: detected capacity change from 0 to 16776704 [ 424.179946] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 424.183993] EXT4-fs (loop5): get root inode failed [ 424.185196] EXT4-fs (loop5): mount failed 16:44:24 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000100)) [ 424.213619] FAULT_INJECTION: forcing a failure. [ 424.213619] name failslab, interval 1, probability 0, space 0, times 0 [ 424.216092] CPU: 1 PID: 5573 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 424.217563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 424.219322] Call Trace: [ 424.219886] dump_stack+0x107/0x167 [ 424.220679] should_fail.cold+0x5/0xa [ 424.221495] ? create_object.isra.0+0x3a/0xa30 [ 424.222464] should_failslab+0x5/0x20 [ 424.223274] kmem_cache_alloc+0x5b/0x310 [ 424.224141] create_object.isra.0+0x3a/0xa30 [ 424.225079] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 424.226161] kmem_cache_alloc_trace+0x151/0x320 [ 424.227153] io_uring_alloc_task_context+0x99/0x6a0 [ 424.228215] ? io_import_iovec+0x1120/0x1120 [ 424.229182] ? lock_downgrade+0x6d0/0x6d0 [ 424.230062] ? do_raw_spin_lock+0x121/0x260 [ 424.230973] ? rwlock_bug.part.0+0x90/0x90 [ 424.231874] __io_uring_add_tctx_node+0x2c6/0x520 [ 424.232909] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 424.234021] ? alloc_fd+0x2e7/0x670 [ 424.234801] io_uring_setup+0x1fbb/0x2980 [ 424.235685] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 424.236769] ? wait_for_completion_io+0x270/0x270 [ 424.237792] ? perf_trace_preemptirq_template+0x26d/0x400 [ 424.238950] ? perf_trace_preemptirq_template+0x26d/0x400 [ 424.240131] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 424.241249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 424.242346] do_syscall_64+0x33/0x40 [ 424.243137] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 424.244219] RIP: 0033:0x7f77bfc9fb19 [ 424.245032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 424.248934] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 424.250549] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 424.252060] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 424.253580] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 424.255093] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 424.256610] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 424.288093] loop1: detected capacity change from 0 to 16776704 [ 424.299379] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 424.301309] EXT4-fs (loop1): mount failed [ 424.317059] loop7: detected capacity change from 0 to 16776704 16:44:24 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000100)) [ 424.342231] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 424.343625] EXT4-fs (loop7): mount failed [ 424.361894] loop5: detected capacity change from 0 to 16776704 16:44:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 29) [ 424.396478] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 424.397321] FAULT_INJECTION: forcing a failure. [ 424.397321] name failslab, interval 1, probability 0, space 0, times 0 [ 424.401581] CPU: 1 PID: 5589 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 424.403033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 424.404802] Call Trace: [ 424.405370] dump_stack+0x107/0x167 [ 424.406145] should_fail.cold+0x5/0xa [ 424.406970] ? create_object.isra.0+0x3a/0xa30 [ 424.407239] EXT4-fs (loop5): get root inode failed [ 424.407929] should_failslab+0x5/0x20 [ 424.407949] kmem_cache_alloc+0x5b/0x310 [ 424.407977] create_object.isra.0+0x3a/0xa30 [ 424.409098] EXT4-fs (loop5): mount failed [ 424.409825] kmemleak_alloc_percpu+0xa0/0x100 [ 424.409851] pcpu_alloc+0x4e2/0x1240 [ 424.414197] __percpu_counter_init+0x10d/0x2d0 [ 424.415170] io_uring_alloc_task_context+0xcc/0x6a0 [ 424.416231] ? io_import_iovec+0x1120/0x1120 [ 424.417174] ? lock_downgrade+0x6d0/0x6d0 [ 424.418059] ? do_raw_spin_lock+0x121/0x260 [ 424.418969] ? rwlock_bug.part.0+0x90/0x90 [ 424.419876] __io_uring_add_tctx_node+0x2c6/0x520 [ 424.420903] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 424.422009] ? alloc_fd+0x2e7/0x670 [ 424.422793] io_uring_setup+0x1fbb/0x2980 [ 424.423683] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 424.424773] ? wait_for_completion_io+0x270/0x270 [ 424.425790] ? perf_trace_preemptirq_template+0x26d/0x400 [ 424.426954] ? perf_trace_preemptirq_template+0x26d/0x400 [ 424.428144] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 424.429261] ? syscall_enter_from_user_mode+0x1d/0x50 [ 424.430362] do_syscall_64+0x33/0x40 [ 424.431159] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 424.432243] RIP: 0033:0x7f77bfc9fb19 [ 424.433047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 424.436961] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 424.438597] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 424.440111] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 424.441656] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 424.443157] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 424.444720] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:44:37 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 30) 16:44:37 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 437.545019] FAULT_INJECTION: forcing a failure. [ 437.545019] name failslab, interval 1, probability 0, space 0, times 0 [ 437.546413] CPU: 1 PID: 5596 Comm: syz-executor.4 Not tainted 5.10.261 #1 16:44:37 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000100)) 16:44:37 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:44:37 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000100)) 16:44:37 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000100)) 16:44:37 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:44:37 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 437.547243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 437.548430] Call Trace: [ 437.548591] loop7: detected capacity change from 0 to 16776704 [ 437.548783] dump_stack+0x107/0x167 [ 437.550108] should_fail.cold+0x5/0xa [ 437.550732] ? create_object.isra.0+0x3a/0xa30 [ 437.551479] should_failslab+0x5/0x20 [ 437.552103] kmem_cache_alloc+0x5b/0x310 [ 437.552790] create_object.isra.0+0x3a/0xa30 [ 437.553529] kmemleak_alloc_percpu+0xa0/0x100 [ 437.554273] pcpu_alloc+0x4e2/0x1240 [ 437.554900] __percpu_counter_init+0x10d/0x2d0 [ 437.555658] io_uring_alloc_task_context+0xcc/0x6a0 [ 437.556475] ? io_import_iovec+0x1120/0x1120 [ 437.557223] ? lock_downgrade+0x6d0/0x6d0 [ 437.557901] ? do_raw_spin_lock+0x121/0x260 [ 437.558613] ? rwlock_bug.part.0+0x90/0x90 [ 437.559308] __io_uring_add_tctx_node+0x2c6/0x520 [ 437.560096] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 437.560977] ? alloc_fd+0x2e7/0x670 [ 437.561574] io_uring_setup+0x1fbb/0x2980 [ 437.562255] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 437.563081] ? wait_for_completion_io+0x270/0x270 [ 437.563866] ? perf_trace_preemptirq_template+0x26d/0x400 [ 437.564775] ? perf_trace_preemptirq_template+0x26d/0x400 [ 437.565699] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 437.566555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 437.567396] do_syscall_64+0x33/0x40 [ 437.568004] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 437.568863] RIP: 0033:0x7f77bfc9fb19 [ 437.569472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 437.572454] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 437.573714] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 437.574873] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 437.576041] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 437.577212] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 437.578339] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 437.591631] loop1: detected capacity change from 0 to 16776704 [ 437.595939] loop5: detected capacity change from 0 to 16776704 [ 437.600334] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 437.601081] EXT4-fs (loop7): mount failed [ 437.606555] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 437.608222] EXT4-fs (loop1): get root inode failed [ 437.608835] EXT4-fs (loop1): mount failed [ 437.615104] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 437.617133] EXT4-fs (loop5): get root inode failed [ 437.617751] EXT4-fs (loop5): mount failed 16:44:37 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 31) 16:44:37 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000100)) 16:44:37 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:44:37 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000100)) [ 437.679348] FAULT_INJECTION: forcing a failure. [ 437.679348] name failslab, interval 1, probability 0, space 0, times 0 [ 437.680917] CPU: 0 PID: 5628 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 437.681695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 437.682644] Call Trace: [ 437.682949] dump_stack+0x107/0x167 [ 437.683366] should_fail.cold+0x5/0xa [ 437.683801] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 437.684397] should_failslab+0x5/0x20 [ 437.684845] kmem_cache_alloc_trace+0x55/0x320 [ 437.685367] io_uring_alloc_task_context+0x4a3/0x6a0 [ 437.685947] ? io_import_iovec+0x1120/0x1120 [ 437.686447] ? lock_downgrade+0x6d0/0x6d0 [ 437.686915] ? do_raw_spin_lock+0x121/0x260 [ 437.687406] ? rwlock_bug.part.0+0x90/0x90 [ 437.687890] __io_uring_add_tctx_node+0x2c6/0x520 [ 437.688437] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 437.689040] ? alloc_fd+0x2e7/0x670 [ 437.689456] io_uring_setup+0x1fbb/0x2980 [ 437.689934] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 437.690508] ? perf_trace_preemptirq_template+0x266/0x400 [ 437.691135] ? perf_trace_preemptirq_template+0x26d/0x400 [ 437.691759] ? perf_trace_preemptirq_template+0x26d/0x400 [ 437.692396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 437.692999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 437.693589] do_syscall_64+0x33/0x40 [ 437.694012] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 437.694595] RIP: 0033:0x7f77bfc9fb19 [ 437.695017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 437.697116] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 437.697926] loop1: detected capacity change from 0 to 16776704 [ 437.697979] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 437.699526] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 437.700336] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 437.701153] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 437.701960] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:44:37 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000100)) [ 437.710753] loop5: detected capacity change from 0 to 16776704 16:44:38 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 437.723240] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 437.724437] loop7: detected capacity change from 0 to 16776704 [ 437.725857] EXT4-fs (loop1): get root inode failed [ 437.726417] EXT4-fs (loop1): mount failed [ 437.729649] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 437.739418] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 437.739940] EXT4-fs (loop5): get root inode failed [ 437.740200] EXT4-fs (loop7): mount failed [ 437.740676] EXT4-fs (loop5): mount failed 16:44:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 32) [ 437.772088] FAULT_INJECTION: forcing a failure. [ 437.772088] name failslab, interval 1, probability 0, space 0, times 0 [ 437.773508] CPU: 0 PID: 5642 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 437.774285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 437.775228] Call Trace: [ 437.775534] dump_stack+0x107/0x167 [ 437.775950] should_fail.cold+0x5/0xa [ 437.776386] ? create_object.isra.0+0x3a/0xa30 [ 437.776914] should_failslab+0x5/0x20 [ 437.777348] kmem_cache_alloc+0x5b/0x310 [ 437.777813] create_object.isra.0+0x3a/0xa30 [ 437.778310] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 437.778887] kmem_cache_alloc_trace+0x151/0x320 [ 437.779419] io_uring_alloc_task_context+0x4a3/0x6a0 [ 437.780002] ? io_import_iovec+0x1120/0x1120 [ 437.780502] ? lock_downgrade+0x6d0/0x6d0 [ 437.780980] ? do_raw_spin_lock+0x121/0x260 [ 437.781469] ? rwlock_bug.part.0+0x90/0x90 [ 437.781950] __io_uring_add_tctx_node+0x2c6/0x520 [ 437.782496] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 437.783086] ? alloc_fd+0x2e7/0x670 [ 437.783503] io_uring_setup+0x1fbb/0x2980 [ 437.783974] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 437.784547] ? perf_trace_preemptirq_template+0x266/0x400 [ 437.785181] ? perf_trace_preemptirq_template+0x26d/0x400 [ 437.785806] ? perf_trace_preemptirq_template+0x26d/0x400 [ 437.786434] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 437.787029] ? syscall_enter_from_user_mode+0x1d/0x50 [ 437.787614] do_syscall_64+0x33/0x40 [ 437.788036] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 437.788620] RIP: 0033:0x7f77bfc9fb19 [ 437.789049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 437.791137] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 437.791998] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 437.792808] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 437.793614] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 437.794417] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 437.795221] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:44:38 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000100)) 16:44:38 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000100)) [ 437.816197] loop7: detected capacity change from 0 to 16776704 [ 437.821032] loop1: detected capacity change from 0 to 16776704 [ 437.823230] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 437.824821] EXT4-fs (loop7): get root inode failed [ 437.825378] EXT4-fs (loop7): mount failed [ 437.827692] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 437.829223] EXT4-fs (loop1): get root inode failed [ 437.829863] EXT4-fs (loop1): mount failed 16:44:51 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:44:51 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000100)) 16:44:51 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000100)) 16:44:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 33) 16:44:51 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 451.059413] loop7: detected capacity change from 0 to 16776704 [ 451.067470] FAULT_INJECTION: forcing a failure. [ 451.067470] name failslab, interval 1, probability 0, space 0, times 0 [ 451.070081] CPU: 0 PID: 5665 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 451.071544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 451.073305] Call Trace: [ 451.073877] dump_stack+0x107/0x167 [ 451.074655] should_fail.cold+0x5/0xa [ 451.075463] ? io_wq_create+0xeb/0xc00 [ 451.076286] should_failslab+0x5/0x20 [ 451.077092] __kmalloc+0x72/0x390 [ 451.077837] io_wq_create+0xeb/0xc00 [ 451.078636] io_uring_alloc_task_context+0x1f1/0x6a0 [ 451.079725] ? io_import_iovec+0x1120/0x1120 [ 451.080645] ? io_apoll_task_func+0x2d0/0x2d0 [ 451.081596] ? __io_req_find_next+0x300/0x300 [ 451.082550] ? do_raw_spin_lock+0x121/0x260 16:44:51 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:44:51 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:44:51 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 451.083466] ? rwlock_bug.part.0+0x90/0x90 [ 451.084523] __io_uring_add_tctx_node+0x2c6/0x520 [ 451.085564] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 451.086682] ? alloc_fd+0x2e7/0x670 [ 451.087462] io_uring_setup+0x1fbb/0x2980 [ 451.088348] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 451.089423] ? wait_for_completion_io+0x270/0x270 [ 451.090458] ? perf_trace_preemptirq_template+0x26d/0x400 [ 451.091641] ? perf_trace_preemptirq_template+0x26d/0x400 [ 451.092825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 451.093961] ? syscall_enter_from_user_mode+0x1d/0x50 [ 451.095051] do_syscall_64+0x33/0x40 [ 451.095876] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 451.097191] RIP: 0033:0x7f77bfc9fb19 [ 451.098149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 451.102778] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 451.104662] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 451.106512] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 451.108318] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 451.110147] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 451.111942] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 451.117217] loop5: detected capacity change from 0 to 16776704 [ 451.121223] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 451.127306] EXT4-fs (loop7): get root inode failed [ 451.128744] EXT4-fs (loop7): mount failed [ 451.139879] loop1: detected capacity change from 0 to 16776704 [ 451.144311] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 451.145498] EXT4-fs (loop1): group descriptors corrupted! [ 451.162536] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 451.167747] EXT4-fs (loop5): get root inode failed [ 451.169038] EXT4-fs (loop5): mount failed 16:44:51 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 451.212159] loop1: detected capacity change from 0 to 16776704 16:44:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 34) 16:44:51 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:44:51 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000100)) [ 451.248283] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 451.250271] EXT4-fs (loop1): group descriptors corrupted! [ 451.302033] loop7: detected capacity change from 0 to 16776704 16:44:51 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000100)) 16:44:51 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 451.323162] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 451.325690] EXT4-fs (loop7): get root inode failed [ 451.326260] EXT4-fs (loop7): mount failed [ 451.327066] FAULT_INJECTION: forcing a failure. [ 451.327066] name failslab, interval 1, probability 0, space 0, times 0 [ 451.328501] CPU: 1 PID: 5693 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 451.329298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 451.330270] Call Trace: [ 451.330602] dump_stack+0x107/0x167 [ 451.331051] should_fail.cold+0x5/0xa [ 451.331517] ? create_object.isra.0+0x3a/0xa30 [ 451.332064] should_failslab+0x5/0x20 [ 451.332506] kmem_cache_alloc+0x5b/0x310 [ 451.332973] create_object.isra.0+0x3a/0xa30 [ 451.333476] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 451.334056] __kmalloc+0x16e/0x390 [ 451.334472] io_wq_create+0xeb/0xc00 [ 451.334904] io_uring_alloc_task_context+0x1f1/0x6a0 [ 451.335481] ? io_import_iovec+0x1120/0x1120 [ 451.335993] ? io_apoll_task_func+0x2d0/0x2d0 [ 451.336508] ? __io_req_find_next+0x300/0x300 [ 451.337032] ? do_raw_spin_lock+0x121/0x260 [ 451.337527] ? rwlock_bug.part.0+0x90/0x90 [ 451.338021] __io_uring_add_tctx_node+0x2c6/0x520 [ 451.338574] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 451.339174] ? alloc_fd+0x2e7/0x670 [ 451.339594] io_uring_setup+0x1fbb/0x2980 [ 451.340078] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 451.340663] ? wait_for_completion_io+0x270/0x270 [ 451.341234] ? perf_trace_preemptirq_template+0x26d/0x400 [ 451.341863] ? perf_trace_preemptirq_template+0x26d/0x400 [ 451.342511] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 451.343120] ? syscall_enter_from_user_mode+0x1d/0x50 [ 451.343711] do_syscall_64+0x33/0x40 [ 451.344132] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 451.344730] RIP: 0033:0x7f77bfc9fb19 [ 451.345164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 451.347290] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 451.348176] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 451.349007] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 451.349828] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 451.350654] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 451.351492] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:44:51 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:44:51 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 451.397388] loop1: detected capacity change from 0 to 16776704 16:44:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 35) [ 451.429861] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 451.432303] EXT4-fs (loop1): group descriptors corrupted! [ 451.443176] loop7: detected capacity change from 0 to 16776704 [ 451.447367] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 451.448515] EXT4-fs (loop7): group descriptors corrupted! [ 451.461626] FAULT_INJECTION: forcing a failure. [ 451.461626] name failslab, interval 1, probability 0, space 0, times 0 [ 451.463043] CPU: 1 PID: 5706 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 451.463851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 451.464824] Call Trace: [ 451.465169] dump_stack+0x107/0x167 [ 451.465611] should_fail.cold+0x5/0xa [ 451.466075] ? io_wq_create+0x6ef/0xc00 [ 451.466539] should_failslab+0x5/0x20 [ 451.466974] kmem_cache_alloc_node_trace+0x59/0x340 [ 451.467544] io_wq_create+0x6ef/0xc00 [ 451.467985] io_uring_alloc_task_context+0x1f1/0x6a0 [ 451.468574] ? io_import_iovec+0x1120/0x1120 [ 451.469091] ? io_apoll_task_func+0x2d0/0x2d0 [ 451.469609] ? __io_req_find_next+0x300/0x300 [ 451.470128] ? do_raw_spin_lock+0x121/0x260 [ 451.470624] ? rwlock_bug.part.0+0x90/0x90 [ 451.471112] __io_uring_add_tctx_node+0x2c6/0x520 [ 451.471679] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 451.472280] ? alloc_fd+0x2e7/0x670 [ 451.472706] io_uring_setup+0x1fbb/0x2980 [ 451.473202] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 451.473787] ? wait_for_completion_io+0x270/0x270 [ 451.474338] ? perf_trace_preemptirq_template+0x26d/0x400 [ 451.474967] ? perf_trace_preemptirq_template+0x26d/0x400 [ 451.475608] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 451.476205] ? syscall_enter_from_user_mode+0x1d/0x50 [ 451.476799] do_syscall_64+0x33/0x40 [ 451.477231] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 451.477828] RIP: 0033:0x7f77bfc9fb19 [ 451.478251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 451.480370] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 451.481260] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 451.482084] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 451.482909] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 451.483730] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 451.484557] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:44:51 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:44:51 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000100)) [ 451.554145] loop5: detected capacity change from 0 to 16776704 [ 451.563967] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 451.566107] EXT4-fs (loop5): get root inode failed [ 451.566729] EXT4-fs (loop5): mount failed 16:45:05 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:05 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:05 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:05 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 36) 16:45:05 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:05 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:05 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 465.612035] FAULT_INJECTION: forcing a failure. [ 465.612035] name failslab, interval 1, probability 0, space 0, times 0 [ 465.615019] CPU: 0 PID: 5723 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 465.616216] loop1: detected capacity change from 0 to 16776704 [ 465.616772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 465.616780] Call Trace: [ 465.616810] dump_stack+0x107/0x167 [ 465.616838] should_fail.cold+0x5/0xa [ 465.622789] ? create_object.isra.0+0x3a/0xa30 [ 465.623962] should_failslab+0x5/0x20 [ 465.624933] kmem_cache_alloc+0x5b/0x310 [ 465.625980] ? io_wq_create+0x114/0xc00 [ 465.627001] create_object.isra.0+0x3a/0xa30 [ 465.628120] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 465.629432] kmem_cache_alloc_node_trace+0x16d/0x340 [ 465.630743] io_wq_create+0x6ef/0xc00 [ 465.631725] io_uring_alloc_task_context+0x1f1/0x6a0 [ 465.633036] ? io_import_iovec+0x1120/0x1120 [ 465.634148] ? io_apoll_task_func+0x2d0/0x2d0 [ 465.635159] ? __io_req_find_next+0x300/0x300 [ 465.636162] ? do_raw_spin_lock+0x121/0x260 [ 465.637140] ? rwlock_bug.part.0+0x90/0x90 [ 465.638096] __io_uring_add_tctx_node+0x2c6/0x520 [ 465.639179] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 465.640354] ? alloc_fd+0x2e7/0x670 [ 465.641208] io_uring_setup+0x1fbb/0x2980 [ 465.642148] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 465.643321] ? perf_trace_preemptirq_template+0x266/0x400 [ 465.644560] ? perf_trace_preemptirq_template+0x26d/0x400 [ 465.645812] ? perf_trace_preemptirq_template+0x26d/0x400 [ 465.647071] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 465.648255] ? syscall_enter_from_user_mode+0x1d/0x50 [ 465.649440] do_syscall_64+0x33/0x40 [ 465.650282] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 465.651433] RIP: 0033:0x7f77bfc9fb19 16:45:05 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 465.652272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 465.656593] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 465.658328] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 465.659942] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 465.661611] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 465.663104] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 465.664599] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 465.679064] loop7: detected capacity change from 0 to 16776704 [ 465.687110] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 465.689565] EXT4-fs (loop1): group descriptors corrupted! [ 465.701515] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 465.703826] EXT4-fs (loop7): group descriptors corrupted! [ 465.710756] loop5: detected capacity change from 0 to 16776704 16:45:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 37) [ 465.752940] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 465.757296] EXT4-fs (loop5): get root inode failed [ 465.758442] EXT4-fs (loop5): mount failed 16:45:06 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 465.803585] FAULT_INJECTION: forcing a failure. [ 465.803585] name failslab, interval 1, probability 0, space 0, times 0 [ 465.806114] CPU: 1 PID: 5745 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 465.807558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 465.809306] Call Trace: [ 465.809868] dump_stack+0x107/0x167 [ 465.810648] should_fail.cold+0x5/0xa [ 465.811467] ? __io_uring_add_tctx_node+0x15c/0x520 [ 465.812508] should_failslab+0x5/0x20 [ 465.813314] kmem_cache_alloc_trace+0x55/0x320 [ 465.814289] __io_uring_add_tctx_node+0x15c/0x520 [ 465.815303] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 465.816417] ? alloc_fd+0x2e7/0x670 [ 465.817207] io_uring_setup+0x1fbb/0x2980 [ 465.818090] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 465.819147] ? wait_for_completion_io+0x270/0x270 [ 465.820156] ? perf_trace_preemptirq_template+0x26d/0x400 [ 465.821319] ? perf_trace_preemptirq_template+0x26d/0x400 [ 465.822501] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 465.823599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 465.824696] do_syscall_64+0x33/0x40 [ 465.825489] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 465.826570] RIP: 0033:0x7f77bfc9fb19 [ 465.827341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 465.831208] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 465.832803] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 465.834308] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 465.835803] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 465.837314] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 465.838830] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:45:06 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:06 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:06 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 465.891815] loop7: detected capacity change from 0 to 16776704 16:45:06 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000100)) [ 465.907295] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 465.909394] EXT4-fs (loop7): group descriptors corrupted! 16:45:06 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 465.927375] loop5: detected capacity change from 0 to 16776704 [ 465.940069] loop1: detected capacity change from 0 to 16776704 [ 465.953838] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 465.955918] EXT4-fs (loop1): group descriptors corrupted! [ 465.991901] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 465.993708] EXT4-fs (loop5): mount failed 16:45:18 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:18 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:18 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 38) 16:45:18 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:18 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:18 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:18 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 478.300844] FAULT_INJECTION: forcing a failure. [ 478.300844] name failslab, interval 1, probability 0, space 0, times 0 [ 478.303241] CPU: 1 PID: 5772 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 478.304618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 478.306307] Call Trace: [ 478.306840] dump_stack+0x107/0x167 [ 478.307569] should_fail.cold+0x5/0xa [ 478.308331] ? create_object.isra.0+0x3a/0xa30 [ 478.309253] should_failslab+0x5/0x20 [ 478.310021] kmem_cache_alloc+0x5b/0x310 [ 478.310842] create_object.isra.0+0x3a/0xa30 [ 478.311722] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 478.312749] kmem_cache_alloc_trace+0x151/0x320 [ 478.313705] __io_uring_add_tctx_node+0x15c/0x520 [ 478.314679] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 478.315733] ? alloc_fd+0x2e7/0x670 [ 478.316465] io_uring_setup+0x1fbb/0x2980 [ 478.317570] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 478.318863] ? wait_for_completion_io+0x270/0x270 [ 478.320089] ? perf_trace_preemptirq_template+0x26d/0x400 [ 478.321523] ? perf_trace_preemptirq_template+0x26d/0x400 [ 478.322939] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 478.324263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 478.325583] do_syscall_64+0x33/0x40 [ 478.326533] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 478.327854] RIP: 0033:0x7f77bfc9fb19 [ 478.328808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 478.333534] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 478.335459] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 478.337275] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 478.339089] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 478.340900] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 478.342712] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 478.346756] loop5: detected capacity change from 0 to 16776704 16:45:18 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 478.357690] loop7: detected capacity change from 0 to 16776704 [ 478.362594] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 478.363756] EXT4-fs (loop7): group descriptors corrupted! 16:45:18 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 478.383915] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 478.385625] EXT4-fs (loop5): mount failed [ 478.390800] loop1: detected capacity change from 0 to 16776704 16:45:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 39) [ 478.427800] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 478.429765] EXT4-fs (loop1): group descriptors corrupted! 16:45:18 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:18 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:18 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:18 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 478.512353] loop7: detected capacity change from 0 to 16776704 [ 478.519245] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 478.520046] FAULT_INJECTION: forcing a failure. [ 478.520046] name failslab, interval 1, probability 0, space 0, times 0 [ 478.520346] EXT4-fs (loop7): group descriptors corrupted! [ 478.522904] CPU: 1 PID: 5799 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 478.524871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 478.526628] Call Trace: [ 478.527208] dump_stack+0x107/0x167 [ 478.527980] should_fail.cold+0x5/0xa [ 478.528784] ? xas_alloc+0x336/0x440 16:45:18 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 478.529579] should_failslab+0x5/0x20 [ 478.530485] kmem_cache_alloc+0x5b/0x310 [ 478.531346] ? stack_trace_consume_entry+0x160/0x160 [ 478.532414] xas_alloc+0x336/0x440 [ 478.533177] xas_create+0x34a/0x10d0 [ 478.533970] ? kernel_text_address+0xf2/0x120 [ 478.534915] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 478.536020] xas_store+0x8c/0x1c40 [ 478.536783] __xa_store+0x164/0x2d0 [ 478.537557] ? xa_delete_node+0x280/0x280 [ 478.538435] ? trace_hardirqs_on+0x5b/0x180 [ 478.539346] xa_store+0x31/0x50 [ 478.540040] __io_uring_add_tctx_node+0x1cf/0x520 [ 478.541048] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 478.542156] ? alloc_fd+0x2e7/0x670 [ 478.542932] io_uring_setup+0x1fbb/0x2980 [ 478.543810] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 478.544873] ? wait_for_completion_io+0x270/0x270 [ 478.545890] ? perf_trace_preemptirq_template+0x26d/0x400 [ 478.547038] ? perf_trace_preemptirq_template+0x26d/0x400 [ 478.548207] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 478.549328] ? syscall_enter_from_user_mode+0x1d/0x50 [ 478.550413] do_syscall_64+0x33/0x40 [ 478.551195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 478.552266] RIP: 0033:0x7f77bfc9fb19 [ 478.553046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 478.556919] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 478.558528] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 478.560045] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 478.561555] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 478.563053] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 478.564555] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 478.587094] loop1: detected capacity change from 0 to 16776704 [ 478.599464] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 478.601499] EXT4-fs (loop1): group descriptors corrupted! 16:45:31 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:31 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:31 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:31 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000100)) 16:45:31 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 40) 16:45:31 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:31 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 491.255853] loop1: detected capacity change from 0 to 16776704 [ 491.260128] FAULT_INJECTION: forcing a failure. [ 491.260128] name failslab, interval 1, probability 0, space 0, times 0 [ 491.262792] CPU: 0 PID: 5819 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 491.264336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 491.266229] Call Trace: [ 491.266831] dump_stack+0x107/0x167 [ 491.267662] should_fail.cold+0x5/0xa [ 491.268528] ? create_object.isra.0+0x3a/0xa30 [ 491.269571] should_failslab+0x5/0x20 [ 491.270435] kmem_cache_alloc+0x5b/0x310 [ 491.271361] create_object.isra.0+0x3a/0xa30 [ 491.272352] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 491.273513] kmem_cache_alloc+0x159/0x310 [ 491.274607] xas_alloc+0x336/0x440 [ 491.275520] xas_create+0x34a/0x10d0 [ 491.276379] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 491.277534] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 491.278732] xas_store+0x8c/0x1c40 [ 491.279555] __xa_store+0x164/0x2d0 [ 491.280384] ? xa_delete_node+0x280/0x280 [ 491.281344] ? trace_hardirqs_on+0x5b/0x180 [ 491.282330] xa_store+0x31/0x50 [ 491.283085] __io_uring_add_tctx_node+0x1cf/0x520 [ 491.284183] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 491.285389] ? alloc_fd+0x2e7/0x670 [ 491.286227] io_uring_setup+0x1fbb/0x2980 [ 491.287180] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 491.288328] ? perf_trace_preemptirq_template+0x266/0x400 [ 491.289587] ? perf_trace_preemptirq_template+0x26d/0x400 [ 491.290830] ? perf_trace_preemptirq_template+0x26d/0x400 [ 491.292098] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 491.293293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 491.294475] do_syscall_64+0x33/0x40 [ 491.295321] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 491.296483] RIP: 0033:0x7f77bfc9fb19 [ 491.297335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 491.301534] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 491.303264] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 491.304899] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 491.306527] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 491.308143] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 491.309779] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 491.313344] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 491.315369] EXT4-fs (loop1): group descriptors corrupted! [ 491.334335] loop7: detected capacity change from 0 to 16776704 16:45:31 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 491.340640] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 491.342665] EXT4-fs (loop7): group descriptors corrupted! [ 491.357186] loop5: detected capacity change from 0 to 16776704 [ 491.385629] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 491.388435] EXT4-fs (loop5): get root inode failed [ 491.389584] EXT4-fs (loop5): mount failed 16:45:31 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:31 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:31 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 41) 16:45:31 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 491.481900] loop7: detected capacity change from 0 to 16776704 16:45:31 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000100)) [ 491.515535] FAULT_INJECTION: forcing a failure. [ 491.515535] name failslab, interval 1, probability 0, space 0, times 0 [ 491.517988] CPU: 1 PID: 5849 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 491.519441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 491.521204] Call Trace: [ 491.521777] dump_stack+0x107/0x167 [ 491.522553] should_fail.cold+0x5/0xa [ 491.523365] ? xas_alloc+0x336/0x440 [ 491.524155] should_failslab+0x5/0x20 [ 491.524963] kmem_cache_alloc+0x5b/0x310 [ 491.525843] xas_alloc+0x336/0x440 [ 491.526600] xas_create+0x34a/0x10d0 [ 491.527400] ? kernel_text_address+0xf2/0x120 [ 491.528354] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 491.529477] xas_store+0x8c/0x1c40 [ 491.530248] __xa_store+0x164/0x2d0 [ 491.531029] ? xa_delete_node+0x280/0x280 [ 491.531916] ? trace_hardirqs_on+0x5b/0x180 [ 491.532844] xa_store+0x31/0x50 [ 491.533560] __io_uring_add_tctx_node+0x1cf/0x520 [ 491.534583] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 491.535701] ? alloc_fd+0x2e7/0x670 [ 491.536484] io_uring_setup+0x1fbb/0x2980 [ 491.537380] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 491.538461] ? wait_for_completion_io+0x270/0x270 [ 491.539484] ? perf_trace_preemptirq_template+0x26d/0x400 [ 491.540646] ? perf_trace_preemptirq_template+0x26d/0x400 [ 491.541851] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 491.542971] ? syscall_enter_from_user_mode+0x1d/0x50 [ 491.544070] do_syscall_64+0x33/0x40 [ 491.544876] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 491.545613] loop1: detected capacity change from 0 to 16776704 [ 491.545975] RIP: 0033:0x7f77bfc9fb19 [ 491.545993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 491.546011] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 491.553715] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 491.555234] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 491.556751] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 491.558273] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 491.559791] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 491.563830] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 491.565848] EXT4-fs (loop7): group descriptors corrupted! [ 491.567264] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 491.569185] EXT4-fs (loop1): group descriptors corrupted! 16:45:31 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 491.610615] loop5: detected capacity change from 0 to 16776704 [ 491.659192] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 491.665193] EXT4-fs (loop5): get root inode failed [ 491.666552] EXT4-fs (loop5): mount failed 16:45:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 42) 16:45:47 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:47 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:47 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:47 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:47 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:47 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:47 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000100)) [ 507.246871] loop1: detected capacity change from 0 to 16776704 [ 507.259097] FAULT_INJECTION: forcing a failure. [ 507.259097] name failslab, interval 1, probability 0, space 0, times 0 [ 507.262075] CPU: 0 PID: 5882 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 507.263771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 507.265827] Call Trace: [ 507.266481] dump_stack+0x107/0x167 [ 507.267383] should_fail.cold+0x5/0xa [ 507.268326] ? create_object.isra.0+0x3a/0xa30 [ 507.269517] should_failslab+0x5/0x20 [ 507.270457] kmem_cache_alloc+0x5b/0x310 [ 507.271444] ? mark_held_locks+0x9e/0xe0 [ 507.272447] create_object.isra.0+0x3a/0xa30 [ 507.273539] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 507.274785] kmem_cache_alloc+0x159/0x310 [ 507.275797] xas_alloc+0x336/0x440 [ 507.276654] xas_create+0x34a/0x10d0 [ 507.277568] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 507.278791] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 507.280059] xas_store+0x8c/0x1c40 [ 507.280939] __xa_store+0x164/0x2d0 [ 507.281834] ? xa_delete_node+0x280/0x280 [ 507.282852] ? trace_hardirqs_on+0x5b/0x180 [ 507.283910] xa_store+0x31/0x50 [ 507.284717] __io_uring_add_tctx_node+0x1cf/0x520 [ 507.284781] loop7: detected capacity change from 0 to 16776704 [ 507.285895] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 507.285914] ? alloc_fd+0x2e7/0x670 [ 507.285955] io_uring_setup+0x1fbb/0x2980 [ 507.290318] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 507.291556] ? perf_trace_preemptirq_template+0x266/0x400 [ 507.292871] ? perf_trace_preemptirq_template+0x26d/0x400 [ 507.294187] ? perf_trace_preemptirq_template+0x26d/0x400 [ 507.295529] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 507.296786] ? syscall_enter_from_user_mode+0x1d/0x50 [ 507.298028] do_syscall_64+0x33/0x40 [ 507.298926] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 507.300146] RIP: 0033:0x7f77bfc9fb19 [ 507.301028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 507.305452] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 507.307271] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 507.308995] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 507.310710] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 507.312383] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 507.314080] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 507.330770] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 507.333104] EXT4-fs (loop7): group descriptors corrupted! [ 507.337833] loop5: detected capacity change from 0 to 16776704 [ 507.350650] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 507.352844] EXT4-fs (loop1): group descriptors corrupted! 16:45:47 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:45:47 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 507.370997] EXT4-fs error (device loop5): ext4_fill_super:4971: inode #2: comm syz-executor.5: iget: special inode unallocated [ 507.381532] EXT4-fs (loop5): get root inode failed 16:45:47 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 507.382710] EXT4-fs (loop5): mount failed 16:45:47 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 43) 16:45:47 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:47 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:45:47 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 507.528002] loop5: detected capacity change from 0 to 16776704 [ 507.539161] FAULT_INJECTION: forcing a failure. [ 507.539161] name failslab, interval 1, probability 0, space 0, times 0 [ 507.541919] CPU: 0 PID: 5903 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 507.543547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 507.543999] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 507.545531] Call Trace: [ 507.545560] dump_stack+0x107/0x167 [ 507.545586] should_fail.cold+0x5/0xa [ 507.545614] ? xas_alloc+0x336/0x440 [ 507.547459] EXT4-fs (loop5): group descriptors corrupted! [ 507.548054] should_failslab+0x5/0x20 [ 507.552708] kmem_cache_alloc+0x5b/0x310 [ 507.553688] xas_alloc+0x336/0x440 [ 507.554533] xas_create+0x34a/0x10d0 [ 507.555418] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 507.556664] xas_store+0x8c/0x1c40 [ 507.557531] __xa_store+0x164/0x2d0 [ 507.558390] ? xa_delete_node+0x280/0x280 [ 507.559388] xa_store+0x31/0x50 [ 507.560169] __io_uring_add_tctx_node+0x1cf/0x520 [ 507.561302] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 507.562546] ? alloc_fd+0x2e7/0x670 [ 507.563406] io_uring_setup+0x1fbb/0x2980 [ 507.564378] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 507.565572] ? perf_trace_preemptirq_template+0x266/0x400 [ 507.566855] ? perf_trace_preemptirq_template+0x26d/0x400 [ 507.568133] ? perf_trace_preemptirq_template+0x26d/0x400 [ 507.569455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 507.570681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 507.571889] do_syscall_64+0x33/0x40 [ 507.572760] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 507.573969] RIP: 0033:0x7f77bfc9fb19 [ 507.574845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 507.579146] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 507.580911] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 507.582566] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 507.584219] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 507.585876] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 507.587524] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:45:47 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 507.621842] loop7: detected capacity change from 0 to 16776704 [ 507.629952] loop1: detected capacity change from 0 to 16776704 [ 507.642980] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 507.645105] EXT4-fs (loop1): group descriptors corrupted! [ 507.649943] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 507.652024] EXT4-fs (loop7): group descriptors corrupted! 16:46:03 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:46:03 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:46:03 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 44) 16:46:03 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:46:03 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:03 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:46:03 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 523.565953] loop7: detected capacity change from 0 to 16776704 [ 523.582084] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 523.583858] EXT4-fs (loop7): group descriptors corrupted! [ 523.597796] loop1: detected capacity change from 0 to 16776704 [ 523.615416] FAULT_INJECTION: forcing a failure. [ 523.615416] name failslab, interval 1, probability 0, space 0, times 0 [ 523.617905] CPU: 1 PID: 5936 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 523.619374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.621142] Call Trace: [ 523.621733] dump_stack+0x107/0x167 [ 523.622524] should_fail.cold+0x5/0xa [ 523.623340] ? create_object.isra.0+0x3a/0xa30 [ 523.624304] should_failslab+0x5/0x20 [ 523.625117] kmem_cache_alloc+0x5b/0x310 [ 523.625984] ? mark_held_locks+0x9e/0xe0 [ 523.626845] create_object.isra.0+0x3a/0xa30 [ 523.627775] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 523.628855] kmem_cache_alloc+0x159/0x310 [ 523.629750] xas_alloc+0x336/0x440 [ 523.630504] xas_create+0x34a/0x10d0 [ 523.631300] ? kernel_text_address+0xf2/0x120 16:46:03 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 523.632260] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 523.633492] xas_store+0x8c/0x1c40 [ 523.634292] __xa_store+0x164/0x2d0 [ 523.635067] ? xa_delete_node+0x280/0x280 [ 523.635947] ? trace_hardirqs_on+0x5b/0x180 [ 523.636864] xa_store+0x31/0x50 [ 523.637561] __io_uring_add_tctx_node+0x1cf/0x520 [ 523.638592] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 523.639692] ? alloc_fd+0x2e7/0x670 [ 523.640475] io_uring_setup+0x1fbb/0x2980 [ 523.641361] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 523.642441] ? wait_for_completion_io+0x270/0x270 [ 523.643450] ? perf_trace_preemptirq_template+0x26d/0x400 [ 523.644607] ? perf_trace_preemptirq_template+0x26d/0x400 [ 523.645790] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 523.646894] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.647991] do_syscall_64+0x33/0x40 [ 523.648777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 523.649880] RIP: 0033:0x7f77bfc9fb19 [ 523.650658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 523.654566] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 523.656168] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 523.657684] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 523.659191] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 523.660693] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 523.662204] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 523.664286] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 523.665989] EXT4-fs (loop1): group descriptors corrupted! [ 523.670752] loop5: detected capacity change from 0 to 16776704 [ 523.683801] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 523.685860] EXT4-fs (loop5): group descriptors corrupted! 16:46:04 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 523.743560] loop7: detected capacity change from 0 to 16776704 16:46:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 45) 16:46:04 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 523.779513] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 523.781551] EXT4-fs (loop7): group descriptors corrupted! 16:46:04 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 523.804351] loop5: detected capacity change from 0 to 16776704 16:46:04 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 523.813667] FAULT_INJECTION: forcing a failure. [ 523.813667] name failslab, interval 1, probability 0, space 0, times 0 [ 523.815635] CPU: 0 PID: 5953 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 523.816769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.818132] Call Trace: [ 523.818577] dump_stack+0x107/0x167 [ 523.819189] should_fail.cold+0x5/0xa [ 523.819822] ? xas_alloc+0x336/0x440 [ 523.820435] should_failslab+0x5/0x20 [ 523.821060] kmem_cache_alloc+0x5b/0x310 [ 523.821747] xas_alloc+0x336/0x440 [ 523.822332] xas_create+0x34a/0x10d0 [ 523.822959] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 523.823787] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 523.824655] xas_store+0x8c/0x1c40 [ 523.825247] __xa_store+0x164/0x2d0 [ 523.825859] ? xa_delete_node+0x280/0x280 [ 523.826544] ? trace_hardirqs_on+0x5b/0x180 [ 523.827249] xa_store+0x31/0x50 [ 523.827789] __io_uring_add_tctx_node+0x1cf/0x520 [ 523.828577] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 523.829431] ? alloc_fd+0x2e7/0x670 [ 523.830048] io_uring_setup+0x1fbb/0x2980 [ 523.830729] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 523.831551] ? perf_trace_preemptirq_template+0x266/0x400 [ 523.832461] ? perf_trace_preemptirq_template+0x26d/0x400 [ 523.833322] ? perf_trace_preemptirq_template+0x26d/0x400 [ 523.834236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 523.835090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.835938] do_syscall_64+0x33/0x40 [ 523.836538] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 523.837374] RIP: 0033:0x7f77bfc9fb19 [ 523.837982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 523.840994] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 523.842215] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 523.843359] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 523.844513] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 523.845674] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 523.846814] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:46:04 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 523.848964] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 523.851289] EXT4-fs (loop5): group descriptors corrupted! [ 523.890990] loop1: detected capacity change from 0 to 16776704 [ 523.897951] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 523.899420] EXT4-fs (loop1): group descriptors corrupted! 16:46:04 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 523.911977] loop7: detected capacity change from 0 to 16776704 [ 523.946563] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 523.948615] EXT4-fs (loop7): group descriptors corrupted! [ 523.968416] loop5: detected capacity change from 0 to 16776704 [ 523.983020] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 523.985054] EXT4-fs (loop5): group descriptors corrupted! 16:46:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 46) 16:46:18 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:46:18 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:46:18 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:18 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:18 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:18 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:46:18 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 538.671723] loop1: detected capacity change from 0 to 16776704 [ 538.675635] loop7: detected capacity change from 0 to 16776704 [ 538.677162] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 538.679195] EXT4-fs (loop1): group descriptors corrupted! [ 538.683109] loop5: detected capacity change from 0 to 16776704 [ 538.684998] FAULT_INJECTION: forcing a failure. [ 538.684998] name failslab, interval 1, probability 0, space 0, times 0 [ 538.687505] CPU: 1 PID: 5984 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 538.688949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 538.690706] Call Trace: [ 538.691270] dump_stack+0x107/0x167 [ 538.692043] should_fail.cold+0x5/0xa [ 538.692847] ? xas_alloc+0x336/0x440 [ 538.693628] should_failslab+0x5/0x20 [ 538.694436] kmem_cache_alloc+0x5b/0x310 [ 538.695292] xas_alloc+0x336/0x440 [ 538.696043] xas_create+0x34a/0x10d0 [ 538.696833] ? kernel_text_address+0xf2/0x120 [ 538.697788] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 538.698896] xas_store+0x8c/0x1c40 [ 538.699657] __xa_store+0x164/0x2d0 [ 538.700425] ? xa_delete_node+0x280/0x280 [ 538.701305] ? trace_hardirqs_on+0x5b/0x180 [ 538.702231] xa_store+0x31/0x50 [ 538.702927] __io_uring_add_tctx_node+0x1cf/0x520 [ 538.703944] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 538.705053] ? alloc_fd+0x2e7/0x670 [ 538.705837] io_uring_setup+0x1fbb/0x2980 [ 538.706718] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 538.707781] ? wait_for_completion_io+0x270/0x270 [ 538.708790] ? perf_trace_preemptirq_template+0x26d/0x400 [ 538.709951] ? perf_trace_preemptirq_template+0x26d/0x400 [ 538.711124] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 538.712227] ? syscall_enter_from_user_mode+0x1d/0x50 [ 538.713315] do_syscall_64+0x33/0x40 [ 538.714111] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 538.715190] RIP: 0033:0x7f77bfc9fb19 [ 538.715967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 538.719832] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 538.721432] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 538.722934] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 538.724437] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 538.725950] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 538.727443] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 538.729787] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 538.731726] EXT4-fs (loop7): group descriptors corrupted! [ 538.741390] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 538.743390] EXT4-fs (loop5): group descriptors corrupted! 16:46:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 47) 16:46:19 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:19 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:19 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 538.854304] FAULT_INJECTION: forcing a failure. [ 538.854304] name failslab, interval 1, probability 0, space 0, times 0 [ 538.855188] loop5: detected capacity change from 0 to 16776704 [ 538.855729] CPU: 0 PID: 5998 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 538.857682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 538.858672] Call Trace: [ 538.858999] dump_stack+0x107/0x167 [ 538.859435] should_fail.cold+0x5/0xa [ 538.859877] ? xas_alloc+0x336/0x440 [ 538.860312] should_failslab+0x5/0x20 [ 538.860758] kmem_cache_alloc+0x5b/0x310 [ 538.861227] xas_alloc+0x336/0x440 [ 538.861632] xas_create+0x34a/0x10d0 [ 538.862077] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 538.862653] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 538.863251] xas_store+0x8c/0x1c40 [ 538.863668] __xa_store+0x164/0x2d0 [ 538.864088] ? xa_delete_node+0x280/0x280 [ 538.864570] ? trace_hardirqs_on+0x5b/0x180 [ 538.865071] xa_store+0x31/0x50 [ 538.865455] __io_uring_add_tctx_node+0x1cf/0x520 [ 538.866024] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 538.866631] ? alloc_fd+0x2e7/0x670 [ 538.867057] io_uring_setup+0x1fbb/0x2980 [ 538.867544] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 538.868126] ? perf_trace_preemptirq_template+0x266/0x400 [ 538.868754] ? perf_trace_preemptirq_template+0x26d/0x400 [ 538.869382] ? perf_trace_preemptirq_template+0x26d/0x400 [ 538.870039] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 538.870655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 538.871248] do_syscall_64+0x33/0x40 [ 538.871677] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 538.872265] RIP: 0033:0x7f77bfc9fb19 [ 538.872703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 538.874827] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 538.875702] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 538.876626] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 538.877409] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 538.878210] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 538.878996] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 538.891172] loop1: detected capacity change from 0 to 16776704 [ 538.894206] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 538.895297] EXT4-fs (loop1): group descriptors corrupted! [ 538.896334] loop7: detected capacity change from 0 to 16776704 [ 538.901110] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 538.902146] EXT4-fs (loop7): group descriptors corrupted! [ 538.905088] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 538.907014] EXT4-fs (loop5): group descriptors corrupted! 16:46:32 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:32 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:32 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:46:32 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:46:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 48) 16:46:32 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:46:32 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:46:32 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 551.974926] loop5: detected capacity change from 0 to 16776704 [ 551.983069] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 551.984169] EXT4-fs (loop5): group descriptors corrupted! [ 551.987207] loop1: detected capacity change from 0 to 16776704 [ 552.002004] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 552.002079] loop7: detected capacity change from 0 to 16776704 [ 552.003139] EXT4-fs (loop1): group descriptors corrupted! [ 552.005260] FAULT_INJECTION: forcing a failure. [ 552.005260] name failslab, interval 1, probability 0, space 0, times 0 [ 552.008286] CPU: 1 PID: 6021 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 552.010066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 552.012244] Call Trace: [ 552.013047] dump_stack+0x107/0x167 [ 552.014111] should_fail.cold+0x5/0xa 16:46:32 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 552.015263] ? create_object.isra.0+0x3a/0xa30 [ 552.016759] should_failslab+0x5/0x20 [ 552.017727] kmem_cache_alloc+0x5b/0x310 [ 552.018792] ? mark_held_locks+0x9e/0xe0 [ 552.019864] create_object.isra.0+0x3a/0xa30 [ 552.020061] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 552.021008] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 552.021037] kmem_cache_alloc+0x159/0x310 [ 552.021987] EXT4-fs (loop7): group descriptors corrupted! [ 552.023312] xas_alloc+0x336/0x440 [ 552.023338] xas_create+0x34a/0x10d0 [ 552.027043] ? kernel_text_address+0xf2/0x120 [ 552.028084] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 552.029281] xas_store+0x8c/0x1c40 [ 552.030176] __xa_store+0x164/0x2d0 [ 552.031013] ? xa_delete_node+0x280/0x280 [ 552.031968] ? trace_hardirqs_on+0x5b/0x180 [ 552.032949] xa_store+0x31/0x50 [ 552.033849] __io_uring_add_tctx_node+0x1cf/0x520 [ 552.035138] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 552.036368] ? alloc_fd+0x2e7/0x670 [ 552.037256] io_uring_setup+0x1fbb/0x2980 [ 552.038266] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 552.039424] ? wait_for_completion_io+0x270/0x270 [ 552.040483] ? perf_trace_preemptirq_template+0x26d/0x400 [ 552.041749] ? perf_trace_preemptirq_template+0x26d/0x400 [ 552.043085] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 552.044299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 552.045508] do_syscall_64+0x33/0x40 [ 552.046374] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 552.047549] RIP: 0033:0x7f77bfc9fb19 [ 552.048409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 552.052832] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 552.054626] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 552.056243] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 552.058022] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 552.059674] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 552.061511] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 552.083086] loop5: detected capacity change from 0 to 16776704 [ 552.094751] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 16:46:32 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 552.096997] EXT4-fs (loop5): group descriptors corrupted! 16:46:32 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 49) [ 552.129096] loop1: detected capacity change from 0 to 16776704 [ 552.132513] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 552.133571] EXT4-fs (loop1): group descriptors corrupted! [ 552.139346] loop7: detected capacity change from 0 to 16776704 16:46:32 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 552.157405] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 552.159581] EXT4-fs (loop7): group descriptors corrupted! [ 552.173172] FAULT_INJECTION: forcing a failure. [ 552.173172] name failslab, interval 1, probability 0, space 0, times 0 [ 552.174504] CPU: 0 PID: 6036 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 552.175426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 552.176366] Call Trace: [ 552.176680] dump_stack+0x107/0x167 [ 552.177097] should_fail.cold+0x5/0xa [ 552.177516] ? xas_alloc+0x336/0x440 [ 552.177961] should_failslab+0x5/0x20 [ 552.178408] kmem_cache_alloc+0x5b/0x310 [ 552.178958] xas_alloc+0x336/0x440 [ 552.179417] xas_create+0x34a/0x10d0 [ 552.179858] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 552.180436] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 552.181032] xas_store+0x8c/0x1c40 [ 552.181449] __xa_store+0x164/0x2d0 [ 552.181868] ? xa_delete_node+0x280/0x280 [ 552.182368] ? trace_hardirqs_on+0x5b/0x180 [ 552.182867] xa_store+0x31/0x50 [ 552.183246] __io_uring_add_tctx_node+0x1cf/0x520 [ 552.183796] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 552.184392] ? alloc_fd+0x2e7/0x670 [ 552.184817] io_uring_setup+0x1fbb/0x2980 [ 552.185294] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 552.185872] ? perf_trace_preemptirq_template+0x266/0x400 [ 552.186508] ? perf_trace_preemptirq_template+0x26d/0x400 [ 552.187138] ? perf_trace_preemptirq_template+0x26d/0x400 [ 552.187772] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 552.188370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 552.188965] do_syscall_64+0x33/0x40 [ 552.189404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 552.189979] RIP: 0033:0x7f77bfc9fb19 16:46:32 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 552.190491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 552.192959] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 552.193851] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 552.194691] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 552.195520] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 552.196452] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 552.197231] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:46:32 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 552.221300] loop5: detected capacity change from 0 to 16776704 [ 552.225910] loop1: detected capacity change from 0 to 16776704 [ 552.231992] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 552.233111] EXT4-fs (loop1): group descriptors corrupted! [ 552.235443] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 552.237654] EXT4-fs (loop5): group descriptors corrupted! 16:46:32 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 552.292634] loop1: detected capacity change from 0 to 16776704 [ 552.306865] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 552.309044] EXT4-fs (loop1): group descriptors corrupted! 16:46:49 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 50) 16:46:49 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:46:49 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:46:49 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:49 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:46:49 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:46:49 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 568.820594] loop1: detected capacity change from 0 to 16776704 [ 568.827071] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 568.829051] EXT4-fs (loop1): group descriptors corrupted! [ 568.837784] loop5: detected capacity change from 0 to 16776704 [ 568.845403] FAULT_INJECTION: forcing a failure. [ 568.845403] name failslab, interval 1, probability 0, space 0, times 0 [ 568.848006] CPU: 1 PID: 6066 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 568.848199] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 568.849455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 568.849462] Call Trace: [ 568.849487] dump_stack+0x107/0x167 [ 568.849510] should_fail.cold+0x5/0xa [ 568.849535] ? create_object.isra.0+0x3a/0xa30 [ 568.851302] EXT4-fs (loop5): group descriptors corrupted! [ 568.853042] should_failslab+0x5/0x20 [ 568.853065] kmem_cache_alloc+0x5b/0x310 [ 568.853089] ? mark_held_locks+0x9e/0xe0 [ 568.859716] create_object.isra.0+0x3a/0xa30 [ 568.860641] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 568.861720] kmem_cache_alloc+0x159/0x310 [ 568.862608] xas_alloc+0x336/0x440 [ 568.863365] xas_create+0x34a/0x10d0 [ 568.864169] ? kernel_text_address+0xf2/0x120 [ 568.865123] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 568.866243] xas_store+0x8c/0x1c40 [ 568.867015] __xa_store+0x164/0x2d0 [ 568.867794] ? xa_delete_node+0x280/0x280 [ 568.868680] ? trace_hardirqs_on+0x5b/0x180 [ 568.869599] xa_store+0x31/0x50 [ 568.870304] __io_uring_add_tctx_node+0x1cf/0x520 [ 568.871324] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 568.872431] ? alloc_fd+0x2e7/0x670 [ 568.873208] io_uring_setup+0x1fbb/0x2980 [ 568.874102] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 568.875175] ? wait_for_completion_io+0x270/0x270 [ 568.876203] ? perf_trace_preemptirq_template+0x26d/0x400 [ 568.877364] ? perf_trace_preemptirq_template+0x26d/0x400 [ 568.878557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 568.879665] ? syscall_enter_from_user_mode+0x1d/0x50 [ 568.880766] do_syscall_64+0x33/0x40 [ 568.881569] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 568.882976] RIP: 0033:0x7f77bfc9fb19 [ 568.883979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 568.888923] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 568.890675] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 568.892307] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 568.894064] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 568.895633] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 568.897158] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 568.903717] loop7: detected capacity change from 0 to 16776704 [ 568.925437] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 568.927401] EXT4-fs (loop7): group descriptors corrupted! 16:46:49 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:49 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:49 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 569.010093] loop1: detected capacity change from 0 to 16776704 [ 569.015780] loop7: detected capacity change from 0 to 16776704 16:46:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 51) [ 569.030049] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 569.032061] EXT4-fs (loop7): group descriptors corrupted! [ 569.034733] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 569.036700] EXT4-fs (loop1): group descriptors corrupted! 16:46:49 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 569.061296] FAULT_INJECTION: forcing a failure. [ 569.061296] name failslab, interval 1, probability 0, space 0, times 0 [ 569.063502] CPU: 0 PID: 6081 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 569.064675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 569.066141] Call Trace: [ 569.066644] dump_stack+0x107/0x167 [ 569.067319] should_fail.cold+0x5/0xa [ 569.068006] ? xas_alloc+0x336/0x440 [ 569.068681] should_failslab+0x5/0x20 [ 569.069391] kmem_cache_alloc+0x5b/0x310 [ 569.070167] xas_alloc+0x336/0x440 [ 569.070832] xas_create+0x34a/0x10d0 [ 569.071529] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 569.072446] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 569.073447] xas_store+0x8c/0x1c40 [ 569.074131] __xa_store+0x164/0x2d0 [ 569.074849] ? xa_delete_node+0x280/0x280 [ 569.075609] ? trace_hardirqs_on+0x5b/0x180 [ 569.076425] xa_store+0x31/0x50 [ 569.077050] __io_uring_add_tctx_node+0x1cf/0x520 [ 569.077957] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 569.078908] ? alloc_fd+0x2e7/0x670 [ 569.079638] io_uring_setup+0x1fbb/0x2980 [ 569.080436] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 569.081370] ? perf_trace_preemptirq_template+0x266/0x400 [ 569.082410] ? perf_trace_preemptirq_template+0x26d/0x400 [ 569.083439] ? perf_trace_preemptirq_template+0x26d/0x400 [ 569.084518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 569.085486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 569.086422] do_syscall_64+0x33/0x40 [ 569.087082] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 569.087974] RIP: 0033:0x7f77bfc9fb19 [ 569.088621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 569.091969] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 569.093336] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 569.094578] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 569.095819] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 569.097088] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 569.098313] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:46:49 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 52) 16:46:49 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 569.188653] FAULT_INJECTION: forcing a failure. [ 569.188653] name failslab, interval 1, probability 0, space 0, times 0 [ 569.190725] CPU: 0 PID: 6087 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 569.191828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 569.193203] Call Trace: [ 569.193652] dump_stack+0x107/0x167 [ 569.194254] should_fail.cold+0x5/0xa [ 569.194900] ? create_object.isra.0+0x3a/0xa30 [ 569.195631] should_failslab+0x5/0x20 [ 569.196237] kmem_cache_alloc+0x5b/0x310 [ 569.196902] ? mark_held_locks+0x9e/0xe0 [ 569.197563] create_object.isra.0+0x3a/0xa30 [ 569.198270] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 569.199096] kmem_cache_alloc+0x159/0x310 [ 569.199798] xas_alloc+0x336/0x440 [ 569.200395] xas_create+0x34a/0x10d0 [ 569.201005] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 569.201825] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 569.202704] xas_store+0x8c/0x1c40 [ 569.203284] __xa_store+0x164/0x2d0 [ 569.203859] ? xa_delete_node+0x280/0x280 [ 569.204559] ? trace_hardirqs_on+0x5b/0x180 [ 569.205245] xa_store+0x31/0x50 [ 569.205778] __io_uring_add_tctx_node+0x1cf/0x520 [ 569.206589] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 569.207416] ? alloc_fd+0x2e7/0x670 [ 569.208007] io_uring_setup+0x1fbb/0x2980 [ 569.208664] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 569.209496] ? perf_trace_preemptirq_template+0x266/0x400 [ 569.210363] ? perf_trace_preemptirq_template+0x26d/0x400 [ 569.211230] ? perf_trace_preemptirq_template+0x26d/0x400 [ 569.212101] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 569.212962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 569.213773] do_syscall_64+0x33/0x40 [ 569.214369] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 569.215177] RIP: 0033:0x7f77bfc9fb19 [ 569.215745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 569.218679] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 569.219889] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 569.221035] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 569.222197] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 569.223375] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 569.224540] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:46:49 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:46:49 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 569.266412] loop1: detected capacity change from 0 to 16896 [ 569.286176] EXT4-fs (loop1): bad geometry: block count 128 exceeds size of device (8 blocks) [ 569.292027] loop7: detected capacity change from 0 to 16776704 [ 569.300904] loop5: detected capacity change from 0 to 16776704 [ 569.319656] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 569.321631] EXT4-fs (loop7): group descriptors corrupted! [ 569.327528] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 569.329559] EXT4-fs (loop5): group descriptors corrupted! 16:47:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 53) 16:47:05 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:47:05 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:47:05 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:05 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:05 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:05 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:47:05 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 585.280242] FAULT_INJECTION: forcing a failure. [ 585.280242] name failslab, interval 1, probability 0, space 0, times 0 [ 585.282895] CPU: 1 PID: 6103 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 585.284442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 585.286315] Call Trace: [ 585.286921] dump_stack+0x107/0x167 [ 585.287746] should_fail.cold+0x5/0xa [ 585.288606] ? xas_alloc+0x336/0x440 [ 585.289444] should_failslab+0x5/0x20 [ 585.290319] kmem_cache_alloc+0x5b/0x310 [ 585.291241] xas_alloc+0x336/0x440 [ 585.292050] xas_create+0x34a/0x10d0 [ 585.292896] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 585.294021] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 585.295216] xas_store+0x8c/0x1c40 [ 585.296032] __xa_store+0x164/0x2d0 [ 585.296853] ? xa_delete_node+0x280/0x280 [ 585.297791] ? trace_hardirqs_on+0x5b/0x180 [ 585.298793] xa_store+0x31/0x50 [ 585.299540] __io_uring_add_tctx_node+0x1cf/0x520 [ 585.300646] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 585.301826] ? alloc_fd+0x2e7/0x670 [ 585.302674] io_uring_setup+0x1fbb/0x2980 [ 585.303620] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 585.304789] ? wait_for_completion_io+0x270/0x270 [ 585.305874] ? perf_trace_preemptirq_template+0x26d/0x400 [ 585.307138] ? perf_trace_preemptirq_template+0x26d/0x400 [ 585.308402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 585.309614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 585.310798] do_syscall_64+0x33/0x40 [ 585.311643] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 585.312815] RIP: 0033:0x7f77bfc9fb19 [ 585.313651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 585.317896] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 585.319619] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 585.321239] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 585.322852] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 585.324456] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 585.326060] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 585.329340] loop7: detected capacity change from 0 to 16896 [ 585.338827] loop1: detected capacity change from 0 to 16896 [ 585.345936] EXT4-fs (loop7): bad geometry: block count 128 exceeds size of device (8 blocks) [ 585.349783] loop5: detected capacity change from 0 to 16776704 [ 585.362236] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 585.364382] EXT4-fs (loop5): group descriptors corrupted! [ 585.367595] EXT4-fs (loop1): bad geometry: block count 128 exceeds size of device (8 blocks) 16:47:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 54) 16:47:05 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:05 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:05 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 585.482054] loop5: detected capacity change from 0 to 16776704 [ 585.483505] FAULT_INJECTION: forcing a failure. [ 585.483505] name failslab, interval 1, probability 0, space 0, times 0 [ 585.486371] CPU: 1 PID: 6126 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 585.487780] loop7: detected capacity change from 0 to 16896 [ 585.487924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 585.487939] Call Trace: [ 585.491586] dump_stack+0x107/0x167 [ 585.492419] should_fail.cold+0x5/0xa [ 585.493284] ? create_object.isra.0+0x3a/0xa30 [ 585.494328] should_failslab+0x5/0x20 [ 585.495184] kmem_cache_alloc+0x5b/0x310 [ 585.496102] ? mark_held_locks+0x9e/0xe0 [ 585.497031] create_object.isra.0+0x3a/0xa30 [ 585.498021] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 585.499180] kmem_cache_alloc+0x159/0x310 [ 585.500123] xas_alloc+0x336/0x440 [ 585.500931] xas_create+0x34a/0x10d0 [ 585.501777] ? kernel_text_address+0xf2/0x120 [ 585.502804] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 585.503996] xas_store+0x8c/0x1c40 [ 585.504819] __xa_store+0x164/0x2d0 [ 585.505649] ? xa_delete_node+0x280/0x280 [ 585.506604] ? trace_hardirqs_on+0x5b/0x180 [ 585.507584] xa_store+0x31/0x50 [ 585.508336] __io_uring_add_tctx_node+0x1cf/0x520 [ 585.509427] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 585.510624] ? alloc_fd+0x2e7/0x670 [ 585.511456] io_uring_setup+0x1fbb/0x2980 [ 585.512403] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 585.513545] ? wait_for_completion_io+0x270/0x270 [ 585.514639] ? perf_trace_preemptirq_template+0x26d/0x400 [ 585.515875] ? perf_trace_preemptirq_template+0x26d/0x400 [ 585.517138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 585.518328] ? syscall_enter_from_user_mode+0x1d/0x50 [ 585.519499] do_syscall_64+0x33/0x40 [ 585.520341] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 585.521497] RIP: 0033:0x7f77bfc9fb19 [ 585.522351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 585.526525] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 585.528252] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 585.529866] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 585.531487] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 585.533086] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 585.534697] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 585.546162] EXT4-fs (loop7): bad geometry: block count 128 exceeds size of device (8 blocks) [ 585.548566] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 585.550673] EXT4-fs (loop5): group descriptors corrupted! [ 585.588176] loop1: detected capacity change from 0 to 16896 16:47:05 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 585.612133] EXT4-fs (loop1): bad geometry: block count 128 exceeds size of device (8 blocks) 16:47:05 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 585.640174] loop5: detected capacity change from 0 to 16776704 [ 585.659323] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 585.661335] EXT4-fs (loop5): group descriptors corrupted! 16:47:05 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 55) 16:47:06 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 585.754911] FAULT_INJECTION: forcing a failure. [ 585.754911] name failslab, interval 1, probability 0, space 0, times 0 [ 585.757596] CPU: 1 PID: 6138 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 585.759173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 585.761074] Call Trace: [ 585.761551] loop1: detected capacity change from 0 to 16896 [ 585.761696] dump_stack+0x107/0x167 [ 585.763701] should_fail.cold+0x5/0xa [ 585.764569] ? xas_alloc+0x336/0x440 [ 585.765414] should_failslab+0x5/0x20 [ 585.766288] kmem_cache_alloc+0x5b/0x310 [ 585.767210] xas_alloc+0x336/0x440 [ 585.768020] xas_create+0x34a/0x10d0 [ 585.768865] ? kernel_text_address+0xf2/0x120 [ 585.769884] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 585.771093] xas_store+0x8c/0x1c40 [ 585.771911] __xa_store+0x164/0x2d0 [ 585.772741] ? xa_delete_node+0x280/0x280 [ 585.773685] ? trace_hardirqs_on+0x5b/0x180 [ 585.774676] xa_store+0x31/0x50 [ 585.775425] __io_uring_add_tctx_node+0x1cf/0x520 [ 585.776515] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 585.777700] ? alloc_fd+0x2e7/0x670 [ 585.778545] io_uring_setup+0x1fbb/0x2980 [ 585.779492] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 585.780637] ? wait_for_completion_io+0x270/0x270 [ 585.781725] ? perf_trace_preemptirq_template+0x26d/0x400 [ 585.782983] ? perf_trace_preemptirq_template+0x26d/0x400 [ 585.784244] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 585.785430] ? syscall_enter_from_user_mode+0x1d/0x50 [ 585.786616] do_syscall_64+0x33/0x40 [ 585.787459] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 585.788621] RIP: 0033:0x7f77bfc9fb19 [ 585.789459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 585.793638] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 585.795361] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 585.796976] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 585.798602] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 585.800216] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 585.801826] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 585.805342] EXT4-fs (loop1): bad geometry: block count 128 exceeds size of device (8 blocks) [ 585.822911] loop7: detected capacity change from 0 to 16896 [ 585.833417] EXT4-fs (loop7): bad geometry: block count 128 exceeds size of device (8 blocks) 16:47:19 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:47:19 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:47:19 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 56) 16:47:19 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:19 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:47:19 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:47:19 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 599.105252] loop7: detected capacity change from 0 to 16896 [ 599.106092] FAULT_INJECTION: forcing a failure. [ 599.106092] name failslab, interval 1, probability 0, space 0, times 0 [ 599.106124] CPU: 1 PID: 6158 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 599.109137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 599.111242] Call Trace: [ 599.111922] dump_stack+0x107/0x167 [ 599.112855] should_fail.cold+0x5/0xa [ 599.113829] ? create_object.isra.0+0x3a/0xa30 [ 599.114998] should_failslab+0x5/0x20 [ 599.115961] kmem_cache_alloc+0x5b/0x310 [ 599.116991] ? mark_held_locks+0x9e/0xe0 [ 599.118030] create_object.isra.0+0x3a/0xa30 [ 599.119153] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 599.120447] kmem_cache_alloc+0x159/0x310 [ 599.121519] xas_alloc+0x336/0x440 [ 599.122434] xas_create+0x34a/0x10d0 [ 599.123394] ? kernel_text_address+0xf2/0x120 [ 599.124541] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 599.125880] xas_store+0x8c/0x1c40 [ 599.126817] __xa_store+0x164/0x2d0 [ 599.127744] ? xa_delete_node+0x280/0x280 [ 599.128806] ? trace_hardirqs_on+0x5b/0x180 [ 599.129908] xa_store+0x31/0x50 [ 599.130755] __io_uring_add_tctx_node+0x1cf/0x520 [ 599.131983] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 599.133304] ? alloc_fd+0x2e7/0x670 [ 599.134250] io_uring_setup+0x1fbb/0x2980 [ 599.135325] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 599.136646] ? wait_for_completion_io+0x270/0x270 [ 599.137865] ? perf_trace_preemptirq_template+0x26d/0x400 [ 599.139171] ? perf_trace_preemptirq_template+0x26d/0x400 [ 599.140334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 599.141438] ? syscall_enter_from_user_mode+0x1d/0x50 [ 599.142527] do_syscall_64+0x33/0x40 [ 599.143313] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 599.144395] RIP: 0033:0x7f77bfc9fb19 [ 599.145182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 599.149079] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 599.150690] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 599.152181] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 599.153661] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 599.155161] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 599.156640] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 599.168791] loop5: detected capacity change from 0 to 16776704 [ 599.173889] loop1: detected capacity change from 0 to 16896 [ 599.174316] EXT4-fs (loop7): bad geometry: block count 128 exceeds size of device (8 blocks) [ 599.183556] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 599.185520] EXT4-fs (loop5): group descriptors corrupted! [ 599.187907] EXT4-fs (loop1): bad geometry: block count 128 exceeds size of device (8 blocks) 16:47:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 57) 16:47:19 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:19 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:19 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 599.270858] loop1: detected capacity change from 0 to 16896 [ 599.279152] loop5: detected capacity change from 0 to 16776704 [ 599.280562] FAULT_INJECTION: forcing a failure. [ 599.280562] name failslab, interval 1, probability 0, space 0, times 0 [ 599.281887] CPU: 0 PID: 6180 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 599.282681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 599.283624] Call Trace: [ 599.283928] dump_stack+0x107/0x167 [ 599.284348] should_fail.cold+0x5/0xa [ 599.284786] ? xas_alloc+0x336/0x440 [ 599.285217] should_failslab+0x5/0x20 [ 599.285657] kmem_cache_alloc+0x5b/0x310 [ 599.286120] xas_alloc+0x336/0x440 [ 599.286534] xas_create+0x34a/0x10d0 [ 599.286958] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 599.287525] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 599.288120] xas_store+0x8c/0x1c40 [ 599.288532] __xa_store+0x164/0x2d0 [ 599.288948] ? xa_delete_node+0x280/0x280 [ 599.289420] ? trace_hardirqs_on+0x5b/0x180 [ 599.289918] xa_store+0x31/0x50 [ 599.290295] __io_uring_add_tctx_node+0x1cf/0x520 [ 599.290850] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 599.291445] ? alloc_fd+0x2e7/0x670 [ 599.291863] io_uring_setup+0x1fbb/0x2980 [ 599.292335] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 599.292906] ? perf_trace_preemptirq_template+0x266/0x400 [ 599.293529] ? perf_trace_preemptirq_template+0x26d/0x400 [ 599.294150] ? perf_trace_preemptirq_template+0x26d/0x400 [ 599.294791] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 599.295386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 599.295973] do_syscall_64+0x33/0x40 [ 599.296396] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 599.296979] RIP: 0033:0x7f77bfc9fb19 [ 599.297403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 599.299487] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 599.300348] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 599.301157] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 599.301966] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 599.302783] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 599.303589] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 599.305531] loop7: detected capacity change from 0 to 16896 [ 599.306438] EXT4-fs (loop1): bad geometry: block count 128 exceeds size of device (8 blocks) [ 599.311199] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 599.312260] EXT4-fs (loop5): group descriptors corrupted! [ 599.316114] EXT4-fs (loop7): bad geometry: block count 128 exceeds size of device (8 blocks) 16:47:35 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 614.740704] FAULT_INJECTION: forcing a failure. [ 614.740704] name failslab, interval 1, probability 0, space 0, times 0 [ 614.743171] CPU: 1 PID: 6190 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 614.744589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 614.746307] Call Trace: [ 614.746885] dump_stack+0x107/0x167 [ 614.747672] should_fail.cold+0x5/0xa [ 614.748466] ? create_object.isra.0+0x3a/0xa30 [ 614.749407] should_failslab+0x5/0x20 [ 614.750203] kmem_cache_alloc+0x5b/0x310 [ 614.751059] ? mark_held_locks+0x9e/0xe0 [ 614.751904] create_object.isra.0+0x3a/0xa30 [ 614.752821] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 614.753876] kmem_cache_alloc+0x159/0x310 [ 614.754763] xas_alloc+0x336/0x440 [ 614.755507] xas_create+0x34a/0x10d0 [ 614.756288] ? kernel_text_address+0xf2/0x120 [ 614.757225] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 614.758320] xas_store+0x8c/0x1c40 [ 614.759086] __xa_store+0x164/0x2d0 [ 614.759843] ? xa_delete_node+0x280/0x280 [ 614.760707] ? trace_hardirqs_on+0x5b/0x180 [ 614.761609] xa_store+0x31/0x50 [ 614.762302] __io_uring_add_tctx_node+0x1cf/0x520 [ 614.763308] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 614.764388] ? alloc_fd+0x2e7/0x670 [ 614.765159] io_uring_setup+0x1fbb/0x2980 [ 614.766024] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 614.767084] ? wait_for_completion_io+0x270/0x270 [ 614.768078] ? perf_trace_preemptirq_template+0x26d/0x400 [ 614.769219] ? perf_trace_preemptirq_template+0x26d/0x400 [ 614.770381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 614.771482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 614.772561] do_syscall_64+0x33/0x40 [ 614.773333] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 614.774401] RIP: 0033:0x7f77bfc9fb19 [ 614.774947] loop5: detected capacity change from 0 to 16776704 [ 614.775192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 614.780374] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 614.781959] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 614.783445] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 614.784920] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 614.786399] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 614.787887] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 614.793772] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 614.795811] EXT4-fs (loop5): group descriptors corrupted! 16:47:35 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:35 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:47:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 58) 16:47:35 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:35 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:35 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:47:35 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 614.814942] loop7: detected capacity change from 0 to 16776704 [ 614.820075] loop1: detected capacity change from 0 to 16776704 [ 614.827343] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 614.830572] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 16:47:35 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:35 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:35 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 614.943280] loop5: detected capacity change from 0 to 16776704 16:47:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 59) [ 614.958243] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 614.960192] EXT4-fs (loop5): group descriptors corrupted! [ 614.968176] FAULT_INJECTION: forcing a failure. [ 614.968176] name failslab, interval 1, probability 0, space 0, times 0 [ 614.971175] CPU: 0 PID: 6213 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 614.972756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 614.975045] Call Trace: [ 614.975776] dump_stack+0x107/0x167 [ 614.976779] should_fail.cold+0x5/0xa [ 614.977838] ? xas_alloc+0x336/0x440 [ 614.978880] should_failslab+0x5/0x20 [ 614.979920] kmem_cache_alloc+0x5b/0x310 [ 614.981055] xas_alloc+0x336/0x440 [ 614.982055] xas_create+0x34a/0x10d0 [ 614.982923] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 614.983843] loop1: detected capacity change from 0 to 16776704 [ 614.984278] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 614.984303] xas_store+0x8c/0x1c40 [ 614.987806] __xa_store+0x164/0x2d0 [ 614.988636] ? xa_delete_node+0x280/0x280 [ 614.989780] ? trace_hardirqs_on+0x5b/0x180 [ 614.990990] xa_store+0x31/0x50 [ 614.991744] __io_uring_add_tctx_node+0x1cf/0x520 [ 614.993053] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 614.994240] ? alloc_fd+0x2e7/0x670 [ 614.995272] io_uring_setup+0x1fbb/0x2980 [ 614.996240] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 614.997621] ? perf_trace_preemptirq_template+0x266/0x400 [ 614.998907] ? perf_trace_preemptirq_template+0x26d/0x400 [ 615.000418] ? perf_trace_preemptirq_template+0x26d/0x400 [ 615.001690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 615.002898] ? syscall_enter_from_user_mode+0x1d/0x50 [ 615.004081] do_syscall_64+0x33/0x40 [ 615.004925] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 615.006084] RIP: 0033:0x7f77bfc9fb19 [ 615.006941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 615.011079] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 615.013189] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 615.015147] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 615.017099] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 615.019060] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 615.021017] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 615.034287] loop7: detected capacity change from 0 to 16776704 [ 615.044969] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 615.050560] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 16:47:35 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 60) 16:47:35 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:35 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 615.134857] loop5: detected capacity change from 0 to 16776704 [ 615.148813] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 615.150810] EXT4-fs (loop5): group descriptors corrupted! [ 615.153107] FAULT_INJECTION: forcing a failure. [ 615.153107] name failslab, interval 1, probability 0, space 0, times 0 [ 615.155893] CPU: 0 PID: 6222 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 615.157459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 615.159348] Call Trace: [ 615.159967] dump_stack+0x107/0x167 [ 615.160798] should_fail.cold+0x5/0xa [ 615.161664] ? create_object.isra.0+0x3a/0xa30 [ 615.162710] should_failslab+0x5/0x20 [ 615.163567] kmem_cache_alloc+0x5b/0x310 [ 615.164485] ? mark_held_locks+0x9e/0xe0 [ 615.165410] create_object.isra.0+0x3a/0xa30 [ 615.166393] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 615.167553] kmem_cache_alloc+0x159/0x310 [ 615.168501] xas_alloc+0x336/0x440 [ 615.169318] xas_create+0x34a/0x10d0 [ 615.170163] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 615.171303] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 615.172494] xas_store+0x8c/0x1c40 [ 615.173494] __xa_store+0x164/0x2d0 [ 615.174334] ? xa_delete_node+0x280/0x280 [ 615.175297] ? trace_hardirqs_on+0x5b/0x180 [ 615.176280] xa_store+0x31/0x50 [ 615.177047] __io_uring_add_tctx_node+0x1cf/0x520 [ 615.178138] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 615.179324] ? alloc_fd+0x2e7/0x670 [ 615.180172] io_uring_setup+0x1fbb/0x2980 [ 615.181121] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 615.182257] ? perf_trace_preemptirq_template+0x266/0x400 [ 615.183498] ? perf_trace_preemptirq_template+0x26d/0x400 [ 615.184738] ? perf_trace_preemptirq_template+0x26d/0x400 [ 615.186000] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 615.187198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 615.188374] do_syscall_64+0x33/0x40 [ 615.189225] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 615.190644] RIP: 0033:0x7f77bfc9fb19 [ 615.191500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 615.196538] RSP: 002b:00007f77bd215108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 615.198257] RAX: ffffffffffffffda RBX: 00007f77bfdb2f60 RCX: 00007f77bfc9fb19 [ 615.199886] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895 [ 615.201492] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 615.203111] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100 [ 615.204721] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 615.233034] loop1: detected capacity change from 0 to 16776704 [ 615.251904] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 16:47:50 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:47:50 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 61) 16:47:50 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:50 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:50 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:47:50 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:47:50 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 629.968682] loop5: detected capacity change from 0 to 16896 [ 629.976678] FAULT_INJECTION: forcing a failure. [ 629.976678] name failslab, interval 1, probability 0, space 0, times 0 [ 629.978114] CPU: 0 PID: 6236 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 629.978919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 629.979866] Call Trace: [ 629.980170] dump_stack+0x107/0x167 [ 629.980596] should_fail.cold+0x5/0xa [ 629.981046] ? vm_area_dup+0x78/0x290 [ 629.981489] should_failslab+0x5/0x20 [ 629.981922] kmem_cache_alloc+0x5b/0x310 [ 629.982379] vm_area_dup+0x78/0x290 [ 629.982812] ? mark_lock+0xf5/0x2df0 [ 629.983245] ? lock_chain_count+0x20/0x20 [ 629.983722] ? mark_lock+0xf5/0x2df0 [ 629.984151] ? __traceiter_irq_enable+0xc0/0xc0 [ 629.984685] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 629.985294] ? lock_chain_count+0x20/0x20 [ 629.985783] ? mark_lock+0xf5/0x2df0 [ 629.986212] ? vm_area_alloc+0x110/0x110 [ 629.986682] ? __lock_acquire+0x1657/0x5b00 [ 629.987194] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 629.987802] ? perf_tp_event+0x5ce/0xc00 [ 629.988278] ? vmacache_find+0x55/0x2a0 [ 629.988746] __split_vma+0xa8/0x4e0 [ 629.989168] __do_munmap+0x365/0x1260 [ 629.989600] ? arch_get_unmapped_area+0x450/0x450 [ 629.990154] ? lock_release+0x680/0x680 [ 629.990608] mmap_region+0x7cc/0x1500 [ 629.991059] do_mmap+0x868/0x1370 [ 629.991453] vm_mmap_pgoff+0x198/0x1f0 [ 629.991903] ? randomize_page+0xb0/0xb0 [ 629.992367] ksys_mmap_pgoff+0x41c/0x560 [ 629.992840] ? find_mergeable_anon_vma+0x250/0x250 [ 629.993392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 629.993995] ? syscall_enter_from_user_mode+0x1d/0x50 [ 629.994582] do_syscall_64+0x33/0x40 [ 629.995018] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 629.995606] RIP: 0033:0x7f77bfc9fb62 [ 629.996047] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 629.998178] RSP: 002b:00007f77bd2150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 629.999057] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f77bfc9fb62 [ 629.999901] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 630.000703] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 630.001531] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 630.002348] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 630.013848] loop1: detected capacity change from 0 to 16776704 [ 630.029691] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (8 blocks) [ 630.035300] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 630.038269] loop7: detected capacity change from 0 to 16776704 [ 630.041609] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 16:47:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 62) 16:47:50 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 630.084968] FAULT_INJECTION: forcing a failure. [ 630.084968] name failslab, interval 1, probability 0, space 0, times 0 [ 630.086332] CPU: 0 PID: 6254 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 630.087137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 630.088089] Call Trace: [ 630.088401] dump_stack+0x107/0x167 [ 630.088816] should_fail.cold+0x5/0xa [ 630.089255] ? create_object.isra.0+0x3a/0xa30 [ 630.089780] should_failslab+0x5/0x20 [ 630.090220] kmem_cache_alloc+0x5b/0x310 [ 630.090690] create_object.isra.0+0x3a/0xa30 [ 630.091200] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 630.091802] kmem_cache_alloc+0x159/0x310 [ 630.092294] vm_area_dup+0x78/0x290 [ 630.092718] ? lock_release+0x680/0x680 [ 630.093183] ? mark_lock+0xf5/0x2df0 [ 630.093626] ? lock_chain_count+0x20/0x20 [ 630.093891] loop1: detected capacity change from 0 to 16776704 [ 630.094113] ? mark_lock+0xf5/0x2df0 [ 630.095884] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 630.096477] ? lock_chain_count+0x20/0x20 [ 630.096960] ? mark_lock+0xf5/0x2df0 [ 630.097394] ? vm_area_alloc+0x110/0x110 [ 630.097856] ? __lock_acquire+0x1657/0x5b00 [ 630.098369] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 630.098973] ? perf_tp_event+0x5ce/0xc00 [ 630.099428] ? vmacache_find+0x55/0x2a0 [ 630.099883] __split_vma+0xa8/0x4e0 [ 630.100312] __do_munmap+0x365/0x1260 [ 630.100752] ? arch_get_unmapped_area+0x450/0x450 [ 630.101312] ? lock_release+0x680/0x680 [ 630.101772] mmap_region+0x7cc/0x1500 [ 630.102206] do_mmap+0x868/0x1370 [ 630.102610] vm_mmap_pgoff+0x198/0x1f0 [ 630.103075] ? randomize_page+0xb0/0xb0 [ 630.103540] ksys_mmap_pgoff+0x41c/0x560 [ 630.104002] ? find_mergeable_anon_vma+0x250/0x250 [ 630.104578] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 630.105179] ? syscall_enter_from_user_mode+0x1d/0x50 [ 630.105778] do_syscall_64+0x33/0x40 [ 630.106201] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 630.106798] RIP: 0033:0x7f77bfc9fb62 [ 630.106884] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 630.107223] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 630.107237] RSP: 002b:00007f77bd2150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 630.111484] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f77bfc9fb62 [ 630.112302] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 630.113116] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 630.113918] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 630.114754] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:47:50 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:50 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 630.190839] loop7: detected capacity change from 0 to 16776704 16:47:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 63) [ 630.199717] loop5: detected capacity change from 0 to 16896 16:47:50 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 630.210416] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (8 blocks) [ 630.212563] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 630.219991] loop1: detected capacity change from 0 to 16776704 [ 630.224969] FAULT_INJECTION: forcing a failure. [ 630.224969] name failslab, interval 1, probability 0, space 0, times 0 [ 630.227518] CPU: 1 PID: 6267 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 630.229052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 630.230921] Call Trace: [ 630.231509] dump_stack+0x107/0x167 [ 630.232324] should_fail.cold+0x5/0xa [ 630.233178] ? anon_vma_clone+0xdc/0x590 [ 630.234076] should_failslab+0x5/0x20 [ 630.234925] kmem_cache_alloc+0x5b/0x310 [ 630.235867] anon_vma_clone+0xdc/0x590 [ 630.236762] __split_vma+0x17c/0x4e0 [ 630.237638] __do_munmap+0x365/0x1260 [ 630.238542] ? arch_get_unmapped_area+0x450/0x450 [ 630.239662] ? lock_release+0x680/0x680 [ 630.240575] mmap_region+0x7cc/0x1500 [ 630.241465] do_mmap+0x868/0x1370 [ 630.242270] vm_mmap_pgoff+0x198/0x1f0 [ 630.243181] ? randomize_page+0xb0/0xb0 [ 630.244106] ksys_mmap_pgoff+0x41c/0x560 [ 630.245036] ? find_mergeable_anon_vma+0x250/0x250 [ 630.246164] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 630.247378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 630.248566] do_syscall_64+0x33/0x40 [ 630.249420] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 630.250560] RIP: 0033:0x7f77bfc9fb62 [ 630.251386] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 630.255454] RSP: 002b:00007f77bd2150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 630.257130] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f77bfc9fb62 [ 630.258708] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 630.260278] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 630.261846] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 630.263422] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 630.273886] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 16:47:50 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040), 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:47:50 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 630.359391] loop1: detected capacity change from 0 to 16776704 [ 630.367602] loop7: detected capacity change from 0 to 16776704 [ 630.369936] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 630.371187] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 16:48:04 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:48:04 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040), 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:48:04 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:48:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 64) 16:48:04 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040), 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:48:04 executing program 0: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:48:04 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:48:04 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) [ 644.282715] FAULT_INJECTION: forcing a failure. [ 644.282715] name failslab, interval 1, probability 0, space 0, times 0 [ 644.284179] CPU: 0 PID: 6283 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 644.285005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 644.285997] Call Trace: [ 644.286323] dump_stack+0x107/0x167 [ 644.286762] should_fail.cold+0x5/0xa [ 644.287237] ? create_object.isra.0+0x3a/0xa30 [ 644.287806] should_failslab+0x5/0x20 [ 644.288285] kmem_cache_alloc+0x5b/0x310 [ 644.288796] create_object.isra.0+0x3a/0xa30 [ 644.289341] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 644.289971] kmem_cache_alloc+0x159/0x310 [ 644.290478] anon_vma_clone+0xdc/0x590 [ 644.290975] __split_vma+0x17c/0x4e0 [ 644.291427] __do_munmap+0x365/0x1260 [ 644.291889] ? arch_get_unmapped_area+0x450/0x450 [ 644.292491] ? lock_release+0x680/0x680 [ 644.292991] mmap_region+0x7cc/0x1500 [ 644.293472] do_mmap+0x868/0x1370 [ 644.293908] vm_mmap_pgoff+0x198/0x1f0 [ 644.294382] ? randomize_page+0xb0/0xb0 [ 644.294889] ksys_mmap_pgoff+0x41c/0x560 [ 644.295394] ? find_mergeable_anon_vma+0x250/0x250 [ 644.295988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 644.296629] ? syscall_enter_from_user_mode+0x1d/0x50 [ 644.297261] do_syscall_64+0x33/0x40 [ 644.297724] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 644.298358] RIP: 0033:0x7f77bfc9fb62 [ 644.298809] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 644.301047] RSP: 002b:00007f77bd2150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 644.301970] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f77bfc9fb62 [ 644.302866] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 644.303745] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 644.304628] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 644.305510] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 644.306727] loop7: detected capacity change from 0 to 16776704 [ 644.314203] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 644.318511] loop5: detected capacity change from 0 to 16896 [ 644.323952] loop1: detected capacity change from 0 to 16776704 [ 644.336101] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (8 blocks) [ 644.340015] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 16:48:04 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040), 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:48:04 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:48:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 65) 16:48:04 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040), 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:48:04 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040), 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 644.413549] FAULT_INJECTION: forcing a failure. [ 644.413549] name failslab, interval 1, probability 0, space 0, times 0 [ 644.414995] CPU: 0 PID: 6303 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 644.415797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 644.416752] Call Trace: [ 644.417078] dump_stack+0x107/0x167 [ 644.417498] should_fail.cold+0x5/0xa [ 644.417947] ? vm_area_alloc+0x1c/0x110 [ 644.418408] should_failslab+0x5/0x20 [ 644.418854] kmem_cache_alloc+0x5b/0x310 [ 644.419338] vm_area_alloc+0x1c/0x110 [ 644.419786] mmap_region+0x982/0x1500 [ 644.420238] do_mmap+0x868/0x1370 [ 644.420652] vm_mmap_pgoff+0x198/0x1f0 [ 644.421099] ? randomize_page+0xb0/0xb0 [ 644.421575] ksys_mmap_pgoff+0x41c/0x560 [ 644.422044] ? find_mergeable_anon_vma+0x250/0x250 [ 644.422621] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 644.423234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 644.423829] do_syscall_64+0x33/0x40 [ 644.424262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 644.424868] RIP: 0033:0x7f77bfc9fb62 [ 644.425293] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 644.427465] RSP: 002b:00007f77bd2150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 644.428359] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f77bfc9fb62 [ 644.429204] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 644.430020] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 644.430863] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 644.431713] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 644.432761] loop5: detected capacity change from 0 to 16896 [ 644.436857] loop1: detected capacity change from 0 to 16776704 [ 644.441781] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (8 blocks) [ 644.442593] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 16:48:04 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:48:04 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:48:04 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 644.519232] loop5: detected capacity change from 0 to 16896 [ 644.538616] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (8 blocks) [ 644.551242] loop7: detected capacity change from 0 to 16776704 [ 644.557273] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 16:48:21 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:48:21 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:48:21 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:48:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 66) 16:48:21 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 16:48:21 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:48:21 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) 16:48:21 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 661.684975] loop7: detected capacity change from 0 to 16776704 [ 661.689693] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 661.710911] loop5: detected capacity change from 0 to 16896 [ 661.722711] FAULT_INJECTION: forcing a failure. [ 661.722711] name failslab, interval 1, probability 0, space 0, times 0 [ 661.725162] CPU: 1 PID: 6337 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 661.726607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 661.728365] Call Trace: [ 661.728920] dump_stack+0x107/0x167 [ 661.729685] should_fail.cold+0x5/0xa [ 661.730489] ? create_object.isra.0+0x3a/0xa30 [ 661.731458] should_failslab+0x5/0x20 [ 661.732268] kmem_cache_alloc+0x5b/0x310 [ 661.733167] create_object.isra.0+0x3a/0xa30 [ 661.734099] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 661.735174] kmem_cache_alloc+0x159/0x310 [ 661.736052] vm_area_alloc+0x1c/0x110 [ 661.736842] mmap_region+0x982/0x1500 [ 661.737658] do_mmap+0x868/0x1370 [ 661.738390] vm_mmap_pgoff+0x198/0x1f0 [ 661.739226] ? randomize_page+0xb0/0xb0 [ 661.740071] ksys_mmap_pgoff+0x41c/0x560 [ 661.740923] ? find_mergeable_anon_vma+0x250/0x250 [ 661.741955] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 661.743070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 661.744161] do_syscall_64+0x33/0x40 [ 661.744955] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 661.746027] RIP: 0033:0x7f77bfc9fb62 [ 661.746822] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 661.750680] RSP: 002b:00007f77bd2150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 661.752295] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f77bfc9fb62 [ 661.753790] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 661.755295] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 661.756795] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 661.758286] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:48:22 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 661.761814] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (8 blocks) [ 661.774218] loop1: detected capacity change from 0 to 16776704 [ 661.786029] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 16:48:22 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 67) [ 661.829874] loop7: detected capacity change from 0 to 16776704 16:48:22 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 661.836121] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 16:48:22 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 661.883696] loop5: detected capacity change from 0 to 16776704 [ 661.891920] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 16:48:22 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 661.900261] FAULT_INJECTION: forcing a failure. [ 661.900261] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 661.902911] CPU: 1 PID: 6349 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 661.904374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 661.906138] Call Trace: [ 661.906702] dump_stack+0x107/0x167 [ 661.907469] should_fail.cold+0x5/0xa [ 661.908284] __alloc_pages_nodemask+0x182/0x600 [ 661.909265] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 661.910549] ? walk_mem_res+0x170/0x170 [ 661.911402] alloc_pages_current+0x187/0x280 [ 661.912331] pte_alloc_one+0x16/0x1a0 [ 661.913136] __pte_alloc+0x1d/0x330 [ 661.913911] remap_pfn_range_internal+0x9a3/0xf60 [ 661.914943] ? lookup_memtype+0x5b/0x200 [ 661.915833] ? apply_to_existing_page_range+0x40/0x40 [ 661.916923] remap_pfn_range+0xcd/0x160 [ 661.917758] ? remap_pfn_range_notrack+0x70/0x70 [ 661.918752] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 661.919856] io_uring_mmap+0x398/0x530 [ 661.920679] mmap_file+0x5e/0xe0 [ 661.921387] mmap_region+0xc4d/0x1500 [ 661.922205] do_mmap+0x868/0x1370 [ 661.922940] vm_mmap_pgoff+0x198/0x1f0 [ 661.923757] ? randomize_page+0xb0/0xb0 [ 661.924613] ksys_mmap_pgoff+0x41c/0x560 [ 661.925474] ? find_mergeable_anon_vma+0x250/0x250 [ 661.926510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 661.927617] ? syscall_enter_from_user_mode+0x1d/0x50 [ 661.928725] do_syscall_64+0x33/0x40 [ 661.929506] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 661.930564] RIP: 0033:0x7f77bfc9fb62 [ 661.931351] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 661.935203] RSP: 002b:00007f77bd2150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 661.936771] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f77bfc9fb62 [ 661.938236] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 661.939730] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 661.941190] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 661.942650] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 661.962166] ------------[ cut here ]------------ [ 661.963459] WARNING: CPU: 1 PID: 6349 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 661.965336] Modules linked in: [ 661.966058] CPU: 1 PID: 6349 Comm: syz-executor.4 Not tainted 5.10.261 #1 [ 661.967560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 661.969367] RIP: 0010:get_pat_info+0x216/0x270 [ 661.970363] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 f1 96 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 da 96 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 a5 b9 5a 00 e9 [ 661.977667] RSP: 0018:ffff88804445f890 EFLAGS: 00010206 [ 661.980883] RAX: 0000000000013040 RBX: ffff88800ec8da00 RCX: ffffc9000520c000 [ 661.982412] RDX: 0000000000040000 RSI: ffffffff811255f6 RDI: 0000000000000007 [ 661.983951] RBP: ffff88804445f948 R08: 0000000000000000 R09: ffff88804445f818 [ 661.985485] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 661.987023] R13: 1ffff1100888bf12 R14: 0000000000000000 R15: ffff88800ec8da50 [ 661.988525] FS: 00007f77bd215700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 661.990207] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.991489] CR2: 00007f6da76bd5e0 CR3: 00000000445ae000 CR4: 0000000000350ee0 [ 661.993001] Call Trace: [ 661.993589] ? pgprot_writethrough+0xc0/0xc0 [ 661.994534] ? finish_task_switch+0x126/0x5d0 [ 661.995521] ? finish_task_switch+0xef/0x5d0 [ 661.996437] untrack_pfn+0xdc/0x240 [ 661.997250] ? track_pfn_insert+0x150/0x150 [ 661.998188] ? lock_downgrade+0x6d0/0x6d0 [ 661.999089] ? uprobe_munmap+0x1c/0x670 [ 661.999967] unmap_single_vma+0x1bc/0x300 [ 662.000897] zap_page_range_single+0x2ce/0x450 [ 662.001879] ? unmap_single_vma+0x300/0x300 [ 662.002827] ? remap_pfn_range_internal+0xc56/0xf60 [ 662.003935] ? lookup_memtype+0x5b/0x200 [ 662.004842] ? apply_to_existing_page_range+0x40/0x40 [ 662.005981] remap_pfn_range+0x139/0x160 [ 662.006879] ? remap_pfn_range_notrack+0x70/0x70 [ 662.007931] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 662.009062] io_uring_mmap+0x398/0x530 [ 662.009929] mmap_file+0x5e/0xe0 [ 662.010677] mmap_region+0xc4d/0x1500 [ 662.011521] do_mmap+0x868/0x1370 [ 662.012266] vm_mmap_pgoff+0x198/0x1f0 [ 662.013140] ? randomize_page+0xb0/0xb0 [ 662.014053] ksys_mmap_pgoff+0x41c/0x560 [ 662.014930] ? find_mergeable_anon_vma+0x250/0x250 [ 662.015992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 662.017111] ? syscall_enter_from_user_mode+0x1d/0x50 [ 662.018224] do_syscall_64+0x33/0x40 [ 662.019073] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 662.020206] RIP: 0033:0x7f77bfc9fb62 [ 662.021030] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 662.024850] RSP: 002b:00007f77bd2150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 662.026488] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f77bfc9fb62 16:48:22 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 662.028053] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 662.029832] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 662.031419] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 662.032983] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 [ 662.034523] irq event stamp: 1499 [ 662.035260] hardirqs last enabled at (1507): [] console_unlock+0x92d/0xb40 [ 662.037099] hardirqs last disabled at (1516): [] console_unlock+0x839/0xb40 [ 662.038956] softirqs last enabled at (954): [] asm_call_irq_on_stack+0x12/0x20 [ 662.040899] softirqs last disabled at (843): [] asm_call_irq_on_stack+0x12/0x20 [ 662.042806] ---[ end trace 1e08173de59a361e ]--- [ 662.051866] loop1: detected capacity change from 0 to 16776704 [ 662.058581] loop7: detected capacity change from 0 to 16776704 [ 662.068218] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 16:48:22 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 68) [ 662.104123] EXT4-fs error (device loop7): ext4_fill_super:4971: inode #2: comm syz-executor.7: iget: special inode unallocated [ 662.109393] loop5: detected capacity change from 0 to 16776704 [ 662.115890] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 662.119383] EXT4-fs (loop7): get root inode failed [ 662.120497] EXT4-fs (loop7): mount failed [ 662.125095] FAULT_INJECTION: forcing a failure. [ 662.125095] name failslab, interval 1, probability 0, space 0, times 0 [ 662.129573] CPU: 0 PID: 6362 Comm: syz-executor.4 Tainted: G W 5.10.261 #1 [ 662.131332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.133106] Call Trace: [ 662.133686] dump_stack+0x107/0x167 [ 662.134478] should_fail.cold+0x5/0xa [ 662.135306] ? ptlock_alloc+0x1d/0x70 [ 662.136122] should_failslab+0x5/0x20 [ 662.136914] kmem_cache_alloc+0x5b/0x310 [ 662.137773] ptlock_alloc+0x1d/0x70 [ 662.138738] pte_alloc_one+0x68/0x1a0 [ 662.139569] __pte_alloc+0x1d/0x330 [ 662.140343] remap_pfn_range_internal+0x9a3/0xf60 [ 662.141392] ? lookup_memtype+0x5b/0x200 [ 662.142282] ? apply_to_existing_page_range+0x40/0x40 [ 662.143399] remap_pfn_range+0xcd/0x160 [ 662.144256] ? remap_pfn_range_notrack+0x70/0x70 [ 662.145266] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 662.146375] io_uring_mmap+0x398/0x530 [ 662.147204] mmap_file+0x5e/0xe0 [ 662.147920] mmap_region+0xc4d/0x1500 [ 662.148745] do_mmap+0x868/0x1370 [ 662.149483] vm_mmap_pgoff+0x198/0x1f0 [ 662.150313] ? randomize_page+0xb0/0xb0 [ 662.151204] ksys_mmap_pgoff+0x41c/0x560 [ 662.152060] ? find_mergeable_anon_vma+0x250/0x250 [ 662.153101] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 662.154215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 662.155312] do_syscall_64+0x33/0x40 [ 662.156098] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 662.157183] RIP: 0033:0x7f77bfc9fb62 [ 662.157968] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 662.161893] RSP: 002b:00007f77bd2150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 662.163510] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f77bfc9fb62 [ 662.165019] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 662.166547] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 662.168051] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 662.169552] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000 16:48:22 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x129c0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) [ 662.234381] loop1: detected capacity change from 0 to 16776704 [ 662.258820] EXT4-fs error (device loop1): ext4_fill_super:4971: inode #2: comm syz-executor.1: iget: special inode unallocated [ 662.265662] EXT4-fs (loop1): get root inode failed [ 662.266857] EXT4-fs (loop1): mount failed VM DIAGNOSIS: 16:48:22 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88801a0072f0 RCX=ffffffff8168131c RDX=000000000000005c RSI=ffff888045760000 RDI=0000000000000004 RBP=ffffea0000d176c0 RSP=ffff88800ea776b0 R8 =0000000000000000 R9 =ffffea0000d176c7 R10=00000000000001fe R11=0000000000000001 R12=000000000000005c R13=dffffc0000000000 R14=00000000000001fe R15=0000000000000000 RIP=ffffffff8140ecd0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555560eb6708 CR3=00000000401b4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822eaf01 RDI=ffffffff879fc240 RBP=ffffffff879fc200 RSP=ffff88804445f2a8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000039 R13=0000000000000039 R14=ffffffff879fc200 R15=dffffc0000000000 RIP=ffffffff822eaf58 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f77bd215700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6da76bd5e0 CR3=00000000445ae000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000ff0000 XMM01=6a6e695f31313230385f7a7973006273 XMM02=000000000000000000ffffffff000000 XMM03=00007f77bfd867c800007f77bfd867c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000