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", 0x1000, 0xded, 0x0, 0x1}]) write$binfmt_misc(r1, &(0x7f0000000080)={'syz1', "61d41a7f8c86ea4ef640c9b585346dd8d21da5b81813a14277e274e5ba3fc5a95423d8ab916b3d7f514a36a97a99a2f645fbb03fe412fe05220620739867ee8327231da878e7f5cab2e364d5b61dc090ef6df86127d9b412086611faf6d5403e6de79265dff85d4e79d5da1966bbcb726e33f2950d6b900b0a9306820ddf8412e582a759a0edc7fe1546ea5c4a2b61b543903437fcab54fb"}, 0x9c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) 01:27:14 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:27:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x0) 01:27:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:27:14 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) dup3(r0, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) [ 2026.446024] loop4: detected capacity change from 0 to 135266304 [ 2026.463301] loop5: detected capacity change from 0 to 18432 [ 2026.475404] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2026.478913] EXT4-fs (loop4): get root inode failed [ 2026.480106] EXT4-fs (loop4): mount failed [ 2026.493706] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:27:27 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x117, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:27:27 executing program 3: ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x6, 0xfff, 0xfffffffffffffffd, 0x100}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/247, 0xf7}, {&(0x7f0000000180)=""/147, 0x93}], 0x2, 0xfff, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) [ 2039.478083] loop5: detected capacity change from 0 to 19456 [ 2039.483861] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:27:27 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x214000, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000240), 0x17, 0x20000) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x12, r1, 0x8000000) syz_io_uring_setup(0x6241, &(0x7f00000002c0)={0x0, 0x9367, 0x4, 0x1, 0x1e0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x9, 0x0, 0x0, 0x3, 0x6, 0x0, {0x0, 0x0, r0}}, 0xe504) r7 = syz_open_dev$mouse(&(0x7f0000000400), 0x6, 0x2) ioctl$CDROMGETSPINDOWN(r7, 0x531d, &(0x7f0000000440)) sendfile(r3, r4, &(0x7f0000000280)=0x8000, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cachetag=@,version=9p2000,mmap,access=any,msize=0x0000000011046011,cache=mmap,permit_directio,subj_user=},fowner<', @ANYRESDEC=r2, @ANYBLOB=',dont_appraise,obj_role=,+,euid>', @ANYRESDEC=0xee01, @ANYBLOB="2c66736d616769633d3078303030303030303130303030303030302c646f6e7404000000737572652c00"]) 01:27:27 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) dup3(r0, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 01:27:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:27:27 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)="bf7880af789fcdc0149eca59784e8ef77c02bddfbc7d151f296882a29a82261f7336d30483b1bf1168efa00965c5eac73fad3a9228d59cbe76e2d3fcb67dbd7655db893f6e0bf4a50f3a2fa57dceb4da26fcce481d53e2e23ebb44e67c4bf41b4a6de7e4c79cbeaf899ff3d002ce9a82b7e12434a486c0300cda", 0x7a, 0x800, 0x1, {0x0, r7}}, 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) dup3(r0, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r8, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r10 = syz_open_dev$vcsu(&(0x7f0000000240), 0x4, 0x4a0002) syz_io_uring_setup(0x1af5, &(0x7f0000000280)={0x0, 0x4bd6, 0x20, 0x0, 0x301, 0x0, r10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r11 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0x9, 0x6, 0x1, 0x8, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x8000000, 0x5}, 0x40, 0x1, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x8, 0xffffffffffffffff, 0x3) dup2(r11, r11) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x6, 0x5, 0xff, 0x9, 0x0, 0x5, 0x4000, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0xd}, 0x6800, 0x1, 0x3, 0x6, 0x7, 0x2, 0xf4a5, 0x0, 0x4, 0x0, 0x1}, r9, 0xc, r11, 0x4) 01:27:27 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:27:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xeffdffff, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2039.498790] loop4: detected capacity change from 0 to 135266304 [ 2039.506894] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2039.509895] EXT4-fs (loop4): get root inode failed [ 2039.511003] EXT4-fs (loop4): mount failed [ 2039.548695] loop5: detected capacity change from 0 to 19456 01:27:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc, 0x44}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000140), &(0x7f0000000000)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = dup3(r6, r7, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r9, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r9, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x5, &(0x7f0000000100)={0x77359400}, 0x1, 0x1}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r8, 0x0, 0x2c, &(0x7f0000000380)=""/161, &(0x7f0000000440)=0xa1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000002, 0x4000010, r0, 0x0) r10 = syz_open_dev$vcsa(&(0x7f0000000280), 0x5, 0x46a400) io_uring_enter(r10, 0x12fc, 0xc94c, 0x3, &(0x7f0000000340)={[0x7ff]}, 0x8) [ 2039.555007] loop4: detected capacity change from 0 to 135266304 [ 2039.556508] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2039.585144] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated 01:27:27 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10000200}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2039.587908] EXT4-fs (loop4): get root inode failed [ 2039.589091] EXT4-fs (loop4): mount failed 01:27:27 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 01:27:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x210000, 0x80) syz_io_uring_setup(0x1875, &(0x7f0000000080)={0x0, 0xbe5b, 0x0, 0x3, 0x2d9, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 01:27:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x6000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:27:27 executing program 7: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)=""/61, &(0x7f0000000080)=0x3d) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r3 = dup3(r0, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x31, 0x40, 0x0, 0x2, 0x0, 0x3, 0x8119c, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0xfbe275d174c4de97, 0x1, 0xf0bc, 0x2, 0x452, 0x9, 0x48, 0x0, 0x7, 0x0, 0xfffffffffffffffd}, 0x0, 0x6, r3, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000180)={0x1, 0x7b, 0x0, 0x1, 0xdad}) 01:27:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0ffff00, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2039.721924] loop5: detected capacity change from 0 to 24576 01:27:27 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x129, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2039.729962] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2039.738015] loop4: detected capacity change from 0 to 135266304 [ 2039.749328] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2039.752583] EXT4-fs (loop4): get root inode failed [ 2039.753250] EXT4-fs (loop4): mount failed [ 2039.758456] loop5: detected capacity change from 0 to 24576 [ 2039.768830] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:27:27 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:27:41 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x1001, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:27:41 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = signalfd(r0, &(0x7f0000000000)={[0xfffffffffffffff8]}, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) sendfile(r1, r4, &(0x7f00000000c0)=0x4, 0x100) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) dup3(r2, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x0) 01:27:41 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1ffff000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:27:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18201c00}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1b0, 0x22, 0x638, 0x70bd25, 0x25dfdbfd, {0x18}, [@generic="c8257c2ce716a488623e28ab192bb405e8b6db92243aef5bd3f6202aa2e09830db152dc176fd33b3809b0266b9640a1bf87746b448b0f499894fa4b72dd6df091ca887a0a0299350d525a3d6be778cb51b91dbac45f8c2046783f16a", @nested={0x8, 0xe, 0x0, 0x1, [@typed={0x4, 0x7d}]}, @generic="81d11d57037ab4265ecc4ea6d6cdfa224b2401951add72d268f81e646fffce33c91d00d5b849c6ffa071e8a082cfc4e66881df4149d8bdc044820d0d9bc0ca7c0df86b5fe316bcd78d9e8d4cf24934a7ba79beb7a83157c2174a190b97e60e8aec6130e1582bb0d84f1d5fc8cd518602ef824f5811f3349f36f5ae58ac8742a9313e37cf9e77f02c7b45bc161f1547a540c08e47daf6b329b40952e1c2ea7e2071a0ddecd7e596c3d5aa952f4003a4f5c939fcb7a240", @typed={0x8, 0x4d, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="00b3c1c5ad5570104f599e976ad88d9be32d696f18a898b57a13083145c6a6ef0aa5ac9c6f49e357885ae1aca4446cfaccd1ad346b56f2c96ace9f35cc4eed514c7dcd756022ec7a5cb3697e734d85d9c9212769eb45f697a52115c3a2afea9c3e2385", @typed={0x14, 0x8e, 0x0, 0x0, @ipv6=@private1}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x24008080}, 0x20) 01:27:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2053.844363] loop4: detected capacity change from 0 to 135266304 01:27:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf256500000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x22000000}, 0x20040891) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000000)=0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:27:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:27:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x6800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2053.884754] loop5: detected capacity change from 0 to 26624 [ 2053.884846] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2053.890837] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2053.893509] EXT4-fs (loop4): get root inode failed [ 2053.894297] EXT4-fs (loop4): mount failed [ 2053.930769] loop5: detected capacity change from 0 to 26624 [ 2053.945176] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2053.947337] loop4: detected capacity change from 0 to 135266304 01:27:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x44000, 0x0) syz_io_uring_setup(0x374b, &(0x7f0000000040)={0x0, 0x687c, 0x0, 0x3, 0x49, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) 01:27:41 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r2 = signalfd4(r0, &(0x7f0000000000)={[0x401]}, 0x8, 0x80400) syz_open_dev$vcsa(&(0x7f0000000100), 0x4000000000000, 0x40200) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="002ea86a696c007500"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x70002000}) 01:27:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) syz_io_uring_setup(0x1b69, &(0x7f0000000080)={0x0, 0xbf6e, 0x1, 0x2, 0x151, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 2054.026165] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2054.033637] EXT4-fs (loop4): get root inode failed [ 2054.034775] EXT4-fs (loop4): mount failed 01:27:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x6c00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:27:41 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:27:41 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = fork() ptrace$setopts(0x4206, r3, 0x10001, 0x3d) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8a, 0x7, 0x5, 0x0, 0x0, 0x8001, 0x81100, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x13, 0x401}, 0x4800d, 0xff, 0xfff, 0x6, 0x40, 0x9f0, 0x6, 0x0, 0x9, 0x0, 0x7f}, r3, 0x4, 0xffffffffffffffff, 0x1) dup2(r2, r2) perf_event_open(&(0x7f0000000080)={0xa90b82fa3e8e048f, 0x80, 0x1, 0xf, 0x9, 0x8, 0x0, 0x1, 0x10348, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x3da, 0x7ff}, 0x880, 0x0, 0xce, 0x3, 0x0, 0x200, 0x80, 0x0, 0x1, 0x0, 0x800}, 0xffffffffffffffff, 0xb, r2, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) dup3(r0, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10010, r2, 0x0) 01:27:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:27:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfcfdffff, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2054.114942] loop5: detected capacity change from 0 to 27648 [ 2054.127588] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2054.153157] loop5: detected capacity change from 0 to 27648 [ 2054.182170] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2054.188131] loop4: detected capacity change from 0 to 135266304 [ 2054.208270] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2054.209902] EXT4-fs (loop4): get root inode failed [ 2054.210816] EXT4-fs (loop4): mount failed 01:27:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3801, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:27:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdfdffff, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:27:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xec1a260dbdaf90d6, 0x20) 01:27:56 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x21000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:27:56 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x40004, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0x7ff}}, {@loose}], [{@dont_appraise}]}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) pread64(r0, &(0x7f0000000140)=""/229, 0xe5, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) 01:27:56 executing program 6: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:27:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x7400, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:27:56 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) dup3(r0, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) sendfile(r2, r0, &(0x7f0000000000)=0x6, 0x9) [ 2068.780305] loop4: detected capacity change from 0 to 135266304 [ 2068.800368] loop5: detected capacity change from 0 to 29696 [ 2068.807439] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:27:56 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2068.825749] loop5: detected capacity change from 0 to 29696 [ 2068.830596] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2068.856632] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2068.868193] EXT4-fs (loop4): get root inode failed [ 2068.869432] EXT4-fs (loop4): mount failed 01:27:56 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x10001, 0x3d) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x4, 0x8, 0x1, 0x92, 0x0, 0xb81, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000080), 0xa}, 0x4000, 0x5000000000000, 0x400, 0x4, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100000000}, r1, 0x0, r0, 0xa) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) sendfile(r2, r0, &(0x7f0000000000)=0x3, 0x100000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r3, 0x0) 01:27:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x7a00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:27:56 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:27:56 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:27:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x208be3, 0x0) [ 2068.907083] loop4: detected capacity change from 0 to 135266304 [ 2068.922047] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2068.923972] EXT4-fs (loop4): get root inode failed [ 2068.924711] EXT4-fs (loop4): mount failed 01:27:56 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x28009, &(0x7f0000000200)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@none}, {}, {@clone_children}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}], [{@pcr={'pcr', 0x3d, 0x39}}, {@uid_gt={'uid>', r3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_user}, {@smackfstransmute}, {@dont_measure}, {@euid_lt={'euid<', r4}}]}) dup3(r0, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) setreuid(r5, r3) [ 2068.966857] loop5: detected capacity change from 0 to 31232 [ 2069.030798] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2069.077445] loop5: detected capacity change from 0 to 31232 [ 2069.084863] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:28:11 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1052e2, 0x7a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:28:11 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:28:11 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8001, 0x4000) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7, 0x1, 0xff, 0x0, 0x0, 0x5, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xd5, 0x0, @perf_config_ext={0x101, 0x1f}, 0x20, 0x8, 0x270, 0x3, 0x100, 0x1, 0x5, 0x0, 0x6, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x1) openat(r1, &(0x7f0000000100)='./file0\x00', 0x404001, 0x0) 01:28:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xedc0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:28:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffff, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:28:11 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xe4ffffff}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:28:11 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x3, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:28:11 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) kcmp(0xffffffffffffffff, r1, 0x1, r0, 0xffffffffffffffff) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup2(r2, r2) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x96) dup3(r0, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) [ 2084.024834] loop5: detected capacity change from 0 to 60416 [ 2084.035083] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2084.054836] loop4: detected capacity change from 0 to 135266304 [ 2084.078892] loop5: detected capacity change from 0 to 60416 [ 2084.082619] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2084.089989] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2084.096585] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2084.101108] EXT4-fs (loop4): get root inode failed 01:28:11 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2084.102342] EXT4-fs (loop4): mount failed 01:28:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) fallocate(r0, 0x0, 0x20, 0x7) r1 = creat(&(0x7f0000001300)='./file0\x00', 0x114) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x30, r2, 0x776b9000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0x110, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001340)={0x1}) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/217, 0xd9}, {&(0x7f0000000180)=""/187, 0xbb}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/140, 0x8c}], 0x4) [ 2084.142773] loop4: detected capacity change from 0 to 135266304 [ 2084.202967] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2084.206604] EXT4-fs (loop4): get root inode failed [ 2084.207804] EXT4-fs (loop4): mount failed 01:28:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xff0f, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:28:12 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) dup3(r0, r1, 0x0) r3 = fcntl$getown(r0, 0x9) r4 = signalfd(r1, &(0x7f0000000000)={[0x2]}, 0x8) perf_event_open(&(0x7f0000000080)={0xd8cf3ab951f5a3ed, 0x80, 0x6, 0x5, 0x1, 0x4, 0x0, 0xb7c, 0x80c0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xffffffffbc226090, 0x7}, 0x890, 0x4, 0x3, 0x0, 0x6, 0x8, 0xae, 0x0, 0x0, 0x0, 0x1000}, r3, 0x10, r4, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) 01:28:12 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xef1e0000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:28:12 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:28:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdef, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:28:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) pipe(&(0x7f0000000080)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x6) [ 2084.336991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2084.339177] loop5: detected capacity change from 0 to 65024 01:28:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x2000006, 0x4000010, r0, 0x8000000) io_uring_enter(r0, 0x4b9f, 0xc2ed, 0x1, &(0x7f0000000000)={[0x7]}, 0x8) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x110, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x5, 0x0, r0, &(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x1, 0x6000, 0x1}, 0x7) [ 2084.427602] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2084.443576] loop4: detected capacity change from 0 to 135266304 [ 2084.469728] loop5: detected capacity change from 0 to 65024 [ 2084.483441] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2084.488242] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2084.502470] EXT4-fs (loop4): get root inode failed [ 2084.503765] EXT4-fs (loop4): mount failed [ 2084.577942] loop4: detected capacity change from 0 to 135266304 [ 2084.591632] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2084.597196] EXT4-fs (loop4): get root inode failed [ 2084.598462] EXT4-fs (loop4): mount failed 01:28:25 executing program 6: r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:28:25 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x10, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:28:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdfc, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:28:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:28:25 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xfb010000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:28:25 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x422, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r5, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = open(&(0x7f0000006b80)='./file0\x00', 0x8000, 0x92) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000006c40)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r8, 0x80, &(0x7f0000006bc0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x0, 0x0, 0x1, {0x0, r9}}, 0xe7) listen(0xffffffffffffffff, 0x3) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x9, @loopback, 0x8}, {0xa, 0x4e20, 0x4, @empty, 0xffffffff}, 0x3, [0x6, 0x80000001, 0xddde, 0x7fff, 0x8abd, 0x5, 0xd2, 0x8]}, 0x5c) ftruncate(r0, 0x8) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @multicast1}, &(0x7f0000000200)=0xc) [ 2097.576200] loop4: detected capacity change from 0 to 135266304 [ 2097.590690] loop5: detected capacity change from 0 to 262144 [ 2097.596276] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2097.602957] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2097.605529] EXT4-fs (loop4): get root inode failed [ 2097.606143] EXT4-fs (loop4): mount failed sendmmsg$inet6(r10, &(0x7f0000006900)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private2, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="8c6023790f715aa843281ea02f8f7941ff452f8e910101120ae13d5d953009095cbdbe0d77491735cb727181e96bbe595aabb94a4a73a398f28c65a02380d55ff98579617857194b5ff8a668cf8f4381c14133f40d71f960b30bf7dcaeba163f89", 0x61}], 0x1, &(0x7f0000000240)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}, r11}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffff}}, @hoplimit={{0x14, 0x29, 0x34, 0x1e}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)="7a669abb84ce0983e20492b6e4b1bb186c4d319b9dd96c35527f8a8a04c880640a020f85bfcb67215ce3fc062fe40874894e7450e24b7b282ee8df2234711c0112235b3958a666823ddcbe6e844f27c601b6363fc549d1a914fb2a57cceda37f2618c8e9f95b4f33ba0674a2118868efe08482d8c113d099b524950e1cb3ace7082ca77581b760cd3aceab9b5a4b40368e21e4dc36f72715f50b07e6f50af74610cef9bdc355cdebaf9073437b13788f5ffb704376b66f2d0f75c239266eee0f6a907cf3dee27f9e3cca6365e1496d51ffdb06bde3b9d4eb337d9bd7177e0510622ec3565e3c2db0cd250b1e4a5175fd2ec04ef4cd55aa1ef0830380344b36cfb9530cb4fa3991b74ab4f7eb4b15ee3d115a4058d174052e867214b02942afad9e3c8072f53c42a101b1f7e537e1406ebd8265fa424aeaea8e2299153bf7c98445b450e2dc18eb2216f5fe5aa149ace8f1b811208e83d141f82efdd1ecfe25fd7c1799d0608e67d25ba7ccd9d0d5f5c639fab5764b57b9da897e9c833345ccd5e6623c52db9d1e1cd0f57e73b526870128052aba4fa8cabcca25b8223fe00535cce4c006f3c1740cc215303fe95c97c66b38d5b4efad0d561864b6c25a789271218e2f971c3221681f25f7237ca5abe770f7f0a06cee54d94680f3810610d8e692ff20354c75bad6fd3e5fd835acaf0f1abfeb8263d68645e598977d9f34bc3357896b073e17c84db6e210692057cc0b2eb3d885167291aa03a9ac9d541ba532bfd39c744cdee6fe8f397e0b8dd8fcc5ed27f63fba526a9e9db68c02cde7973b27420affdf069a5cb13a050b771659c48d4e9ac4ea0f37e38d959647d95f21274f8b7395ef9806b4458ae4e283a716924aadb236a9ccc4ba51e631d0a1503900c949807442b27816bd8585cb673cb955245bb31e9d57c64c04af17b2e5d1279a25833f8261b62b079889943c7267a707ec0323854fc46b8808ec6cfc2c8ddbbddf3421cf0f3fe0c85c8c07c74bc26773f6a367f0aaedccd68cb53314d7288cb314176d7257cdbb8ea8f11b4dcd4647670876db572d738aafe1042454e22df3c0dd147caed831c136d559dc139017c31b2fc7cde2beae45d7c3791c36d70e66369baba6b6689510cd75670f8ee7c16ca40dc591802d21c9197c2a11958a92e95ff3b07e557ce70237c3a9d4d75342e4c6fb7537d85489258ae0b5ba3a57ade612189a0294fe7cc681988480e25cc89c328190e3440af4c78c26593b0e243255b5cfcb1fa873eb6ec56b49cb69b2e2bef7822e43c2bf2c9d0638569bc0c331c1fe0a753e8f378979dc42030ab9fc91ba185236a4ce0632f72335965a813a9864231e85d38314b797c62fd4c53dd1215415b894ab6d26c9196946f9103b0d17984ed532f5428ec9099ccb0b29e93a5f2ab5b83ed2bd1a228985b460145b2dd27b144bc97dce19a1804cc511430eb07af35ef9b3c86c5ce687da9a8c1c368b2389e4aa5e5fe914df1665fdbb9d99db83f6d62e8c4b13a4bc6f574d68e8159fc0a8fea42dfbddf5e8f7c657dc0346423aa2041edf33e22b032de8cf5b26740c10763c4f677d75f01cd7dc6df01eda9123b915c6f01f19078f27ca2b4521d5fd01fa5c051e043023f0f256c6a565c8e720f842ddc60adafadd8a0b7cf84b9950491de63a8d2d22c95a884e413e6212d71cf64f4da439299e6f6d0672d84ae3181db809a3c5cc94660de63dae1a78dd29512aafd1d1bb7d50d871e8ad61a5678d0b221d5f3809ed209fdfd7eeccc57877c66cbdaa8951939a55150e4ce3be0ebb62f95039f8c13373452a220e499c86c3d4da67176e4ecd9384298939320e709b8c38d2931a83d8ac3caee467a25467f9f3967f87114f0ad7e0b6a31b31d074c168360bee9bfea3e1604b174869b5b65be727b0757f8528517f97d9cb7c31e67435fa7f199b8e0b13ec390341ab6eb78ccf2ca6041d4a3b2435f49b558926f6e9f85a55c06ca788ae185c9c313ad3099669a60721969e3151ec0a6f81d83aef5bd080ebf35b1b86c2fd144eb451d09fdb350f195b716582aceee56804fb78bac0bd2f0ee9503937a565f1058af3bba7abb5503a9a8709d6882e9a0d97e9289c107e06f97af1792f69bf9edc3178ca57494c03a44ca2fbc919bda6182d898d88aa39c57632e818881c13325811569cbba0757a4b86ddc6c8666b695fb869cad71f28f8f9ecebf263842a4b595efe6fe091f0a1f0673e88a9a1c5a5f5de77dd617f91416cb27d54ded3e07d81af441a0bd3ec1def4ac15819c56ae600775dc5e388d7fb727af34e9ecad2cc5deb0f8ae2606794f432e208eaf29bc6d38f5de2f9da15b3d60564075e1b3a9bf156f2220279e0cf88e10c804c441d6faa041a5073c93e684a351d74931a49b3624b841e7d2afdd59fcb263e4689efe5e3a9dbc5dcaf52725f81d9e7559e83cb525922d60add79d3f5fe086940c6cc2f1c4aacc8b8a8a61156599eb72cc77b8460b2fcb10fbd08c1e3bf85cb740cf3ca1ad57d121ba166333d317ac5c423a20ce756909c64a5a088131b6b11b6f7891aa4315b3ab4d8597f1e1053712dd54da9177a3147f42949d8cacaa869433cf513f8ba0365fdecb30d0129702ca849819c93c1a3f05428eb4eecf50410ee34e8eec9656d53d56dcd3c56e70bf4cc5eef8df54a14e489b8633e13e1c8c0e222f45b0590fa7f266e993a270eb5bab426a0802d75e3c4dbec71943be8556ede3fd2deb6222667e46bb0ebbe24e0b061ac9035b814bad0ab5af1efdecaba46c513b1237fde7c6a93b2257dee3a59325233c2f2268f179351abdcf8767ccb140b8b931e20dc7f19bf0338cf9462a5901858236960571eb65f224fad33ecf7d00919d2ea0538edec0de03ef4b43fdb0b8e7120427f6ba51cee50b0808eae97fc72b3080b10e2cf4a5c22d4af716354a3b71ce88ea597ec02e66a299419a61a29fa5b6f5a4000a3ce57722f4352bc44d7d302dad24571855baf4aef585aa3243a4666ef99ca1d4e2c9b8ded6281d40d8c2c02674100200128f34be818c334aed35b37c74f465e14ec03b2b15c2bffd42c440c6d4db90400db1116108aa266975f5b7acc955ea55245436c2edd47b83d3441bebd548dfa3d313bd1889f367f7cf976cc9290ad15da9e598355636ad118581098e00f0e8e695ecbfa4619afd0434324eefa96828372116e665eb2feda832a304526847513ff8292a0d2c0b0a1e3f1d535c7ce6d7ba7917f9e8a99e250618bea53cd34358a576a160bb5ddbfdb7d22957d5704eb5b3182cc40c30f016895ed9bf57f5b6433b9d928d6f5caad7acd9469834b05d95160a4ab8c7c7fedb85d47f175e0d00d3cb2b38b60341302d787b8e3c6cdf5a7c283a0fc157d2c89d569e95de972d6ef5bb9b3d13b16007dede6c484b61d0b725c5ab6014cca062916a6dba9a8e1dfca77a608154d8a7b26d46817683a206608bd6afdc7c52411b313933fa8dd1760570196a76d2fbb1ad24bc92b682aad86b9fa4d129f080edf8742744958665987dac2fa6457bcc169453291fb7b05f3e59f090d8fcd64356e28658af76ac56e280c66484dfddffb9a9b534961690224dca79c7be3ed428c90e49151459e656b7fe3284b53eb708e68649d96279f9c764c13b2f4ea1d3b88a417190ed05557707d9402ee822da8393a8ccc7da0782e14a037e44c79dc60a58a2d530be5ed8decac5cf707bfc6fb39af6ce4886760c45fe609fa29bf93ca54e852dee3162a04094c614ddf71f1ad950cda21d1db9d66f483b9bfa616d5a6ea8764d2909de06d45c2a35e5e41202ae0e4ad4340a137180321df6d45fe7b4590dd376aac3c19430c65d78d181948b61d7eb5d84dd9a59776e27da62d31355b923defe0d8f62ecf6baea7ba23415d8720d1143515cf801fb69fe6efaefd160818ed68195fd607e952ace99fe41ea6ddeed7d5bfc5e672365bccce5fab8cba2cbd4352d8878a202656b1d7e4ceb6b576e2c210618ac81130f61895bdc7a4d641d4f83a7df6a7bf7fac85da7d11bfe5645538745a5c33be4fedf20106145de98c5b37140ff7ade69fb389b43667de19af21562b1044e01bb45b5a270389875e51951c00cd7073ba2df8957060653fcb49a713c4d00078938108f4a892cfacb2b4bd9774700e6dd11cc159b67298ceeccb7098023266fa212c721e1304020acd9caacd9c0b8a321617e8105e9220d15eaf5892b5bf239002e638b4285a2e152ec6e3a7531ec2aac2186e663d3759ff6d4b5b102ad6a55cac4bdbdd0a0170258e288e4ae8bb10bf7762fe80178df8c44aa0843ec1d130c710284f5b6a539dabe3caefa2eb68fe6dc48996b2ce640618bc7547908e1b04f0b5cead0fac25f66dbfc356690484aae22e6bb8d1da8f211e6097aa192bcc7872acb2654b8ee80cde241bd27d9dff52c7f92c78fa584a53113ce526f68b5e7061b00a7c5a252f1a5421a53f06e77d55e34686343f83725674f8ecbaf9ba97f40f0f307a0c48654b827b53edbf2dd2a055d003ff9df79715fd54ebee4964f110879ce5bcf83d02eb752f92559eeb0d1754880ed9ce161bc4c905074c16b22472ebf676fef10b8752b49bb398ab7098d54d940b33990108cc1fc2c4d3bec825fa5f10b79b2725e34d2ea558d3c0e2bb7386c9f10d7f3b6943914f6f0c3b8d285c48d77a83deee5d8b7409da7dbba96e0d4a0a1d8d26e8826ce6620148a47b3841a4053a6b1358fc963c734eb33670661132bf207c54cad06754f5e0946a9e1a532b02e40b9ec1898d3826788512338aa2805bff5f4feb7207b2bc12f2a83c63e6c4fd54f9465903d60e3ef92979cf12e8918807bc533ef3e6cfcb03674f68724567133d9fcafd4a172cb6cce4f476b03eb38fbcb65589592530e6d08c621989065fa5bef501a30bf4ff8ab02303585b9ff6264f6f702fa5e1042450e981af30ee3308e46801d29fa2221a9a244ce322982d19ef0c6f5270c71dfe43c75c7b701169cf9d00db2cd1b47ed4805c482ed793cb7cd2105199beb23afa16f1d6f249b695b33c1021833e73102dfa3ca846185a7260c08be2700e2fea23616d327bccfe103043d1b68116989bad45a89cc33de304bc73a0a94bb2fb0488cf5edd0c16c3be7e9bfe86563af5f57d832a7d25afd9cb8d0165222bba4dd8d8abb747e46352b3a8ab5ac9a2891deb7cacb5de103bd0ab4e9407c7ab601c93838589b795d3029d60351668793561a592216c6bd4135573d3cb0f795a1f6977c460e60fc0ee22ea66f407443d9638494bb94e2a626c51ff8b1db84e4cf71d30e5b1a6ae61c9bc4f01a2a994a049f903aa6457d1fe041335ba3d23ec7429149a0ed494dee3d832a85e94fb54d59df34371ec02f42f1cc6e16dcf3af77242cf0969c3c9c0393e5e2fb139ca4e548533e1cc50b4dde30a9d3ea38c0b263c480779187a10efcdb90450e85eb29669c2c3cb9dbc0cdecb511a921c64ddd3be4d365b60800471c2be9df4bb589bc58c98e1a05d5c904099809c8daf8c1b3aef99cb456489bfb7a581f7b14611df5380b72e56b3556661b5f1ad5cd036d2424c0f7080ecc551301652e0d6e5b9a860c4419c90e137bcfa1ea606c2bedc8ae139e0895685278b0b85273e5758df6ad102e75790f049731a9a626e7eeac543f3b64549f55c3e628a8d49314f538563115123055b2a0e2a75c04a5b4456bdf6e8888618c50611b4bf43436c2773590720378b55ca67f3c80a8e228bc16414e985aefaceda13fd4f1c7e357b6b9f63d1de0367415ab98cc7211c", 0x1000}, {&(0x7f00000012c0)="7e20a9faf3368a5832b6d1630dd13da6230c8dddc6df6a22143cc6f31265e71e40f4ce050731e0c10e6418884fdcbae9301c4009a573cb0bdbbcc83248558919c6cbaa35843fd2dbb74e32828a4f154fc9c0ad9e7963aaf93fa13206d000f35772d1f35062afa151b82188e22eb301dea0a2ec5459e5ab1dc59562146df9579c4a8662f3", 0x84}, {&(0x7f0000001380)="25603f14c810e264845ebd63e01b2ed507daafa4b1ba5ff3cc58bd02968b50c02f3ba890577eec161629448fe67dd331c6a1111d72c65ef57fe35b4d0e716eb689e1b4c5bf49", 0x46}, {&(0x7f0000001400)="7a6d266f1dea2babe6737d88d298b740f382d36140a0031a2b4e0389f9b10df2b66b58271be6431a946227b288cf35078958b11dd52097260b5f3b28ebd829362728b54943ed3934bd8987cf682107f7e346f80206db7a79f6a91aaacc440d45b23b49a3a3fb7451ad105848a516be27b96b14b24b757c35cfa57d0271a6843a52911affbab7209f2b6c2b158c278eb8dcd4e7eae781ddc2744f90ffc0d451dcb624685d13257a3f0ec500533348461e427d75aba190400c9dca06", 0xbb}, {&(0x7f00000014c0)="ed12f5e54cef8bf360a481", 0xb}, {&(0x7f0000001500)="49ad6f141079f7527ae773399099674a32b21039de3810824db9a67385a20a46482c49e64cfc87dcf6ed531d8cf24133c5a634da398bbb11500efe97c09daee4664f86a797054e5f50a740b1d2727e02b011f0101f5d53d5499730f3649e689dec682ff7b8f95f0e6c64dba059f6edb4fcb91e898ced6a0341db7cc23436d5fb73461d80f41d103ed05cb240457148ca13d5487a51eb672f8d5ca5e26cbfb3a9cc570671599bc0f79d72d6884efd", 0xae}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f00000015c0)="8def74cf82fa60e3c3a4713ab7e2fd34d3866435794611269e83393771af8696528b024e46fa859a55a6a6a25a76", 0x2e}], 0x8, &(0x7f0000002e00)=[@dstopts={{0x1038, 0x29, 0x37, {0x5e, 0x204, '\x00', [@hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x10}, @generic={0x7, 0x1000, "2703943af6e246be49142d31a7cae8ce79b59eb8296c38c0afe5e02dde0c3aa1397b2aff2c9f233244b4922dbe46b8097a6dd6c0199f94aa87c6d489f03aecca5a2917142bc279b338316cda5fbfd9d304602aceb0df3ff373336b7bfd99f06b0e3cecb27ee926d1e9148a7b906439651d76692b7d496f27084674f3235a7fe9743938551526db4cf810bf9e6ffe5aa71c3b3dfedcf59b7a209736cf3a9a06574727eaf39fdb46947794293a83d1bd74877c8007cd6ffe7bf4098084eb4adb0de7eaffebfbc19ad92b2fe606bfed1fe1c134559434d7de8747d628e465fbc5d5c6518da8ea62d8f70e38ded53ca185bb6445b0a6e00ac3480739c0fae1658372b0422eec808f719e738b653334961e29f9374bed62636e6f2df0401651014ecb363a29faad27589d7917d1ca10e32b9c7b3f5dc123f05d22e055e0e304256ab3cd8107d7ae65c938e4cfc352050905c11a2960539e99d3c914ce1fc732bdbe802e588e83815489105ae25e125a8e6670e6bf4a5a87e6c7f8a7c6d7fdeb2dfa86e24375176e196b86a31b6f70768741ce6ca9ec086d5f84b777d8c51d27716763a436cd8133a76da6a61f040f1b6a4dc7e2ac4c7ed100cc4d85b8877d37da600615f5bebd5c4129e9ee1bff2ac5c4dc9bfdef11a8a7f1b56885636c26d794dfe2f4cae3d638b4d04bb4c70c7b3027a229c2a4ecde41edae67af834d271a5c6a0bc550f8ca0a3107c104e7050933c8e40ebfa1155c7a6f0340206eec49f6d90859e0db357fc1e9c7a3e9730267b4d43b853ce6c0bf4d392aa6e4739c6c1fb68acef7f2236a99586dda02def22e199bb251a44b1ceb9b17730e990e1f2c117cdc2cc4ae645735e4581dde42ffc7911b8b3736cd10b8efba1439f63a103d1e9530a0ec11be77faab190cad39f49543a33675f4b8048eb602c3f34c77a560ab63529cf884be17cbe712bce8e4b225dc00456cc4cf047e61729be0da119b02a80bd65b04ce5fcb68f8d2b5610f3318e1713f7e7d7e213c06cb693130630e238545ae50d5354526ce833dae794402dc24313bfc1e32c9bfccd32ef0e2ea974715367fea51ac988bba888226fcd9bed1f9d8d0f1884557c53908adfbcb856cf0530ed5ccf8be8c111e15492e700675ab3616baca8d356f69569f710f79115767637aaa01d7ca8eaa22253039dfc249d90da571ef14a79803755da07414c2d9d3949d0d6294d2389c7a0cb6e79afe4153c230a5d664109cc7baa454850e1e5850c9e0e7c2715fc7bee048578e50c80520214a32abe049d2e16757cdf9618e1cf9bbae5704f6fc90b2f3803ba8c210caab69b1246cc558d75cb19fb0278b08abe5e29b8073c4535286d2eb83f6c33923f6900e7cbc1b4e29e7b130f1797c380d1f45dcf822c2f2968f5571510c4da0d485abc6131afac13db385533ab5863f61294d8c95e032ebb3fc67397ad510e7fab2b263fe61979e2b6a8c86d507de8356f5ab5adfe5e74602b40662f29c16cbaf32b530aad2bc09663402d47dce92dc2d4c3f16f8ae94700ca81e26ea26d7868c888f06a46ca6c3a8d098d08ddfbd2de9633577b1373f0c71a3357c1ea55c19cc0c9c79abcc04a92fb20b7d4dd6558648382cca8986b1998f5eb082483df910850d25046523a8321e15f70bee3b01ec3525d7ac18299d03b46c3ad432cfd853bc36956dfffb4f12e72cca678fd4b6e13cdc2746dde91b29b00d4109bd8f6a8acf3d006ed2b640d50b4241e7247a30d377418cc0af68cdd9c62392ca3c9eb271ce51c37c51eddbc6814d9118649e84f3007fe8fd630c9eb8d9089a980f239a38643e2a92f859af3769156f031a55e6abe9a2be88bf0230f66994625e3c3617129b3867ebd85c640982097f709422ff25ee347763817f08022f35b74082f71294b8517e7b1216e05d30d97b4c17cc106ecda2be0ff0f5193e4f63591af789b87bfee23c0668397d97d1ababe277ea2ac80a201b7246a48a91ba4ec755acbdddca327e4ee79417bc2103e5fd2291c14e5178e987cf063cee37dc403a2744cefd4bc542ca499b2dd1360629cada494692b12750d4a2d093ce87ae6239804e2ad3f735fe0ccd1c42f9b8f06ab1958ecbaec2da991de73144160893eb8a9875754335f4988cbe6c8fb2a0bb2d7a5fc49e2ccf6b89ff1a8047e96b7875ceccc027ae4e9e6a300c6a286576158aa84bc09b2b451e46d9ab06bdac02be3c00f2f9dd8e0aa17ab13a44da5159dd1bc553d8b86f2432e115600e9b4efb98d77ad17de1c3d3ab9afb8b7e7c4145b5b588f1f6083673be05de135b440294599712f52127b40a207f06bd70879445a8dce92f21d50d0f71aa3d1bec5080804cd80d9d7f8eb5d9fbbf50c54502aef1c5bc2245233e9a0a16729547952888c9c9210be8486848dbd907ef2b3cac0097087511c80702fbe7affbb97c80db3942d93ca6e97fa5605ebdc4ca806fd43dfe3abae08757a3b11b2f61c99654cedb8816a1edf9d388dc34d0009d830bd976341d8bf679d47761785acb44a5e80a92660df602ad2f9cf2e90600f6ff16d059d19843dc5da17709eb2bc6b00ef585511583569365da2a25fb831eb5ab624692b844ff23256d29b1054c2d3b60a312b4177c70e602f28b2a3d76f55d664de961d0482af0df7001d5c35393985e971c351b4e504e981490419bb2e898d66c0a7c6ca9c89a2c4b08d29daddf08c5bfa07efeda0a3b256539e8a948d996167751590289cb48a2c07eb3a30e7223d1454d05de267cfda53c36d2525c94eda75d7685b8a2446e23b559d6167e9816df2156eb50fa628f0851c07dfacaeb0222b5fe730aed851f1ed3a96e6a7ed9361024fa65f74c010f8c45346de39a7e495ead10efde6d14c37ebb22d9541d57cfa4c0f911527558b33b48d2c227ba2515e0d2b9409990d7d04bf4c14d1a3adaa2c693e5580834d2c32a88746e3ee93793cd50ee3e428034ec223089ed0094a006e6ef784f26a3cf98989ab05fa59ed8eca7ef55b36f45f7cfaaa01e5a95c77510deae3755da4516f7b0071f50732e84a00287fc934aa5f69b0e3340d55fe28b939e93190d3aa8a9bb930ad91274185e194d9f11fa5c199f5e13ded55e1a8a5d39a4b1c64cf2da049dc68483515e3e0afea14d8793bb93ae6ef3ad73aa90573aa749eb600bdf4fb53a904a6964f79684558767b59c932ce391b1de5fd0efa50706ef73357ebfe3fb239eac8883692ace9f7b13d2eb2ab46f4733cadf3f84562fc5de8636dab80079fd0be704feb25c0c820c50c1901ac78620ba3d44ba712374a195bb0bfc1ad536c04ff154200bde045a119bd0e392c214591ace39909ea0b3cee79b2c7654e36d2ebfab0cbdbd00322411c066ac6db19a486d10fc28ba71e37dd4b182bcc06547a5fe4693076195bd7527ae0808ee1d22749828100a7b3adf939688d91216a1395c7639583c597d9737f5e526d1523acccf28bdbbdf5ea253bfbc5f532976cc00a1509e0812d410e7c3868e1297951ccae30dc85947a5f2d66995be82a2e20be1478383ee0e5c78ef11145367ccb4a8eae285981d0711d69e4a1528e5b3769e6709f6eac60818c83b1d7e40cd38078b2b9de31c602b92dc4ea0e4c918b012a7b11484699d319c1944d623550cee7cfc6e9cb264be1a7c4a73eba4633b118a7c578f727bbb3e845c269757932f16e99ff45493f95fbf9ee415147f0b00c83094d2a09e4f3c1d2a1de9117cf88a0be469a7ebeae28461da15d0d6e40bd1b821c564d6913fd224e3df86c34f8ef21b4c97369399c093ad413b3884080c07103cc0e04dfd0d974ff4b3cdace484c61b924b8e5c8dff2659d1fa847d276d344c7521d26569d81c617e378efbae1212c36e6e9baa426ff99dd94a21c572bde4ecdcac137beb2c18cd752993d8f19251cd48d8a7f07ac3594df0e80c8ea52d61a2755e647dec5fab921f70f0ebe9262241cd16fd7ae7cc49e1927501e0ce448dbf120c28f221676ebf6a9cdaf0ee6c5cd344c115a5c2f7132e89d7c18dc28360ec3d3237ffe71cc9b5b1019ffa525affcf3d6e0d096dd14baae38c63150a8c12eef9e5c393011b7dc9e96d83912752f72b7da0dc056b7e8fc1735ae2c898b2d2420b5e66b3d2eee036bde698dc27a59cec80a8e61f14d5f9444757801c7f5b8a0cf183588684ede09f8c45964a1fd9ef9ad25119fa1b369d35f0a781b54810fb1affff794d079abce459031e953d8d1aa2fe0f6a3f756501d6d361b463ac31ced329b6139af1d6775a3397bf48747ac6d209ff21aca3fb37940754bc2960caa4686f82351e29d300b2cb88200173cbfeb3dc412d8c3ba83f0a34732fad4b3d50990dcdb84d19f0de1df17a38886ee1db23dbdcef36ba7baf13b2400670af710e3ede26089829b00670a779e8d5e12a5015952714bd980424da8c504bb523380d756ea57804f434da63731faae156d7c51a792582a7af62470fa5380e685a3f0309d22fb5606e09af2bdab731051ea5a04f3f7afa191790095c8130d13c4063b62768d837589acf147ea06eeed7b0af7174ace6d8eb80e4ac7f83a15a165620a1202fa4f2b84a5853c852d9b9feadd21be083a6eb63308cfb97f92ada03a10f463b6863e6fb7f4789e4b65a2504f19f4d1b6a6049ac5b8483b8966b1bc8557b8a0392e94c1eb93a4b2b48d501a0ad26e636b3fddec21d502cd1ac4f05476fa81874d4aea69765580abd41c36edebf5d01bf08a978fabd128eb868123fab4652cdb8cfef57da63d348243d4518f702013f57178616835c82fef759b3078e0342ccc574f9a5011c4397444b7d3b35db4579db8c6b2060d03d156cd875ff7925e496d726a217a40e1e22b1ac7f28fcd4b71347cbe8d47758823739039b44f3897e91de827679e235e146ba5d212b24963f32f49575e1a429e57af80b0383f964c39d6a597079d907fdad96ed073281684d4b1ec00baa5d36d919c72235a251b08015273ee959be5210c2b87d910702a83dfbc7e34e82fad0798bd13c3777a55f7cac3e9fc3e6ce9a3b240ffe2cb63ba144165d54abe4685557703bd3ca8a49b1a941e5362d4be65cda3486d5cbe543d5894a17843fee1bfc662fdd1ff6261b0f8e302b751c4469d0346cc150275bb4250d24d7b7f19cfbd69b685079fa6e79c1a769aed94ca440565c35ca7f79b47b5902f5a906a286e1a95b4ecbb77a2a86732cdf87a844b83950af5a06e611fe6e5a010772b416d9d120bd32d4f2b2efd86de2f6f26ed380fd285ef3deb2eb71261ed9942606963312e75abcd30aa9d64e5ca4b5a09a0d7ad5d90349ed17b5e4dad02add178fdc17293c4e0c52cffb6f8dc16b571e4e756b1866e605f37f543bc0f650d055a23903714f5b6c44e94fce47655f64649f1ba61cc9e4f72c3f2a0f2754d1f0592577ae66b247bba7b159430c5b4265450246632fc0a920c3158cc8381ccd8ac58c22917b7257712eb0afce87531cc5b27a6a3a6d63854be53845fb18ba5caa9b8bbfc99fee54ec022d6bf0b030b011b7c10410563522c6b0257a9a1ca0a8dd1dabb80fc290832de21a85c124237276ca57ad39eb39b319908e2659eae475ebe731213e754cdf68c31926bc44c128bad7620cf13da469e26f190baaf2d9ac3a0d788556dc8026564c91ba797568ea9e091fac9750567e9e075046deb294d67f410bba6e4a12ee702262172e0abe670103baa68125485e00b8d2f8f74344d4b3220722ecc39b9e1f088fc447c43f882f52cb1c1b38539616ca65147464869854fad981c0d00244dd0230c32473eaf23b"}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0xbf}]}}}], 0x1038}}, {{&(0x7f0000001680)={0xa, 0x4e23, 0x2f9, @mcast2, 0x6}, 0x1c, &(0x7f0000001900)=[{&(0x7f00000016c0)="efc0b8b277c44fe3a901fc640be7ef57", 0x10}, {&(0x7f0000001700)="ea5b94679b495e728d63db1264eb2fe4a691f5460d6662a66c65ada65e997bb0c44bc6e18d144af69f6b9dc50a02aeffc996ad6e89fa0a46c8365268913887b442687815a06004758a0fa9b9a1b8eb75dae252e6ff72c8fe07c8d80db95c6988846c99435b135a1cc5ad38b6f0d5c54635d3775e93a5aba58d41aba44956827bcd52de735d2885c4f4befa6df557336086880cc6dab61a9478a1e37a33f26bc1d065263ac621f6872014228e7cd2f4", 0xaf}, {&(0x7f00000017c0)="9dd4ae35e9ff2e02930f6921743c62d0083b38ee08545699d44c31f4b8159df49ec80aca25e0c98d0470b3ada31e719c16b2c6af9abcc50b800eccf0973378d4c989879701b158303ff87af93e8eff17d628b383c4a8192ef0df1b96b22bd73f2c84c0c1c10d", 0x66}, {&(0x7f0000001840)="96b9154472f002d45a8b10acc6d52c0fce69742543e8e11850a61a36db7211c30ff4bbb27c871cb27220036544b42bbc9e4ec97d82cdfdc523b12c20cd14786396bcce23db250a92639dc076d8553dea9fbdded704a42414776006cc6ade563066980a5a866a5846ee29eb52e591c6f5c534d87ddb65b2c7c95b8e49c33a409e62300e7df0a547b0c79e3cc20bd21d0ac6ea4dfd16b3aa1260483fa74d64a13b78db0d8c6e7652513cddce", 0xab}], 0x4, &(0x7f0000001940)=[@dstopts={{0x30, 0x29, 0x37, {0x32, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x1, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x23}]}}}], 0x50}}, {{&(0x7f00000019c0)={0xa, 0x4e20, 0x88, @private0, 0x5}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a00)="55c3df0db3f286af2b228d0484781c72cde24c5ad69fc23267ce896012c33ca1893f68f9201e4baa367fdcbd5161de058011622c03bca1130d18550017bffd47d4feb47364f34b6b961b2200ca509b1b13256a7968de6164606c109fae30f08ac882ebb3ca6c1b519fc90066e23e03e44838398e9b506a06a28babfd6bd57b1c3a68460a231d17c6cfe933321a1be42f86febc8dbf43dec7682a5f04d3d3e4fa3f1a1b8458d2f82db039663bcad3ab2ac42253d582824dee6d74a35b6dfa9c572c4ea054c242", 0xc6}], 0x1, &(0x7f0000001b40)=[@rthdr={{0x88, 0x29, 0x39, {0x4, 0xe, 0x2, 0x7, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x2, 0x6, 0x2, 0xbe, 0x0, [@local, @local, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x33, 0x4, 0x0, 0x2, 0x0, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x108}}, {{&(0x7f0000001c80)={0xa, 0x4e24, 0xd35, @remote, 0x9}, 0x1c, &(0x7f0000004f40)=[{&(0x7f0000001cc0)="50a80ae624222d1d78eedc8744ddc75ea4cd4175dcb076c63b0f4dd14dbc5e7c777c69bbadbcc2876f7d998a10f61bc39140d08ae7d34e78e646d7827d507b3e5abc080179954a2c194c377bb60e3ef7a963655bcb70af3f9008bd4ae8a3f9587aa797c44f74410d3ac32b03f037a927be1b88dddad1346d0636b7c15ea305739be76c96c693fac643ded3fa088b1a929bda20f4c172", 0x96}, {&(0x7f0000003e40)="0653b0756cf4aafb2113e939779318b993d71bcb33fe7ad4f196d169d91047a267a1afd1eade8a0a662b833e", 0x2c}, {&(0x7f0000003e80)="7fc4a592d639ce80825427dd5702a39b703b8cccd5dade7ee8202efed23eb8a219e40681042e25878e5d347e08ed5837f2040d54b9a1dbf034f82bf597ac1e6443366c0e5c8303af3512db72b4ae8240e0b59066c6add7e77def7777f5b96dc7271a15cee2b0e96238199076d302bdd9466dc46d89c4697fb6ddab66a50ad419c88262eaa8e8c9e41dbb20696e8934f85d09d6fffda2c10863c4b40525cbd7927e", 0xa1}, {&(0x7f0000003f40)="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", 0x1000}], 0x4, &(0x7f0000004f80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @rthdr={{0x78, 0x29, 0x39, {0x2c, 0xc, 0x2, 0xff, 0x0, [@dev={0xfe, 0x80, '\x00', 0x29}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @remote}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x5c, 0x1, '\x00', [@generic={0xc1, 0x4, "16e1f2fa"}, @enc_lim={0x4, 0x1, 0xef}, @ra={0x5, 0x2, 0x4}]}}}], 0xb8}}, {{&(0x7f0000005040)={0xa, 0x4e21, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4f9}, 0x1c, &(0x7f00000054c0)=[{&(0x7f0000005080)="a0ce39473782ca65370f5307a27a36de35f7839c20dacbc7e60d6e50f28b2fe399ba1fa7de947eabaf19f562ddd221a5de35f4debec8cdc4deb410ad2d1307d03afa15e1409a30c6200822d8c7e93ad878c33e6b8ec1eea2d0b8210ad365f899ebd15b8083fcb90d657ca898724bcd6bfed7616a6b123eaa3ba3e1eecf2e9033fdff5b338758227cfab73fb9cac922a50129acd7c54a44bf1baad3946b411f4b77f277adef839c04aba557e0167bb6cba1ffb1462715331f220328b41daf0b6e884e9a10b24e6a69cc2a384a75b789c465b2f3c1cba317b6ddea4d396e46d211", 0xe0}, {&(0x7f0000005180)="7bc42aedf9a610a34e56ed554e40475c2009ebb0ea6d8b230f648c4f450e10dcfe9e3ec6513ec1fac6bde85d237b8f643ef265831fbf1f81baa7c645a8dd11fbf515da7414c810e7d451e13ff49c811b830593b96529e0b66f7a9d60568824fbc5b84cd1e1bd2f9c02d92349fbebd4c46db0fa07cc65854fbb3857d25f65698e70b05b4fec54d9f1864c26bea7dfc785ec924f3cc3c36762a7645788cefea5ac6895ddfb8e689ded4eea304305de819f80c3", 0xb2}, {&(0x7f0000005240)="be85e614615b55c9195afd49641476ae84e6ee90b931b6fa599936873e590dc83df7dfb2bb18347ce1fb72a2c38a683f9751e060725022d6556963fc955e2b16834c919f2f6e788b07bf4ce3ad2239d8ee596a61d26b0a3963c63fdab2d3632b16bcd7470f53a114203678cc005815324967e178cb4e43c3cd57ba07d5a8d8f4975077e8fa1d46f8eb717e7f409b7db1de51a2d3c77ac74abfbe04f595d09020856b77e3095f6398793a5d9bb8bef4701b28ea1116fffd197250390fcbb6a9a15392045134ce03eac9251cfcef7a603edbb98cf1356e350756e906af4a7b2335fac32ae3117c095761ff6f648111faebdcb8c93f7a85fd6703", 0xf9}, {&(0x7f0000005340)="3063a1d942794b1b61f2007d00f463e01bf3259301e15daefe9b34ce8c58c68b0b52b64766a5f1c1f5b2caa1cbb41aba84f8667344e58f52fd888432534366ddb50135a4e37940b08e028320d5b09deb55b8db25cdc2055b6951147ab5b496112df2e25483c2edd5a2f1b6", 0x6b}, {&(0x7f00000053c0)="732f5d4ed70ed16e9dedc3c61e4213d17d9fe234783735721cff28d6bccb1167676c564011a51ed09aeca083e1ababdf32492357515a9c2b8a1019998b4cc3713ac82082c9363028b9cdd05eaea3dfd65a668768a862fb3f384e9d66450c294e4fd74d9108e7634d59c23991f17f792e630e6172991f5d5c7334b87b16121951de1c89be90ec46e1987bc55170a5d97c8274f73b7724cc932843dddadb868cffb83cb801445f08de7c253faaeeec52c56114da22c08a18519c9605d0fa99381bc976e75a3f0b20582b3de7b459aa6951a0ad09c1bb29daa78df4", 0xda}], 0x5, &(0x7f0000005540)=[@hopopts_2292={{0xa8, 0x29, 0x36, {0x1d, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0x40}, @pad1, @generic={0x3, 0x4a, "c7b19aaab4d766b6be1a2dd5b3fdfb25a4a0663a7152a70759ec0f1b6262b2886b161505b0205806f742003d8574402a4a740f8916d28e4f4aac12347564fdcb815695f1b070ca5a180f"}, @pad1, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x20, {0x2, 0x6, 0x7, 0xe8, [0xffffffff, 0x6e20c5d8, 0x7ff]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}]}}}, @dstopts_2292={{0x1028, 0x29, 0x4, {0x73, 0x201, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x401}, @generic={0x20, 0x1000, "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"}]}}}], 0x10d0}}, {{&(0x7f0000006640)={0xa, 0x4e21, 0x3f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f00000067c0)=[{&(0x7f0000006680)="1ba99d11e48ce67380614cd5028eed8dbd9329943b19241e0f73708f5797c05d46aa9bc88dbe088618f4438fd1649fc5abf4d981136519533ce09a33d1574c42f63b9ff78978fcc2b1bf4e05006fbf3ce8c9f2413c0b5c6407fc7726ab25533dcaedfc8d7530af91aeaab0c9e6329739243e7bcd5321e2c8e6600c9bf1351e34616708ddcd9b5835af77dfd3b87255c261d6d843ced085ddd61666bf83d402a69a6b3d7126571ad4219f0b39b7dfb9e63c4efc8385e51cb13169f41b479c3643c1df5d97c8cf909b4ae4a9a95270e3d8a28cefb9b67f679d13401ecc15c6e452d4cbf485eef2185a24f1f534e5", 0xed}, {&(0x7f0000006780)="786749639280158cded82e9a92c7cc8c0054a317b758b250d9161fffc47f802b3e781c264c655d4164", 0x29}], 0x2, &(0x7f0000006800)=[@hopopts={{0xa0, 0x29, 0x36, {0x6, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @generic={0x4a, 0x80, "94f9d945f8c34ee2aedea66646d4bf258ae366aa24fa6e0aa7cc2c847025e41a56607ea56fd77c2c46dcf7e58485c95503f2efb19d6157568f35cf080b9790d7b671a16da097c9817e90bcf5cc483c7c0514f07e2d419e065556f58e3d2332e2cfdebfff3e093ee554c18dafe80ddb9cadfaef2c33512eb719dcb8a220d27baf"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @rthdr_2292={{0x48, 0x29, 0x39, {0xff, 0x6, 0x2, 0x3, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @private0]}}}], 0x100}}], 0x7, 0x2000c801) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r10, 0x0) 01:28:25 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x88402, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ea) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=[&(0x7f00000000c0)='$#\x00', &(0x7f0000000100)='^,-+\x00', &(0x7f0000000140)='/\x00', &(0x7f0000000180)='\x97#:!,+#]-\x00', &(0x7f00000001c0)=',\x00', &(0x7f0000000200)='+\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='-\x00'], &(0x7f0000000400)=[&(0x7f0000000300)='#)\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='{\x00', &(0x7f00000003c0)='+!.&\\#\x00'], 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:28:25 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8001, 0x4000) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7, 0x1, 0xff, 0x0, 0x0, 0x5, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xd5, 0x0, @perf_config_ext={0x101, 0x1f}, 0x20, 0x8, 0x270, 0x3, 0x100, 0x1, 0x5, 0x0, 0x6, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x1) openat(r1, &(0x7f0000000100)='./file0\x00', 0x404001, 0x0) 01:28:25 executing program 6: r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:28:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) openat(r1, &(0x7f0000000080)='./file0\x00', 0x8000, 0x3b) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) [ 2097.634072] loop4: detected capacity change from 0 to 135266304 [ 2097.640296] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 01:28:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/block', 0x200000, 0x10) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000020, &(0x7f0000000140)={'trans=unix,', {[{@cache_loose}, {@aname={'aname', 0x3d, '+'}}, {@msize={'msize', 0x3d, 0x7f}}, {@access_user}, {@version_L}, {@mmap}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x4}}, {@nodevmap}], [{@seclabel}, {@dont_measure}]}}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x8010, r1, 0x8cd75000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) [ 2097.657076] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2097.659031] EXT4-fs (loop4): get root inode failed [ 2097.659761] EXT4-fs (loop4): mount failed [ 2097.661303] loop5: detected capacity change from 0 to 262144 01:28:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc, 0x44}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000140), &(0x7f0000000000)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = dup3(r6, r7, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r9, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r9, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x5, &(0x7f0000000100)={0x77359400}, 0x1, 0x1}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r8, 0x0, 0x2c, &(0x7f0000000380)=""/161, &(0x7f0000000440)=0xa1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000002, 0x4000010, r0, 0x0) r10 = syz_open_dev$vcsa(&(0x7f0000000280), 0x5, 0x46a400) io_uring_enter(r10, 0x12fc, 0xc94c, 0x3, &(0x7f0000000340)={[0x7ff]}, 0x8) [ 2097.692662] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:28:25 executing program 6: r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:28:25 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r3, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x12, 0xffffffffffffffff, 0x10000000) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4000, @fd=r7, 0x4, 0x4, 0x7fff, 0x14}, 0x8001) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r8, 0x0) 01:28:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdfd, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:28:25 executing program 3: setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000080)="9df76989f2ba459c01ac8914d7f4080071890affe69235ad1216d1d55857a59b90e70f9ed5befb766cbafcd248770e633440339e912712fc6e25490a4a2dd3d7f9e397f8f46de3cf1b5692e78240a5040ce056f444e7fe060c51d889bd3a57218b1367f5d243bccf654ba933a8b6e60cbd305e954268140e255bcecca82ed6855084027874c748245c0766e0cae132a9b3ed2816d9f63d74bf96beedc4b368ea4727fc4fc6e1083e8983cdd7004b30f55b5d30b0a83d2868c89be0e769d851f3f03c284cd97489728590b6e3dcdfc4d05ab168e46a4e57c0e54c89903859197448cd0297aa2f80aee957c9c87004c38f239b20b924d6fc", 0xf7) r0 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x5, 0x8000) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000200)=""/178, &(0x7f00000002c0)=0xb2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42e2, 0x40) finit_module(r1, &(0x7f0000000000)='^\x00', 0x2) openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) 01:28:25 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xff600000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:28:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r1, 0x0) 01:28:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:28:25 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x6, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2097.870255] loop5: detected capacity change from 0 to 524288 [ 2097.880883] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:28:25 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffff0300}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:28:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) inotify_init1(0x800) r1 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r1, 0x7a29d000) [ 2097.905447] loop5: detected capacity change from 0 to 524288 [ 2097.908584] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:28:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e24, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}}, 0x0, 0x0, 0x28, 0x0, "7adbb3fda09e5fce0a0ece5091d4353b7344193c5e3745517140a95cf381440c361b494f953f35039f660b815e4cddee58349cd3035a932f5a88b56dee8db513f0b725f4cf03fbf8272eb31dbef213bd"}, 0xd8) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) sendfile(r1, r0, &(0x7f0000000000)=0x4, 0xfffffffffffffffb) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:28:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:28:41 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:28:41 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x25, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:28:41 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffff1f00}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:28:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) sendmsg$unix(r0, &(0x7f00000014c0)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000100)="00e548127ea3a2a6fcb1d3f0011fa2c381150f898829bedb5db8b0a0e6da763560f619bb770cb3118c00144ef961e10fe20c21913ebe7ec8e09bfc69bb73ec16a36468262169d227dd0eb6dea4fbdec5cca2808f0878df480c70564fe1fd3dd70d79cd4ae192e7528336291e3858507bed5b68581935abfacf270286404838c3a8", 0x81}, {&(0x7f00000001c0)="437fc29336f9e439d14572db6efda05442100af3b5d2ef091d5ab47bb5522d2f2982c00fc935e382617ec89378d7b8bf95ab2b19d277b8575cebfbd4a4ce1ac166f3e32e526c71f18ab6b902e2df1c7e8f6b82bd5505e29e62767bb276149dbbc34fedf9962db7d226d7cc0b31f9c6cfb7f9f9f4d1d941d9889f125215cfe8cb21dcedbc708e9341ff7bf36fcc06d77a190e809a21faad103147", 0x9a}, {&(0x7f0000000280)="24b3db35d99ac94e04fd39f5b4f5addf49928ffe49bbfa84f8d6663298ac3b0032e3614763613df914920e1b230075a1b5ee094f7cb3f1e199d6dc0bbfc056a7641a036aa55f32edd01ffccba23f26f130926aaaa2ec77c09a293b47444253d1", 0x60}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000000)="344017d0229bccda5dfcdb00a443f86f02c07e3c34a121183373daa4376af44d4624f31fd22724fa", 0x28}, {&(0x7f0000001300)="6ae7dc99b3a690834ab558c924ac4876deb56869761e6c5774924ba828e288492ea2669aa395658cf8ebff78b20849bbda09ed5be0eb6453baa14d62e722d582bf1319b82fa83bfb8b32efb9510e22a04d581046bfa8c6d6ac2071caa253495acbbd1b0b936d10a9846dc26ad441146beb98d38e11daddec380f0a19c371d4cfc9b74609ebe88a01e7904f4c0103d207917cd59847622c0424c4a96beb464d7e1c923df482315961bad5f7b818a28a653e7736757a2d362026a9cbd5d5bfaf6121e8f6418794", 0xc6}], 0x6, &(0x7f0000001500)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x8004}, 0x91) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:28:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x400000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:28:41 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r3, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x12, 0xffffffffffffffff, 0x10000000) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4000, @fd=r7, 0x4, 0x4, 0x7fff, 0x14}, 0x8001) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r8, 0x0) 01:28:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0x0) 01:28:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffff6, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2113.668088] loop4: detected capacity change from 0 to 135266304 01:28:41 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2113.752296] loop5: detected capacity change from 0 to 4194304 [ 2113.763507] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2113.783281] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2113.793608] EXT4-fs (loop4): get root inode failed [ 2113.794925] EXT4-fs (loop4): mount failed [ 2113.846330] loop5: detected capacity change from 0 to 4194304 [ 2113.894456] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:28:41 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, 0xffffffffffffffff, 0x0) 01:28:41 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2113.911262] loop4: detected capacity change from 0 to 135266304 [ 2113.922892] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2113.925821] EXT4-fs (loop4): get root inode failed [ 2113.926986] EXT4-fs (loop4): mount failed 01:28:41 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r3, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x12, 0xffffffffffffffff, 0x10000000) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4000, @fd=r7, 0x4, 0x4, 0x7fff, 0x14}, 0x8001) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r8, 0x0) 01:28:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:28:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffe, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:28:41 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:28:41 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x117, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2114.110853] loop4: detected capacity change from 0 to 135266304 [ 2114.156737] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2114.163558] EXT4-fs (loop4): get root inode failed [ 2114.164798] EXT4-fs (loop4): mount failed [ 2114.201068] loop4: detected capacity change from 0 to 135266304 [ 2114.208539] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2114.211687] EXT4-fs (loop4): get root inode failed [ 2114.212933] EXT4-fs (loop4): mount failed 01:28:55 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffe4}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:28:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:28:55 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x129, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:28:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x225c17d03, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:28:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf641, 0xc86}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x10001, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x4, 0x3, 0x2, 0x0, 0xfffffffffffffffc, 0x450, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x6a3, 0x4, 0x5, 0x9, 0x5, 0x7, 0xeb, 0x0, 0x9, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x9) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x402000, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) 01:28:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r3, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x12, 0xffffffffffffffff, 0x10000000) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4000, @fd=r7, 0x4, 0x4, 0x7fff, 0x14}, 0x8001) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) 01:28:55 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:28:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x11) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup2(r1, r1) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) [ 2127.626101] loop5: detected capacity change from 0 to 16777216 [ 2127.666324] loop4: detected capacity change from 0 to 135266304 [ 2127.676524] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:28:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x115300, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x186) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r3) 01:28:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r3, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x12, 0xffffffffffffffff, 0x10000000) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4000, @fd=r7, 0x4, 0x4, 0x7fff, 0x14}, 0x8001) 01:28:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2127.746564] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2127.764751] EXT4-fs (loop4): get root inode failed [ 2127.766278] EXT4-fs (loop4): mount failed 01:28:55 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:28:55 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x100000800}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2127.835321] loop4: detected capacity change from 0 to 135266304 [ 2127.867538] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated 01:28:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r3, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x12, 0xffffffffffffffff, 0x10000000) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 01:28:55 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2127.894089] EXT4-fs (loop4): get root inode failed 01:28:55 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS(r1, 0x1267, &(0x7f00000005c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "7a0a49805b3f8a1d1f3c51f4b0a08ee8cb28f6a71b6e747131e3558bbb840da72d4b522d3fb4c54d0509ef815a97cf1f293dce3a7c7cf60f7f8790c885451378", "d050516ce943c90f758a236f4aee0d825424dc6bd419233154e824257ddd96d1"}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r3, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r6, 0x0) [ 2127.895491] EXT4-fs (loop4): mount failed 01:28:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2127.979062] loop5: detected capacity change from 0 to 50331648 [ 2127.986979] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:28:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) 01:28:55 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2128.017899] loop5: detected capacity change from 0 to 50331648 [ 2128.028167] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:29:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:29:09 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:29:09 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:29:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:29:09 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r3, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x12, 0xffffffffffffffff, 0x10000000) 01:29:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:29:09 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2100000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2141.733627] loop4: detected capacity change from 0 to 135266304 [ 2141.770645] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2141.773509] EXT4-fs (loop4): get root inode failed [ 2141.774187] EXT4-fs (loop4): mount failed [ 2141.795746] loop4: detected capacity change from 0 to 135266304 [ 2141.802963] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2141.805112] EXT4-fs (loop4): get root inode failed [ 2141.805894] EXT4-fs (loop4): mount failed 01:29:09 executing program 1: perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000006}, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$mouse(&(0x7f0000000080), 0xffffffffffffff48, 0x200081) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1d1100, 0x0) 01:29:09 executing program 3: ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000000)={0x1, 0x8, 0x1186}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) [ 2141.812887] loop5: detected capacity change from 0 to 67108864 01:29:09 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2141.850718] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:29:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7ffffffff000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:29:09 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r3, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) [ 2141.886581] loop5: detected capacity change from 0 to 67108864 [ 2141.890732] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:29:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x5000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2141.938008] loop5: detected capacity change from 0 to 83886080 [ 2141.960158] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2141.983223] loop5: detected capacity change from 0 to 83886080 [ 2141.987096] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:29:22 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x60ffffffffff}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:29:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r3, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) 01:29:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x3a1abb2cbbdae8da) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:29:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:29:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2004a2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:29:22 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:29:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x6000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2154.426819] loop4: detected capacity change from 0 to 135266304 [ 2154.431364] loop5: detected capacity change from 0 to 100663296 [ 2154.444541] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2154.444952] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2154.449360] EXT4-fs (loop4): get root inode failed [ 2154.450505] EXT4-fs (loop4): mount failed [ 2154.474703] loop5: detected capacity change from 0 to 100663296 [ 2154.480995] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2154.485765] loop4: detected capacity change from 0 to 135266304 [ 2154.521112] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2154.523981] EXT4-fs (loop4): get root inode failed [ 2154.525113] EXT4-fs (loop4): mount failed 01:29:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r3, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:29:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x42) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f00000000c0)='net/psched\x00') fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x150) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:29:36 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:29:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7ffffffffffff, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:29:36 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x7fad28bb2000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:29:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x7000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:29:36 executing program 1: r0 = gettid() prlimit64(r0, 0x9, &(0x7f0000000000)={0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40010, r1, 0x8000000) 01:29:36 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 01:29:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x35468da7801ce400, 0x4083751f67190e60) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:29:36 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) sendfile(r1, r2, &(0x7f0000000080)=0xf6cb, 0xffffffffffffffe0) [ 2168.214852] loop4: detected capacity change from 0 to 135266304 [ 2168.241937] loop5: detected capacity change from 0 to 117440512 01:29:36 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r1, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:29:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000080)) [ 2168.261157] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2168.264803] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2168.271128] EXT4-fs (loop4): get root inode failed [ 2168.272465] EXT4-fs (loop4): mount failed [ 2168.329845] loop4: detected capacity change from 0 to 135266304 01:29:36 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) [ 2168.349993] loop5: detected capacity change from 0 to 117440512 [ 2168.353318] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2168.367044] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2168.369593] EXT4-fs (loop4): get root inode failed [ 2168.370164] EXT4-fs (loop4): mount failed 01:29:36 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0x1, 0x4, 0x5, 0x40, @tick=0x9c, {0x4, 0x7}, {0x80, 0x8}, @queue={0x5, {0x100, 0xc37e}}}, {0x0, 0x0, 0xf7, 0x1, @tick=0x3, {0x1}, {0x6e, 0x1f}, @addr={0x40, 0x9b}}], 0x38) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/168, 0xa8}], 0x2, 0x10001, 0xa46a) 01:29:36 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:29:36 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x7fad28db2000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:29:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x8000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:29:36 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) [ 2168.505161] loop5: detected capacity change from 0 to 134217728 [ 2168.509523] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2168.521753] loop5: detected capacity change from 0 to 134217728 [ 2168.525663] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:29:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x9000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:29:48 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 01:29:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) 01:29:48 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x2282, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xff, 0x9, 0x3f, 0x6, 0x0, 0x7, 0xb0004, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x1, @perf_config_ext={0x5, 0x7f}, 0x20, 0x5, 0x7fffffff, 0x2, 0xffff, 0x6, 0x7, 0x0, 0x8000, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000180)={{r2}, 0x0, 0x4, @inherit={0x50, &(0x7f0000000100)={0x1, 0x1, 0x5, 0x2, {0x8, 0x8, 0x5, 0x7, 0x100000000}, [0x0]}}, @devid}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0) 01:29:48 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:29:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:29:48 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x7fad2af32000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:29:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2181.044834] loop5: detected capacity change from 0 to 135266304 [ 2181.054554] loop4: detected capacity change from 0 to 135266304 [ 2181.096893] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:29:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) write(r0, &(0x7f0000000080)="906766afe2ac0f312d8d2ebf115de87a9e9687ff6917ba4d1fc7", 0x1a) r1 = socket$inet6(0xa, 0x3, 0x3) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x3, 0x0, 0x800, 0x4}, 0x20) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) sendfile(r1, r0, &(0x7f0000000000)=0xfffffffffffffffb, 0x200) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10010, r0, 0x0) [ 2181.109227] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2181.113639] EXT4-fs (loop4): get root inode failed [ 2181.114978] EXT4-fs (loop4): mount failed 01:29:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:29:48 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="01feffff000000001811ca0e0000b9", @ANYRES32=r0, @ANYBLOB="00000100000000002e2f66696c653000"]) creat(&(0x7f0000000180)='./file0\x00', 0x54) syz_io_uring_setup(0x33e1, &(0x7f0000000080)={0x0, 0x2f15, 0x10, 0x2, 0xd8, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 2181.172497] loop5: detected capacity change from 0 to 135266304 01:29:49 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) [ 2181.192099] loop4: detected capacity change from 0 to 135266304 [ 2181.203922] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:29:49 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:29:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) [ 2181.243241] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2181.246349] EXT4-fs (loop4): get root inode failed [ 2181.247708] EXT4-fs (loop4): mount failed 01:29:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xa000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:29:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x14e5, &(0x7f0000000080)={0x0, 0xad2, 0x4, 0x1, 0xfd, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x10, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0) 01:30:02 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) [ 2194.641669] loop4: detected capacity change from 0 to 135266304 01:30:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x64c0, 0x0) sendfile(r1, r2, 0x0, 0x100000000) 01:30:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2001000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:30:02 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:30:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:30:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 01:30:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x755f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0xd596135a9d177bc6, @fd=r0, 0x372c, 0x6, 0x6, 0x4, 0x0, {0x1}}, 0x401) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3) io_uring_enter(r1, 0x6ddd, 0x5a6b, 0x3, &(0x7f00000000c0)={[0x1f]}, 0x8) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r5 = fork() ptrace(0x10, r5) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={r5, r6, 0xee01}, 0xc) 01:30:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xb000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:30:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) [ 2194.692437] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2194.696089] EXT4-fs (loop4): get root inode failed [ 2194.696918] EXT4-fs (loop4): mount failed [ 2194.698121] loop5: detected capacity change from 0 to 135266304 01:30:02 executing program 6: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) [ 2194.717203] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:30:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x6) [ 2194.757979] loop5: detected capacity change from 0 to 135266304 [ 2194.768601] EXT4-fs warning (device sda): ext4_group_extend:1805: can't shrink FS - resize aborted [ 2194.775364] loop4: detected capacity change from 0 to 135266304 [ 2194.783344] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:30:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2194.799044] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2194.823682] EXT4-fs (loop4): get root inode failed [ 2194.824642] EXT4-fs (loop4): mount failed 01:30:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:30:02 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:30:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xd000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:30:02 executing program 6: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 01:30:02 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4662, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) [ 2194.948997] loop5: detected capacity change from 0 to 135266304 [ 2194.968882] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2195.000255] loop5: detected capacity change from 0 to 135266304 [ 2195.013310] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2209.277815] loop4: detected capacity change from 0 to 135266304 01:30:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0ffffff7f0000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:30:17 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8000001000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:30:17 executing program 3: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r4, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r0, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x5}, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0xb, 0x4010, 0xffffffffffffffff, 0x0) 01:30:17 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:30:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xf000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:30:17 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:30:17 executing program 6: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 01:30:17 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2209.285961] loop5: detected capacity change from 0 to 135266304 [ 2209.293159] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:30:17 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2209.364922] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2209.371120] loop5: detected capacity change from 0 to 135266304 01:30:17 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2209.393509] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2209.395685] EXT4-fs (loop4): get root inode failed [ 2209.396995] EXT4-fs (loop4): mount failed 01:30:17 executing program 7: r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:30:17 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:30:17 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20bb28ad7f0000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:30:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:30:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x10000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:30:17 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1f, 0x6, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x40180, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x122a4, 0x20, 0x401, 0x8, 0x8, 0x8, 0x8, 0x0, 0x0, 0x0, 0x6d4e}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) fcntl$setflags(r0, 0x2, 0x1) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) 01:30:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2209.552125] loop4: detected capacity change from 0 to 135266304 [ 2209.564865] loop5: detected capacity change from 0 to 135266304 [ 2209.579838] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2209.581645] EXT4-fs (loop4): get root inode failed [ 2209.582284] EXT4-fs (loop4): mount failed [ 2209.583012] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2209.601965] loop4: detected capacity change from 0 to 135266304 [ 2209.615383] loop5: detected capacity change from 0 to 135266304 [ 2209.630287] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2209.636386] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2209.644731] EXT4-fs (loop4): get root inode failed [ 2209.646489] EXT4-fs (loop4): mount failed 01:30:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:30:31 executing program 7: r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:30:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x11000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:30:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:30:31 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20db28ad7f0000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:30:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 01:30:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x810, r0, 0x0) 01:30:31 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0xf}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2223.913893] loop4: detected capacity change from 0 to 135266304 [ 2223.960212] loop5: detected capacity change from 0 to 135266304 [ 2223.968446] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2223.978312] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2223.987754] EXT4-fs (loop4): get root inode failed [ 2223.989012] EXT4-fs (loop4): mount failed [ 2224.017646] loop5: detected capacity change from 0 to 135266304 01:30:31 executing program 7: r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2224.028535] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:30:31 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 1) 01:30:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x246e3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:30:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) [ 2224.063852] loop4: detected capacity change from 0 to 135266304 01:30:31 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:30:31 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20f32aad7f0000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2224.144047] EXT4-fs: failed to create workqueue [ 2224.145380] EXT4-fs (loop4): mount failed 01:30:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x8, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) copy_file_range(r1, &(0x7f0000000080)=0xffff, r2, 0x0, 0x20, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:30:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x20000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:30:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:30:32 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:30:32 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x14}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2224.290849] loop5: detected capacity change from 0 to 135266304 [ 2224.342734] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2224.386990] loop5: detected capacity change from 0 to 135266304 [ 2224.400003] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:30:45 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:30:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 01:30:45 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0xc0}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:30:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x20100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:30:45 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:30:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x37dc12502000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:30:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x4000010, r0, 0x0) 01:30:45 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0ff1f00000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2237.699696] loop5: detected capacity change from 0 to 135266304 01:30:45 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2237.732152] loop4: detected capacity change from 0 to 135266304 01:30:45 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2237.772675] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:30:45 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2237.818092] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2237.829905] EXT4-fs (loop4): get root inode failed [ 2237.831354] EXT4-fs (loop4): mount failed [ 2237.878242] loop4: detected capacity change from 0 to 135266304 [ 2237.890589] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2237.892553] EXT4-fs (loop4): get root inode failed [ 2237.893183] EXT4-fs (loop4): mount failed 01:31:00 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0xec0}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:31:00 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:31:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@broadcast, @loopback}, &(0x7f0000000080)=0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000005, 0x30, r2, 0xb0214000) 01:31:00 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0xb00, 0x100000e, 0x13, r0, 0x0) 01:31:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x2e000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:31:00 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:31:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:31:00 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2252.821209] loop5: detected capacity change from 0 to 135266304 [ 2252.833952] loop4: detected capacity change from 0 to 135266304 [ 2252.842283] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:31:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) recvmmsg(r0, &(0x7f0000000140), 0x0, 0x40000341, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) lseek(r1, 0x3ff, 0x4) r2 = syz_io_uring_setup(0x739d, &(0x7f0000000080)={0x0, 0x25a6, 0x10, 0x1, 0x1f0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x13, r2, 0x0) [ 2252.859331] loop5: detected capacity change from 0 to 135266304 [ 2252.867655] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2252.889324] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2252.902733] EXT4-fs (loop4): get root inode failed [ 2252.903840] EXT4-fs (loop4): mount failed 01:31:00 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:31:00 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:31:00 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:31:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x37c16fc8, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2253.003379] loop4: detected capacity change from 0 to 135266304 01:31:00 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x100000e, 0x13, r0, 0x0) [ 2253.049270] EXT4-fs: failed to create workqueue [ 2253.050520] EXT4-fs (loop4): mount failed 01:31:00 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x2000}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:31:00 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 01:31:01 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4003, 0x100000e, 0x13, r0, 0x0) 01:31:01 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:31:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) clone3(&(0x7f00000001c0)={0x380, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x2c}, &(0x7f0000000100)=""/31, 0x1f, &(0x7f0000000140)=""/47, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x8, {r0}}, 0x58) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:31:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x3f000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:31:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:31:17 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:31:17 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:31:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:31:17 executing program 1: r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:31:17 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 01:31:17 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x100000e, 0x13, r0, 0x0) 01:31:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000080)={0x6, {{0xa, 0x4e23, 0x2ac7, @mcast2, 0x2}}, 0x0, 0x6, [{{0xa, 0x4e20, 0x8, @remote, 0x80000000}}, {{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}}, {{0xa, 0x4e21, 0x6, @local, 0xdbe}}, {{0xa, 0x4e20, 0xf8, @remote}}, {{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}}, {{0xa, 0x4e22, 0x9, @loopback, 0x9}}]}, 0x390) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:31:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2269.396892] loop4: detected capacity change from 0 to 135266304 [ 2269.436043] loop5: detected capacity change from 0 to 135266304 [ 2269.444641] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2269.475175] loop5: detected capacity change from 0 to 135266304 [ 2269.479889] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2269.485863] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2269.488064] EXT4-fs (loop4): get root inode failed [ 2269.489556] EXT4-fs (loop4): mount failed 01:31:31 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x20000564}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:31:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:31:31 executing program 1: r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:31:31 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4005, 0x100000e, 0x13, r0, 0x0) 01:31:31 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:31:31 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 01:31:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x48000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2283.243303] loop5: detected capacity change from 0 to 135266304 [ 2283.264480] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2283.294903] loop4: detected capacity change from 0 to 135266304 01:31:31 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 01:31:31 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4006, 0x100000e, 0x13, r0, 0x0) [ 2283.325165] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2283.329518] EXT4-fs (loop4): get root inode failed [ 2283.330824] EXT4-fs (loop4): mount failed 01:31:31 executing program 1: r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2283.367444] loop5: detected capacity change from 0 to 135266304 [ 2283.373213] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2283.411082] loop4: detected capacity change from 0 to 135266304 [ 2283.430171] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated 01:31:31 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000001240), &(0x7f0000001280)=0x4) r1 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000002500)=0x4) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r3 = socket(0x2c, 0x6, 0x37ea) sendmsg$NFT_BATCH(r3, &(0x7f0000001880)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x574}, 0x1, 0x0, 0x0, 0x804}, 0x8002) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/4096, 0x1000, 0x1, &(0x7f0000001100)=""/160, 0xa0}, &(0x7f00000011c0)=0x40) r4 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$LOOP_SET_STATUS(r6, 0x1267, &(0x7f00000005c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "7a0a49805b3f8a1d1f3c51f4b0a08ee8cb28f6a71b6e747131e3558bbb840da72d4b522d3fb4c54d0509ef815a97cf1f293dce3a7c7cf60f7f8790c885451378", "d050516ce943c90f758a236f4aee0d825424dc6bd419233154e824257ddd96d1"}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000080)={0x1a000000e}) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f00000012c0)=0x8, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x46e2, 0x40) r7 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000d, 0x2010, r7, 0x0) 01:31:31 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) [ 2283.434133] EXT4-fs (loop4): get root inode failed [ 2283.435412] EXT4-fs (loop4): mount failed 01:31:31 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4007, 0x100000e, 0x13, r0, 0x0) 01:31:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4c000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2283.493285] audit: type=1400 audit(1750123891.337:57): avc: denied { block_suspend } for pid=13919 comm="syz-executor.3" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 01:31:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:31:31 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:31:31 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x7ffff000}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:31:31 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:31:48 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:31:48 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0xfffffdef}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:31:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb00000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:31:48 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x200000, 0x100000e, 0x13, r0, 0x0) 01:31:48 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 01:31:48 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:31:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x408100, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x0, 0x80, 0x3, 0x4}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:31:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x60000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2300.238514] loop5: detected capacity change from 0 to 135266304 [ 2300.249030] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2300.302823] loop5: detected capacity change from 0 to 135266304 [ 2300.309296] loop4: detected capacity change from 0 to 135266304 [ 2300.315992] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2300.340798] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2300.344048] EXT4-fs (loop4): get root inode failed [ 2300.345355] EXT4-fs (loop4): mount failed 01:31:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6cc2e0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:31:48 executing program 7: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 01:31:48 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2300.443237] loop4: detected capacity change from 0 to 135266304 01:31:48 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x100000e, 0x13, r0, 0x0) 01:31:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x68000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:31:48 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2300.494902] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2300.497729] EXT4-fs (loop4): get root inode failed [ 2300.498951] EXT4-fs (loop4): mount failed [ 2300.545790] loop5: detected capacity change from 0 to 135266304 01:31:48 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2300.577549] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:31:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x444420, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r1 = signalfd4(r0, &(0x7f0000000040)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000080)={{r1}, "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"}) io_uring_enter(r0, 0x6063, 0xa264, 0x1, &(0x7f00000010c0)={[0x8]}, 0x8) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000001080)=0x2) 01:31:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1800000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:31:48 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x7ffffffff000, 0x100000e, 0x13, r0, 0x0) [ 2300.627149] loop5: detected capacity change from 0 to 135266304 [ 2300.639329] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:31:48 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x2}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:31:48 executing program 7: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 01:31:48 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2300.708551] loop4: detected capacity change from 0 to 135266304 01:31:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000013c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x9, 0x7, 0x0, 0x9, 0x3}, 0xab) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, 0x0, &(0x7f0000001380)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000001100)=""/231, 0xe7}], 0x3, &(0x7f0000001240)=""/194, 0xc2}, 0x0, 0x10000, 0x0, {0x3}}, 0x10001) [ 2300.730994] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2300.737186] EXT4-fs (loop4): get root inode failed [ 2300.737939] EXT4-fs (loop4): mount failed 01:32:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:32:02 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x3}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:32:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1c00000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:32:02 executing program 7: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 01:32:02 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:32:02 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0) 01:32:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x0, 0x80000001, 0x3, 0x4, 0x65b, 0x5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:32:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xe4ffffff00000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2314.526149] loop5: detected capacity change from 0 to 135266304 [ 2314.533896] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2314.568054] loop4: detected capacity change from 0 to 135266304 [ 2314.573665] loop5: detected capacity change from 0 to 135266304 01:32:02 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x2) [ 2314.608673] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2314.628052] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2314.642021] EXT4-fs (loop4): get root inode failed [ 2314.643203] EXT4-fs (loop4): mount failed [ 2314.685100] loop4: detected capacity change from 0 to 135266304 [ 2314.735254] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2314.739806] EXT4-fs (loop4): get root inode failed [ 2314.741103] EXT4-fs (loop4): mount failed 01:32:20 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 1) 01:32:20 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x4}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:32:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:32:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x104) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x0) 01:32:20 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:32:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x74000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:32:20 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xef1e000000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:32:20 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x3) [ 2332.363694] loop4: detected capacity change from 0 to 135266304 [ 2332.388648] loop5: detected capacity change from 0 to 135266304 [ 2332.395718] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:32:20 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) [ 2332.429826] FAULT_INJECTION: forcing a failure. [ 2332.429826] name failslab, interval 1, probability 0, space 0, times 0 [ 2332.432027] CPU: 0 PID: 14084 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 2332.433324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2332.434872] Call Trace: [ 2332.435359] dump_stack+0x107/0x167 [ 2332.436027] should_fail.cold+0x5/0xa [ 2332.436724] ? vm_area_dup+0x78/0x290 [ 2332.437434] should_failslab+0x5/0x20 [ 2332.438142] kmem_cache_alloc+0x5b/0x310 [ 2332.438902] vm_area_dup+0x78/0x290 [ 2332.439587] ? __lockdep_reset_lock+0x180/0x180 [ 2332.440437] ? mark_lock+0xf5/0x2df0 [ 2332.441117] ? lock_acquire+0x197/0x470 [ 2332.441855] ? lock_chain_count+0x20/0x20 [ 2332.442621] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 2332.443472] ? lock_downgrade+0x6d0/0x6d0 [ 2332.444231] ? lock_chain_count+0x20/0x20 [ 2332.444996] ? vm_area_alloc+0x110/0x110 [ 2332.445753] ? __lock_acquire+0x1657/0x5b00 [ 2332.446576] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2332.447555] ? vmacache_find+0x55/0x2a0 [ 2332.448283] __split_vma+0xa8/0x4e0 [ 2332.448972] __do_munmap+0xfae/0x1260 [ 2332.449691] ? arch_get_unmapped_area+0x450/0x450 [ 2332.450576] ? lock_release+0x680/0x680 [ 2332.451302] mmap_region+0x7c8/0x1500 [ 2332.452011] do_mmap+0xcdb/0x11e0 [ 2332.452656] vm_mmap_pgoff+0x198/0x1f0 [ 2332.453382] ? randomize_page+0xb0/0xb0 [ 2332.454135] ksys_mmap_pgoff+0x41c/0x560 [ 2332.454880] ? find_mergeable_anon_vma+0x250/0x250 [ 2332.455785] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2332.456756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2332.457716] do_syscall_64+0x33/0x40 [ 2332.458409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2332.459354] RIP: 0033:0x7f8a775a1b19 [ 2332.460033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2332.463422] RSP: 002b:00007f8a74b17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2332.464799] RAX: ffffffffffffffda RBX: 00007f8a776b4f60 RCX: 00007f8a775a1b19 [ 2332.466094] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2332.467381] RBP: 00007f8a74b171d0 R08: 0000000000000003 R09: 0000000000000000 [ 2332.468688] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2332.469992] R13: 00007ffd18e60b1f R14: 00007f8a74b17300 R15: 0000000000022000 [ 2332.475887] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2332.483415] EXT4-fs (loop4): get root inode failed [ 2332.484354] EXT4-fs (loop4): mount failed [ 2332.505220] loop5: detected capacity change from 0 to 135266304 [ 2332.514062] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:32:20 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4) 01:32:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$LOOP_SET_STATUS(r3, 0x1267, &(0x7f00000005c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "7a0a49805b3f8a1d1f3c51f4b0a08ee8cb28f6a71b6e747131e3558bbb840da72d4b522d3fb4c54d0509ef815a97cf1f293dce3a7c7cf60f7f8790c885451378", "d050516ce943c90f758a236f4aee0d825424dc6bd419233154e824257ddd96d1"}) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xac, 0x24, 0x2, 0x70bd26, 0x25dfdbfb, {0x7}, [@typed={0x95, 0x62, 0x0, 0x0, @binary="a3eff46d5d78f30b31a215b1316f974ba2445c43f81eb7b5fdad9c7c67fa1d941e2cde0fee0cb065722f8ccacbd68a824b75ece32bbc496b1132f79566656c958c4d68bfc9ce5886aeadc4a71b6f031ecfba88cbe689b5cc11e1474f53639e1c9d40d2ed4700ecc0b5b0c6464b4f094796df47e7c361aefa89b2269f8168e8e6dc4988531cf2c53f455fd02386ebde2945"}]}, 0xac}, 0x1, 0x0, 0x0, 0x4005}, 0x8001) syz_io_uring_setup(0x2832, &(0x7f0000000080)={0x0, 0x3a08, 0x10, 0x2, 0x125, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1, 0x1, &(0x7f0000000140)="76329b57d83e046c4672e12924c2187c14bd7b52eb5a4780256b8d5e7cb8b301e306a59f43546a1f69d142f5593c9d8d4e219f3557c12eda5193f7d8e10f94f59e6f0597350ff74196f507da71588a0053f6b1690253fe91d2ccb6dea7fb42412cdcdafcd99653161c66b68b376bf13df855cad1f3f47ec419619d61b17ac1417a41180c2dcfa40d722cbdf23b1b4758090d66bfdb8e0a07a3d4219f412a423a31bb774724948738a7d4ae4caa66ed15eb310de082de97504346742e9047ae5d75ce7a7d9f953b9bed0e442c3dc4ec38e47caef03439270f4f096b7835385be07161431a72f72a31", 0x300000}, 0x2) io_uring_enter(r0, 0x1, 0xed9, 0x0, &(0x7f0000000280)={[0x7f]}, 0x8) 01:32:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6900000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:32:20 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 01:32:20 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xfb01000000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:32:20 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 2) 01:32:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x7a000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:32:20 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x6}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2332.741532] FAULT_INJECTION: forcing a failure. [ 2332.741532] name failslab, interval 1, probability 0, space 0, times 0 [ 2332.743756] CPU: 0 PID: 14117 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 2332.745093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2332.746697] Call Trace: [ 2332.747204] dump_stack+0x107/0x167 [ 2332.747901] should_fail.cold+0x5/0xa [ 2332.748634] ? create_object.isra.0+0x3a/0xa20 [ 2332.749518] should_failslab+0x5/0x20 [ 2332.750252] kmem_cache_alloc+0x5b/0x310 [ 2332.751029] create_object.isra.0+0x3a/0xa20 [ 2332.751872] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2332.752833] kmem_cache_alloc+0x159/0x310 [ 2332.753641] vm_area_dup+0x78/0x290 [ 2332.754240] ? __lockdep_reset_lock+0x180/0x180 [ 2332.755119] ? mark_lock+0xf5/0x2df0 [ 2332.755838] ? lock_acquire+0x197/0x470 [ 2332.756586] ? lock_chain_count+0x20/0x20 [ 2332.757368] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 2332.758262] ? lock_downgrade+0x6d0/0x6d0 [ 2332.759042] ? lock_chain_count+0x20/0x20 [ 2332.759830] ? vm_area_alloc+0x110/0x110 [ 2332.760603] ? __lock_acquire+0x1657/0x5b00 [ 2332.761427] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2332.762434] ? vmacache_find+0x55/0x2a0 [ 2332.763090] __split_vma+0xa8/0x4e0 [ 2332.763779] __do_munmap+0xfae/0x1260 [ 2332.764506] ? arch_get_unmapped_area+0x450/0x450 [ 2332.765414] ? lock_release+0x680/0x680 [ 2332.766183] mmap_region+0x7c8/0x1500 [ 2332.766924] do_mmap+0xcdb/0x11e0 [ 2332.767587] vm_mmap_pgoff+0x198/0x1f0 [ 2332.768326] ? randomize_page+0xb0/0xb0 [ 2332.769088] ksys_mmap_pgoff+0x41c/0x560 [ 2332.769804] loop5: detected capacity change from 0 to 135266304 [ 2332.769861] ? find_mergeable_anon_vma+0x250/0x250 [ 2332.772233] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2332.773217] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2332.774207] do_syscall_64+0x33/0x40 [ 2332.774911] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2332.775865] RIP: 0033:0x7f8a775a1b19 [ 2332.776565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2332.780024] RSP: 002b:00007f8a74b17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2332.781448] RAX: ffffffffffffffda RBX: 00007f8a776b4f60 RCX: 00007f8a775a1b19 [ 2332.782804] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2332.784139] RBP: 00007f8a74b171d0 R08: 0000000000000003 R09: 0000000000000000 [ 2332.785483] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2332.786816] R13: 00007ffd18e60b1f R14: 00007f8a74b17300 R15: 0000000000022000 [ 2332.786895] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:32:20 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x5) 01:32:20 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) 01:32:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8004000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:32:20 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) [ 2332.810944] loop5: detected capacity change from 0 to 135266304 [ 2332.831276] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2332.908700] loop4: detected capacity change from 0 to 135266304 [ 2332.966502] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2332.971510] EXT4-fs (loop4): get root inode failed [ 2332.972707] EXT4-fs (loop4): mount failed [ 2332.995965] loop4: detected capacity change from 0 to 135266304 [ 2333.006985] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2333.010672] EXT4-fs (loop4): get root inode failed [ 2333.011913] EXT4-fs (loop4): mount failed [ 2345.581902] FAULT_INJECTION: forcing a failure. [ 2345.581902] name failslab, interval 1, probability 0, space 0, times 0 [ 2345.583488] CPU: 1 PID: 14147 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 2345.584418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2345.585529] Call Trace: [ 2345.585897] dump_stack+0x107/0x167 [ 2345.586387] should_fail.cold+0x5/0xa [ 2345.586903] ? vm_area_alloc+0x1c/0x110 [ 2345.587437] should_failslab+0x5/0x20 [ 2345.587943] kmem_cache_alloc+0x5b/0x310 [ 2345.588491] vm_area_alloc+0x1c/0x110 [ 2345.589004] mmap_region+0x97e/0x1500 [ 2345.589532] do_mmap+0xcdb/0x11e0 [ 2345.590007] vm_mmap_pgoff+0x198/0x1f0 [ 2345.590533] ? randomize_page+0xb0/0xb0 [ 2345.591072] ksys_mmap_pgoff+0x41c/0x560 [ 2345.591613] ? find_mergeable_anon_vma+0x250/0x250 [ 2345.592291] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2345.592998] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2345.593695] do_syscall_64+0x33/0x40 [ 2345.594190] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2345.594890] RIP: 0033:0x7f8a775a1b19 [ 2345.595384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2345.597865] RSP: 002b:00007f8a74b17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2345.598883] RAX: ffffffffffffffda RBX: 00007f8a776b4f60 RCX: 00007f8a775a1b19 [ 2345.599837] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2345.600789] RBP: 00007f8a74b171d0 R08: 0000000000000003 R09: 0000000000000000 [ 2345.601750] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2345.602697] R13: 00007ffd18e60b1f R14: 00007f8a74b17300 R15: 0000000000022000 01:32:33 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffff030000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:32:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff00000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:32:33 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x8}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:32:33 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6) 01:32:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x9, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup2(r2, r2) r3 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) fcntl$setstatus(r3, 0x4, 0x2000) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f00000000c0)={0x7, "08731196c1440d319939c19814a90d22a150fe9a263d0472180cbba263a8d2921582c43b83a319cc278f8bb398e1ff03c2c90058f9f53446c8bd047e1593f5fc"}) 01:32:33 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 01:32:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x8cffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:32:33 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 3) [ 2345.642872] loop4: detected capacity change from 0 to 135266304 [ 2345.668556] loop5: detected capacity change from 0 to 135266304 [ 2345.685703] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:32:33 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 4) [ 2345.694213] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated 01:32:33 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffff1f0000000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:32:33 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) [ 2345.739512] EXT4-fs (loop4): get root inode failed [ 2345.740939] EXT4-fs (loop4): mount failed [ 2345.756455] FAULT_INJECTION: forcing a failure. [ 2345.756455] name failslab, interval 1, probability 0, space 0, times 0 [ 2345.759314] CPU: 0 PID: 14172 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 2345.761032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2345.763110] Call Trace: [ 2345.763776] dump_stack+0x107/0x167 [ 2345.764679] should_fail.cold+0x5/0xa [ 2345.765636] ? create_object.isra.0+0x3a/0xa20 [ 2345.766774] should_failslab+0x5/0x20 [ 2345.767718] kmem_cache_alloc+0x5b/0x310 [ 2345.768724] create_object.isra.0+0x3a/0xa20 [ 2345.769814] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2345.771067] kmem_cache_alloc+0x159/0x310 [ 2345.772102] vm_area_alloc+0x1c/0x110 [ 2345.773037] mmap_region+0x97e/0x1500 [ 2345.774001] do_mmap+0xcdb/0x11e0 [ 2345.774870] vm_mmap_pgoff+0x198/0x1f0 [ 2345.775834] ? randomize_page+0xb0/0xb0 [ 2345.776830] ksys_mmap_pgoff+0x41c/0x560 [ 2345.777849] ? find_mergeable_anon_vma+0x250/0x250 [ 2345.779060] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2345.780355] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2345.781637] do_syscall_64+0x33/0x40 [ 2345.782550] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2345.783805] RIP: 0033:0x7f8a775a1b19 [ 2345.784715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2345.789218] RSP: 002b:00007f8a74b17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2345.791087] RAX: ffffffffffffffda RBX: 00007f8a776b4f60 RCX: 00007f8a775a1b19 [ 2345.792834] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2345.794598] RBP: 00007f8a74b171d0 R08: 0000000000000003 R09: 0000000000000000 [ 2345.796336] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2345.798103] R13: 00007ffd18e60b1f R14: 00007f8a74b17300 R15: 0000000000022000 01:32:47 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x9}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:32:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x97ffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:32:47 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 5) 01:32:47 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x7) 01:32:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_enter(r1, 0x4fed, 0x3d8c, 0x0, &(0x7f0000000080)={[0x2]}, 0x8) 01:32:47 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:32:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xeffdffffffffffff, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:32:47 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) [ 2359.975141] loop4: detected capacity change from 0 to 135266304 [ 2359.980743] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2359.982626] EXT4-fs (loop4): get root inode failed [ 2359.983321] EXT4-fs (loop4): mount failed [ 2360.032626] FAULT_INJECTION: forcing a failure. [ 2360.032626] name failslab, interval 1, probability 0, space 0, times 0 [ 2360.035271] CPU: 1 PID: 14201 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 2360.036852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2360.038745] Call Trace: [ 2360.039351] dump_stack+0x107/0x167 [ 2360.040184] should_fail.cold+0x5/0xa [ 2360.041054] ? perf_event_mmap+0x51a/0xd90 [ 2360.042029] should_failslab+0x5/0x20 [ 2360.042511] loop4: detected capacity change from 0 to 135266304 [ 2360.042898] kmem_cache_alloc_trace+0x55/0x320 [ 2360.044765] perf_event_mmap+0x51a/0xd90 [ 2360.045701] ? perf_event_namespaces+0x50/0x50 [ 2360.046772] ? vma_link+0x619/0x820 [ 2360.047611] mmap_region+0x3a2/0x1500 [ 2360.048493] do_mmap+0xcdb/0x11e0 [ 2360.049291] vm_mmap_pgoff+0x198/0x1f0 [ 2360.050195] ? randomize_page+0xb0/0xb0 [ 2360.051113] ksys_mmap_pgoff+0x41c/0x560 [ 2360.052029] ? find_mergeable_anon_vma+0x250/0x250 [ 2360.053141] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2360.054328] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2360.055495] do_syscall_64+0x33/0x40 [ 2360.056333] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2360.057484] RIP: 0033:0x7f8a775a1b19 [ 2360.058326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2360.062477] RSP: 002b:00007f8a74b17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2360.064190] RAX: ffffffffffffffda RBX: 00007f8a776b4f60 RCX: 00007f8a775a1b19 [ 2360.065806] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2360.067405] RBP: 00007f8a74b171d0 R08: 0000000000000003 R09: 0000000000000000 [ 2360.069010] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2360.070626] R13: 00007ffd18e60b1f R14: 00007f8a74b17300 R15: 0000000000022000 01:32:47 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) [ 2360.097808] loop5: detected capacity change from 0 to 135266304 [ 2360.120702] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2360.121125] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2360.124781] EXT4-fs (loop4): get root inode failed [ 2360.125963] EXT4-fs (loop4): mount failed 01:32:47 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffffff600000}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:32:47 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 6) 01:32:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r4, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r8}}, 0x7ff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0xffff) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r7, 0x0, 0x0, 0xe0, 0x2, 0x0, {0x0, r8, r9}}, 0x7fffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r10 = signalfd4(r0, &(0x7f0000000000)={[0x40]}, 0x8, 0x0) openat(r10, &(0x7f0000000080)='./file0\x00', 0x347000, 0x100) [ 2360.159547] loop5: detected capacity change from 0 to 135266304 [ 2360.180939] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:32:48 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x8) 01:32:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0ffff0000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2360.227077] FAULT_INJECTION: forcing a failure. [ 2360.227077] name failslab, interval 1, probability 0, space 0, times 0 [ 2360.229592] CPU: 1 PID: 14227 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 2360.231066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2360.232911] Call Trace: [ 2360.233547] dump_stack+0x107/0x167 [ 2360.234421] should_fail.cold+0x5/0xa [ 2360.235332] ? create_object.isra.0+0x3a/0xa20 [ 2360.236426] should_failslab+0x5/0x20 [ 2360.237330] kmem_cache_alloc+0x5b/0x310 [ 2360.238319] create_object.isra.0+0x3a/0xa20 [ 2360.239359] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2360.240564] kmem_cache_alloc_trace+0x151/0x320 [ 2360.241674] perf_event_mmap+0x51a/0xd90 [ 2360.242666] ? perf_event_namespaces+0x50/0x50 [ 2360.243780] ? vma_link+0x619/0x820 [ 2360.244650] mmap_region+0x3a2/0x1500 [ 2360.245570] do_mmap+0xcdb/0x11e0 [ 2360.246415] vm_mmap_pgoff+0x198/0x1f0 [ 2360.247343] ? randomize_page+0xb0/0xb0 [ 2360.248299] ksys_mmap_pgoff+0x41c/0x560 [ 2360.249250] ? find_mergeable_anon_vma+0x250/0x250 [ 2360.250426] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2360.251662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2360.252890] do_syscall_64+0x33/0x40 [ 2360.253775] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2360.254974] RIP: 0033:0x7f8a775a1b19 [ 2360.255854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2360.260232] RSP: 002b:00007f8a74b17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2360.262049] RAX: ffffffffffffffda RBX: 00007f8a776b4f60 RCX: 00007f8a775a1b19 [ 2360.263719] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2360.265380] RBP: 00007f8a74b171d0 R08: 0000000000000003 R09: 0000000000000000 [ 2360.267061] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2360.268736] R13: 00007ffd18e60b1f R14: 00007f8a74b17300 R15: 0000000000022000 01:32:48 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 01:32:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xc0ed0000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2360.302667] loop5: detected capacity change from 0 to 135266304 [ 2360.305947] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2360.323062] loop5: detected capacity change from 0 to 135266304 [ 2360.327202] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:33:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff00000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:33:05 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 7) 01:33:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xc86fc137, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:33:05 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10) 01:33:05 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:33:05 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0xb}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:33:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) 01:33:05 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) [ 2377.354697] loop5: detected capacity change from 0 to 135266304 [ 2377.362769] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2377.362959] FAULT_INJECTION: forcing a failure. [ 2377.362959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2377.367447] CPU: 0 PID: 14254 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 2377.369163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2377.371221] Call Trace: [ 2377.371878] dump_stack+0x107/0x167 [ 2377.372781] should_fail.cold+0x5/0xa [ 2377.373729] _copy_to_user+0x2e/0x180 [ 2377.374690] simple_read_from_buffer+0xcc/0x160 [ 2377.375846] proc_fail_nth_read+0x198/0x230 [ 2377.376925] ? proc_sessionid_read+0x230/0x230 [ 2377.378057] ? security_file_permission+0xb1/0xe0 [ 2377.379252] ? proc_sessionid_read+0x230/0x230 [ 2377.380372] vfs_read+0x228/0x620 [ 2377.381234] ksys_read+0x12d/0x260 [ 2377.382117] ? vfs_write+0xb10/0xb10 [ 2377.383035] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2377.384326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2377.385585] do_syscall_64+0x33/0x40 [ 2377.386500] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2377.387769] RIP: 0033:0x7f8a7755469c [ 2377.388675] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2377.393158] RSP: 002b:00007f8a74b17170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2377.395023] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 00007f8a7755469c [ 2377.396757] RDX: 000000000000000f RSI: 00007f8a74b171e0 RDI: 0000000000000004 [ 2377.398494] RBP: 00007f8a74b171d0 R08: 0000000000000000 R09: 0000000000000000 [ 2377.400228] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2377.401961] R13: 00007ffd18e60b1f R14: 00007f8a74b17300 R15: 0000000000022000 [ 2377.404136] loop4: detected capacity change from 0 to 135266304 [ 2377.427802] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2377.432301] EXT4-fs (loop4): get root inode failed [ 2377.433580] EXT4-fs (loop4): mount failed 01:33:05 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x13, 0xffffffffffffffff, 0x8000000) 01:33:05 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:33:05 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x60) [ 2377.483090] loop5: detected capacity change from 0 to 135266304 [ 2377.488521] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:33:05 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2377.518243] loop4: detected capacity change from 0 to 135266304 [ 2377.566178] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated 01:33:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xf6ffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2377.569251] EXT4-fs (loop4): get root inode failed [ 2377.570648] EXT4-fs (loop4): mount failed 01:33:05 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x5) 01:33:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xd048}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4, 0x49) 01:33:05 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0xb00, 0x100000e, 0x13, r0, 0x0) 01:33:05 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x300) [ 2377.650438] loop5: detected capacity change from 0 to 135266304 01:33:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfcfdffff00000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2377.669120] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2377.747543] loop4: detected capacity change from 0 to 135266304 [ 2377.820036] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2377.826297] EXT4-fs (loop4): get root inode failed [ 2377.827561] EXT4-fs (loop4): mount failed [ 2377.850020] loop4: detected capacity change from 0 to 135266304 [ 2377.857491] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2377.860632] EXT4-fs (loop4): get root inode failed [ 2377.862002] EXT4-fs (loop4): mount failed 01:33:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdfdffff00000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:33:19 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x5) 01:33:19 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x500) 01:33:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/fscreate\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r3 = fcntl$dupfd(r1, 0xa38a9ca32180b1e5, r2) openat(r3, &(0x7f0000000000)='./file0\x00', 0xa4202, 0x108) 01:33:19 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x20000918) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:33:19 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x100000e, 0x13, r0, 0x0) 01:33:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xf9fdffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:33:19 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x69}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2391.888028] loop4: detected capacity change from 0 to 135266304 01:33:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000c, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r4, r5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, r0, &(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x400, 0x4000}, 0x2) 01:33:19 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x600) [ 2391.915450] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2391.917044] EXT4-fs (loop4): get root inode failed [ 2391.917656] EXT4-fs (loop4): mount failed [ 2391.919177] loop5: detected capacity change from 0 to 135266304 01:33:19 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4003, 0x100000e, 0x13, r0, 0x0) [ 2391.934457] loop4: detected capacity change from 0 to 135266304 [ 2391.956644] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2391.959865] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2391.961541] EXT4-fs (loop4): get root inode failed [ 2391.962122] EXT4-fs (loop4): mount failed 01:33:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffff00000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:33:19 executing program 1: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x5) 01:33:19 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x1f, 0x40, 0x89, 0x2, 0x0, 0x1, 0x48000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x99, 0x2, @perf_config_ext={0xffffffffffff11f9, 0xe45e}, 0x10090, 0x2, 0x80000001, 0x7, 0x9, 0x10000, 0x7e9, 0x0, 0xb0, 0x0, 0xe67}, 0x0, 0x9, r0, 0x1) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:33:19 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x100000e, 0x13, r0, 0x0) 01:33:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfcfdffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:33:19 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x700) 01:33:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$LOOP_SET_STATUS(r2, 0x1267, &(0x7f00000005c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "7a0a49805b3f8a1d1f3c51f4b0a08ee8cb28f6a71b6e747131e3558bbb840da72d4b522d3fb4c54d0509ef815a97cf1f293dce3a7c7cf60f7f8790c885451378", "d050516ce943c90f758a236f4aee0d825424dc6bd419233154e824257ddd96d1"}) open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x80000) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) [ 2392.264879] loop5: detected capacity change from 0 to 135266304 [ 2392.283554] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:33:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfdfdffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:33:32 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000) 01:33:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff00000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:33:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:33:32 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x600}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:33:32 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4005, 0x100000e, 0x13, r0, 0x0) 01:33:32 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 01:33:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = dup3(0xffffffffffffffff, r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x63, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r7, r8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000007, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r10, r6, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7f, 0xfffffffffffffffd, &(0x7f00000025c0)="48aec8626bb3b5baa4ec644e800f0c34bcf3eff7c467b856d12dda1f578b773ce8b08c6b754a1a9a3d8b90981b1472943cadbe28e3e187c6fd39753fe39322a9666e58c372000987ce07dca8a14c1226c5efcfb5b0a45aadc258cce8aaaf525d6e64e677c4f8c017bd275c438f7a28aa99287406f83e3e02251f4eb1990f8800070664f1527787b571a281fe9e3c46474b810dbb8f8fa1dd287b64288dba8baa87c7deae5ef1ee78ccb24df663ffbaf965128d35a1b738bff9dabf0d8186514d28a1e0f061e4c61bc4b99bd72ab969fe4c57418b79196a490962eadbf8721fb338570c25c3188d8fa480", 0x5, 0x0, 0x1, {0x2}}, 0x80000001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x1}, 0x7ff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0xffff) syz_io_uring_submit(0x0, r6, &(0x7f0000002400)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x2000, @fd=r1, 0x6be, &(0x7f0000002380)=[{&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/77, 0x4d}, {&(0x7f0000001180)=""/181, 0xb5}, {&(0x7f0000001240)=""/25, 0x19}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/196, 0xc4}], 0x7, 0xd, 0x1, {0x0, r11}}, 0x7) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x1f, r0, &(0x7f0000000080)=0x9, 0x7, 0x0) syz_io_uring_submit(r9, r6, &(0x7f0000002480)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002540)="239fdec13fb8152b8b9bd72159dcf6b4ca53f00ad81bf159158f121d6dbdfbd4f9fa383472b19370c3a61a7e7324258d4fd89b76bd62a077da29a5713ff321c57a8b499fc29a", 0x46, 0x24004081, 0x1, {0x0, r11}}, 0xf4) [ 2404.745670] loop5: detected capacity change from 0 to 135266304 [ 2404.790291] loop4: detected capacity change from 0 to 135266304 01:33:32 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6000) [ 2404.815503] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2404.821932] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2404.826834] EXT4-fs (loop4): get root inode failed [ 2404.827640] EXT4-fs (loop4): mount failed [ 2404.854456] loop5: detected capacity change from 0 to 135266304 [ 2404.870507] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:33:32 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x400000) 01:33:32 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x482000, 0xca) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_uring_enter(r2, 0x1f5, 0x65b4, 0x3, &(0x7f0000000080)={[0x1000]}, 0x8) 01:33:32 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000340)='\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x41848, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,access=user,dfltgid=', @ANYRESHEX=r3, @ANYBLOB=',access=any,afid=0x0000000000000003,appraise,func=BPRM_CHECK,subj_user=/dev/nvram\x00,rootContext=user_u,subj_user=\x00,dont_measure,smackfsfloor=.@,obj_role=\x00,func=CREDS_CHECK,smackfsroot=,\x00']) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x202500, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x100000000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="30d300000000000001000080000000000300", @ANYRES32=r7, @ANYBLOB="0800050006000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="f66e6c3c", @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf256b00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099001d0000004f0000000a000600ffffffffffff00000a001a0008021100000100000a001a00ffffffffffff00000a001a0008021100000100000a001a0008021100000000000a00060008021100000100000a001a00ffffffffffff00000a0006000802110000000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r9}}, 0xffffffff) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2404.916706] loop4: detected capacity change from 0 to 135266304 01:33:32 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4006, 0x100000e, 0x13, r0, 0x0) 01:33:32 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 2404.940523] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2404.942659] EXT4-fs (loop4): get root inode failed [ 2404.943483] EXT4-fs (loop4): mount failed 01:33:46 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x600000) 01:33:46 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x80000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:33:46 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup2(r0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001480)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) mount$9p_unix(&(0x7f0000001180)='./file0\x00', &(0x7f0000001240)='./file0\x00', &(0x7f0000001280), 0x1144a0, &(0x7f00000015c0)=ANY=[@ANYBLOB="74727560ab50e5f19acc94706f9a363ba9f27dd77af67fffcecc9b898f73697861636c2c61414293ccd480aa361183b90e285c609b48d0b6bfe47ad96669643d3078666666666666666666666666663830312c667363616368652c736d61636bc16f6f743d1287b76b94bf87819a08ae69883c2a2c66736465663de93a8f69e18e253f589e4ceafdfaf93121f4ae499870431738b37ac1d0c887b8d08c97ae9483e8915157b19b09c1ee60ba22ad49dc573b5a257d977be3bd3edf220c22f495f3094797753e02aa4763403853d72e948bed29a7b0d6490d72880000", @ANYRESDEC=r3, @ANYBLOB="2c7365636c6162656c2c00077e7e6484134369"]) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='./file0\x00', &(0x7f0000001340), 0x50002, &(0x7f0000001380)=ANY=[@ANYBLOB="7472616e733d756e69782c63616368653d6c6f6f73652c76657273696f6e3d3970323030302e751e76657273696f6e3d3970323030302e752c63616368653d6c6f6f73652c64666c747569643d", @ANYRES32=r3, @ANYRESDEC=r2, @ANYRES64=r4, @ANYBLOB="2c726f6f74636f6ef46578743d73797361646d5f752c00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r4}}, './file0\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r5, 0x0) 01:33:46 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 01:33:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffff0700, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:33:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfdffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:33:46 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x800000) 01:33:46 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r2 = fcntl$dupfd(r0, 0x0, r1) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) 01:33:46 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4007, 0x100000e, 0x13, r0, 0x0) [ 2418.855203] loop4: detected capacity change from 0 to 135266304 [ 2418.867351] loop5: detected capacity change from 0 to 135266304 [ 2418.885059] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2418.889206] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2418.890560] EXT4-fs (loop4): get root inode failed 01:33:46 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x200000, 0x100000e, 0x13, r0, 0x0) [ 2418.891858] EXT4-fs (loop4): mount failed 01:33:46 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 01:33:46 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80ffff) [ 2418.931804] loop4: detected capacity change from 0 to 135266304 [ 2418.960715] loop5: detected capacity change from 0 to 135266304 [ 2418.965585] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2419.002593] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2419.019890] EXT4-fs (loop4): get root inode failed [ 2419.021201] EXT4-fs (loop4): mount failed 01:34:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) io_cancel(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, r2, &(0x7f0000000340)="973718d000416d0e113ace690a98f1619484e4960056aa777fed63e5d28907e5dc658359736aa2b3be6a054ff61d0d0a1704feb3dcb95ee5a9cff583a4c2fe2b47dfbb4b82095e76228691e017e710f5527b9185295cf3d3a3e16d4d705f339c596fb9ddcd0bbc9eb440a4102813cb2df3f63c3d37f8ed50d3a4270ad215d9176a280cd1e1d5", 0x86, 0x7, 0x0, 0x3, r3}, &(0x7f0000000280)) io_cancel(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x3f, r0, &(0x7f0000000080)="1ba0131066e1d22595911e5ba7aa6a77754f7698de79893ea10404ed67a0ed3015409f8fbb31a2f5bc23bcfc61272ed8c9c6092aa102c13545362d57314d7d312f9cfc265c36dc9e979fa6b738fd41fe1d27091da76ad09e816dd8e6b2279d92afb51fd880c8b73ecb77c5df213a77d3aa3482fbc9d1151e5d747fbac05fd867012c63b252c901bf", 0x88, 0x74e8b5d5, 0x0, 0x1, r0}, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x20010, r0, 0x0) 01:34:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffdef, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:34:03 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x1000000) [ 2435.484764] loop4: detected capacity change from 0 to 135266304 01:34:03 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x100000e, 0x13, r0, 0x0) 01:34:03 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x2}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:34:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfeffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:34:03 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:34:03 executing program 1: syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 01:34:03 executing program 1: syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 2435.545316] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2435.548178] loop5: detected capacity change from 0 to 135266304 [ 2435.562527] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2435.563481] EXT4-fs (loop4): get root inode failed [ 2435.565300] EXT4-fs (loop4): mount failed 01:34:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) io_uring_enter(r1, 0x235e, 0x9f8b, 0x2, &(0x7f0000000000)={[0x11]}, 0x8) [ 2435.595681] loop5: detected capacity change from 0 to 135266304 [ 2435.614854] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2435.633130] loop4: detected capacity change from 0 to 135266304 01:34:03 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x2000000) 01:34:03 executing program 1: syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 01:34:03 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x7ffffffff000, 0x100000e, 0x13, r0, 0x0) [ 2435.668477] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2435.671215] EXT4-fs (loop4): get root inode failed [ 2435.672111] EXT4-fs (loop4): mount failed 01:34:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:34:03 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x80000000, @private2, 0x6}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044880}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x1cbfc985}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4002, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r0, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x65a000, 0x1b3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r0, 0x0, 0x0, 0x200}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0xffffe712, @mcast2, 0xffff}, 0x1c) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x1000}, 0x9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="0100007ddd6500000000c75a", @ANYRES32, @ANYBLOB="07000000000000003000000000000001000000fe556c695cc25860b9e6c3b27677bef87c008a1b9ad2a4e449824e722e98557e2b1d848ae8dcc16b8d9b147ed0cb79a9457d441b33e940c060d2bead21a242cc424904842e1add19de0eccefd589b932d76208f1e80110588e4f2c9c9b7236d2e89164475eff93a6af0004728c42c27f9134c7bb60418f4b4b0f178a5f542359e0bdb2f9b6058d2d69"]) accept4(0xffffffffffffffff, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80, 0x80000) sendfile(r2, r1, 0x0, 0x80464c453f) 01:34:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xff0f0000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:34:03 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:34:03 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) 01:34:03 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe4a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:34:03 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0) 01:34:03 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x3}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:34:03 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x3000000) [ 2435.897679] loop4: detected capacity change from 0 to 135266304 [ 2435.921075] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2435.922803] EXT4-fs (loop4): get root inode failed [ 2435.923625] EXT4-fs (loop4): mount failed 01:34:03 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xac, 0x3, 0x80, 0xff, 0x0, 0x80000000, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x40004, 0x9, 0x6, 0x2, 0x9, 0x8, 0x6, 0x0, 0x5, 0x0, 0x9e}, 0x0, 0x1, r0, 0x2) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1f}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2435.944308] loop4: detected capacity change from 0 to 135266304 [ 2435.975779] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2435.977473] EXT4-fs (loop4): get root inode failed [ 2435.978030] EXT4-fs (loop4): mount failed 01:34:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2436.092877] loop4: detected capacity change from 0 to 16776704 [ 2436.103008] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2436.104393] EXT4-fs (loop4): group descriptors corrupted! 01:34:17 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x4}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:34:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfffbffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:34:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:34:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_setup(0x5c93, &(0x7f0000000100)={0x0, 0x20c5, 0x10, 0x0, 0x3e0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x7, 0x6, 0x0, 0x80, 0x2, 0x1}, 0x6) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) 01:34:17 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000000) 01:34:17 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:34:17 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x2) 01:34:17 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) 01:34:17 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x5000000) [ 2449.623605] loop5: detected capacity change from 0 to 135266304 [ 2449.632825] loop4: detected capacity change from 0 to 16776704 [ 2449.638818] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:34:17 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x3) [ 2449.661670] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2449.664070] EXT4-fs (loop4): get root inode failed [ 2449.664741] EXT4-fs (loop4): mount failed [ 2449.669936] loop5: detected capacity change from 0 to 135266304 [ 2449.675325] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2449.687476] loop4: detected capacity change from 0 to 16776704 01:34:17 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/170, 0xaa}, {&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f0000000100)=""/82, 0x52}, {&(0x7f0000000180)=""/18, 0x12}], 0x4, 0xffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:34:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfffffbff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2449.719684] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated 01:34:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0x0) [ 2449.723982] EXT4-fs (loop4): get root inode failed [ 2449.724675] EXT4-fs (loop4): mount failed [ 2449.813907] loop5: detected capacity change from 0 to 135266304 [ 2449.819269] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2449.831612] loop5: detected capacity change from 0 to 135266304 [ 2449.835598] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:34:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfffffdf9, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:34:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r4, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf64(r6, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x0, 0x7f, 0x1, 0x2, 0x2, 0x3, 0x1, 0x3d5, 0x40, 0x28d, 0x1f, 0x3ff, 0x38, 0x1, 0x5, 0x0, 0xfc00}, [{0x4, 0x80, 0xff, 0x9, 0x200, 0x7fffffff, 0x3, 0x7fffffff}], "9c11b54455f4081453a07e143d28fea86ff419112c1669ead7476fc98bb966d84e8d3dfa6b279dbd40126cf11676d8842103cbff1033630b7d7d7188c65ac83f5791d4684e2b61a4c10ee94aa3420d9ba1810aaa1455419de030091cd3392db4fceaac605acfda7bbec8060c6666e460756656edbb4a0f26f8572a1df6a121825735eca7056751696e4dc61e9e2844f12020de5214e17cadfcd0919f0c5d287b1456eeff8e04ec907601e90c3d1d97c5c25fa5578ff536", ['\x00', '\x00', '\x00']}, 0x42f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, &(0x7f0000000080)}, 0x80000001) syz_io_uring_submit(r7, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x5}, 0x3ff) 01:34:30 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) 01:34:30 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4) 01:34:30 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5bb, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$LOOP_SET_STATUS(r2, 0x1267, &(0x7f00000005c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "7a0a49805b3f8a1d1f3c51f4b0a08ee8cb28f6a71b6e747131e3558bbb840da72d4b522d3fb4c54d0509ef815a97cf1f293dce3a7c7cf60f7f8790c885451378", "d050516ce943c90f758a236f4aee0d825424dc6bd419233154e824257ddd96d1"}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x2, 0x20, 0x6, 0x0, 0x7917cd25, 0x40, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x3ff, 0x96b9c59}, 0x1208, 0xff, 0x2, 0x5, 0x20, 0x100, 0x5, 0x0, 0x1, 0x0, 0x1}, r0, 0xffffffffffffffff, r2, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:34:30 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6000000) 01:34:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:34:30 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x5}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2462.943910] loop5: detected capacity change from 0 to 135266304 [ 2462.947975] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2462.961783] loop5: detected capacity change from 0 to 135266304 [ 2462.965362] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2462.987965] loop4: detected capacity change from 0 to 16776704 01:34:30 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x5) 01:34:30 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) 01:34:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfffffdfc, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2463.041448] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated 01:34:30 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2463.062584] EXT4-fs (loop4): get root inode failed [ 2463.063823] EXT4-fs (loop4): mount failed 01:34:30 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x7000000) 01:34:30 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x6}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2463.132178] loop5: detected capacity change from 0 to 135266304 [ 2463.152729] loop4: detected capacity change from 0 to 16776704 [ 2463.162112] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:34:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000080)="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", 0x1000, 0xffff) dup2(r1, r1) openat(r1, &(0x7f0000000000)='./file0\x00', 0x301000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:34:31 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6) 01:34:31 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) [ 2463.225678] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2463.228526] EXT4-fs (loop4): get root inode failed [ 2463.229205] EXT4-fs (loop4): mount failed 01:34:31 executing program 2: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="b031c2ee80372b541ac224f3034f95e8899e12e36092a9735f6c6c08960ce35694196ebdf77e415259090d74e9bc7b6ae4f2278d1c4666154d0ddd689e075ec3c4d2edf57dc1aabd812b53cd8cbb2fc55d09520b9cb7c450a5ce2427af85e060f35a11c99167404b8fe93ef2b95a4f17762dc3f308268e14e1639a6cfea5de2e844d22272d5980569f7da18b6ffff446b52ba1a15045f15decfad0378b3fd75ea3168675cf55d64b0421e41484a287431b0b4fc25c475a520cccd6ba4b62850b8d", 0xc1}, {&(0x7f0000000100)="4931dc186a8917fe086d21f18e9b4ababc8199718e612dbbbdd940e0e123f6a3a25c79e683ec0718222114f2ab4bc49f1eb3be3574d2fb08c7a8bc94fae51c6e8343772c08a754de56e392010aaf46f7214b2f3b2ffefe49ba5a13415779f71b3f91d9ccbdea9650c37bba0f289e0ce075edbe7c7a4f3c2170612e6cc360afd3723046084945ad23b140bb16f201a70111d6c60cf9c1c20f0dd4504f2d62520d0a04a65f3543f86c3db3984253004f1ba735ec08753d7a49d0a98c5276db56280f89ef94405c75340c6ee2a16137b435b7eb7d", 0xd3}, {&(0x7f0000000200)="690608605ed1947f6a40e473a72345b54690a976934b02d4", 0x18}, {&(0x7f0000000240)="90cc44bf439d89026798c3c62bcbcc0d9a674d2ebc0d8d889c52ac076f8e44b393adf2d321f1a15af2e912859f1ca7cc775bedbdaa5c70119ca690f9b594c16b89dd71b1241d28112cac17481099a08a2c6d855fbcbb18274689283504c68e0808160f4ee345ab6797ab13f4ea3944ae2daf99abae3cfea01ab60a0d429f28dbdd445d83bc9869b8bd0727f11dd2eda774adeedbc260851be146cf20d6908e62c6d5f6de7c01d8a987026c48b4ef27383d2ae1ce1db4c55fa3bdd9ee4046b2a0b37705cca14c", 0xc6}, {&(0x7f0000000700)="0a2d5cc1bd469ae887451283b264064c1470449d68726e769f3ca11ec5133c6b31", 0x21}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000380)="24084b923db1271fb69a33614ffa096dd452ecb2e8cd2c68e5751426567b1667f7834692b3b6ba587d7001ec2aa124306fa3f3b70e91cce8358bd040fe062978e2a54ea453b6c4c48383fd9c748d7fc5561a4084307c4f8f56594845eeb23ca74d1d4bb9c9124f190884b389f5a1820a1d8459fd539b85940e7f0457a6e2c77bc75ecb5e2bc38f1cac4fc85a7cebaf1d1a26baad4a9668c10af0b8d5d2247b27f513f2cee01136a332d1710e4af61068f21496a3afd84277ca92e01241c056b73ec980f104ce6c13bba9e1ef05768498748c33c6df1db554c9ffb5cc79d21a3b417127a6200f4e75d7db55", 0xeb}, {&(0x7f0000000500)="c7be4c9175df00b5359c419ebb77ca4a90e3a7ce3c37796e5af8782fe71bf5c18b4662030280c2dc2f79f11e054c8ea891fe9196c1f72cc2d25ce45cb90ac1c274092bf10bb90054d16cd67c651831ef3f2ec4c4861d21e557", 0x59}, {&(0x7f0000000580)="47bae269c22db3191c2687e0eed30275e22ea0226154dcb3c833378725b0b35278e8f7707bb9c1b5e64565b8a59bd9c0c601", 0x32}, {&(0x7f00000005c0)="f774c46f6fc73f6d13bc6c74aa7887671197d34aa94c0fba3ed258640d89b47231602bef6540888c0333e7486202f7ebcbea58", 0x33}], 0xa, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000006c0), 0x1}, 0x2200, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000800)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = dup3(r0, r2, 0x80000) sendmmsg(r3, &(0x7f00000035c0)=[{{&(0x7f0000001cc0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0x80, &(0x7f0000002100)=[{&(0x7f0000000880)="889d90fbe3e604010ce2740d2b2a147d8ad166fca1ca65626057f397189037bc0018c8e7aab61ced8ee491cc5eab045dd9", 0x31}, {&(0x7f0000001d40)="2b0ab387e3c7172fac10568e267f01a2728a71824e3e952e80c02bdde82c3bae694f53", 0x23}, {&(0x7f0000001d80)="b75da92c22de59c3abf100164b820da7d5b5fb9e9aafe6aa13e139aa738b97d7d74dd867e3498b305c04b10e2de4ae7ef2520b89d628408b320420e1c4d54c96126692aea4c8327f03346837697698daf92019a2e242b2e35d0942546549dd3032dc238b8ba993b7eefd53f7378fac3abac371f5a057b5626cad4173acc72dd47747fdab2d096f05a0525ba85c7f7d69ab7be667a34068e0477dad734648a024781ae892e6e719776f6608482e77a192c846d0ad4b9561c8352d7b3e1a0ce95a79219f", 0xc3}, {&(0x7f0000001e80)="1bc50f6a2b7c82af0cc1e7816d17ac72cf5486d28879b9c240e1dbbe18d4f2e487a043dcdcd71bd8571e8b774c5d7777a75db4ff35f309c93a821023eadd36b453a7bf2ddb57f34de084ec774f6341beb237420f40dcc904796da17b9a86690ffcd21b113c5d6633ec8bc287f9d0eea2d9cde7473d307d64ebd76fb5c58eefb1e3eaacfe6be07336a90d69794564e836a1", 0x91}, {&(0x7f0000001f40)="7c2980584425c398910d80c325732fc42bc7f2c9a0642b07c3691a671e626951d160f7b6de90106d68708b9b5412b9e7c0155b53cf6d9fac1c61cfd49a68668e22d621255691a7a06d8487fffbd6bb2065f5bc4ed7debb5733e0839e8c60e5eeff38e494f3a134c8", 0x68}, {&(0x7f0000001fc0)="3339c269f8b960dbd6a1d4dbf617948cfef984eba6b6798187265d0b9d1f270a25a5d6297850aeee02cab77cf475c1b893a79f223bb492b6dff93b3e168fb08eff14385997e539f415acae8f3b4dfe5ac086baa361f841ba54", 0x59}, {&(0x7f0000002040)="0408872041d77b1fedc65dca57e90b3900279ee4434c2cf5461befe5", 0x1c}, {&(0x7f0000002080)="ba6e98", 0x3}, {&(0x7f00000020c0)="21da6f59d1afb2cca28106f075f06bd7dd1f9815", 0x14}], 0x9, &(0x7f00000021c0)=[{0x50, 0x10d, 0x80000000, "827fc8ac8d0019dbbf372cbc676e3854686e9f528aa078b1036ea7b3a6987a671b60ff44a634d1e21cf63f99cc278716d9c984eba7eae2d3325bc1"}, {0xd0, 0x10f, 0x8, "004fb1c1434fc739e258e0fd74ca3e997e09bbdee2be8a17557b5e38e636c890cead64a6beaee30e96a56faa6c662808aa191cd8a1449dfb0399d6474f12f9fef0d1d9f105c3687205ec54d6ec97f78f2743d265865ba8d20a17062b84e2095771c1810fc4da46f0c84a65d5d60046dd6f25d02f96e58f75869624cede7bf0c7158c56891cb4f9f0965e4da7667f1f0a38c4c952d519836be38f08d21e37c83d68867a07cc0fc70672d6d9a44cdb78ec4fb2a4f0cdaca5bf7f"}, {0xf0, 0x84, 0x7, "bb76e726f57a3d5c7c5f48cc26faa2957646a03bb939894991c5d5d23f1563ffabd45d498c7380c1a44bde64307ea386a8aae6f07cb6d48582ba3cbb95b4535c189743f8ca4cd60619f845e592dfc4e743cec313ecad121c0cc56794dffeaa117e48fd26a87abfcd3099deeca621df1bcc1649493821508d30c0c7baf8764ac63939711837636928f91e70384f8f977246768dc26349c10cb9cca8e5ce6de29a064509fa3532ef0606636876fdf9a58a8f9b1e0e7fb332431f35b2d7e8b24b1be7c322e488fa713cdb485f021624202a76b127d99ec6bfd79d"}], 0x210}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000002400)="b83e138dad2b0b06cbbc64d516c178a79d0ab85b0fdc3ecc6ebfde41f1249bdfeef2ef286d2c7922fe45b52795b23f64ebe1429629fd70992a23da299fb63134a2bd152ae387e52fcf6581ab1fcd42cfd197fc32726b66e3d99353feab06b18494fc9916bece9b4fead3414400b5f620670380da86f318875885e1a5d2e5acba831e6f8b2b8124027a8aab18f13558afad8026fca3bf22e1da2d30de85217704fb110cb01571bf382956b5ab6ea4db4a7c21fa6373", 0xb5}, {&(0x7f00000024c0)="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", 0x1000}], 0x2, &(0x7f0000003500)=[{0x60, 0x117, 0xbc8, "8e5f35a6e31bbd13c05219217d5b7e8e9c49cc54c60817c479d636e2c9e2803e5dd7b573cf57bf80189ee2ccbfc7c0b25655b0ad84ce39816c6d0b3e5bda43ccafe78144c03e3f533434ce9c5c168828"}, {0x58, 0x0, 0xfff, "74c7c51d931bc8b3093e0fe8eef5f16411e3d34feead1232695e6e2037ae4dfcb200ac85e725bb1128c2b5248b3f24095549f5fde74a84ccd3bc2ba487b633766825097dd5"}], 0xb8}}], 0x2, 0x20000001) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_io_uring_setup(0x2bd0, &(0x7f0000000740)={0x0, 0xd1fd, 0x8, 0x0, 0x2fc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000840), &(0x7f00000007c0)) preadv(r0, &(0x7f0000001c40)=[{&(0x7f0000001940)=""/109, 0x6d}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000019c0)=""/124, 0x7c}, {&(0x7f0000000880)}, {&(0x7f0000001a40)=""/171, 0xab}, {&(0x7f0000001b00)=""/97, 0x61}, {&(0x7f0000001b80)=""/140, 0x8c}], 0x7, 0xdee0, 0x1) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000003640), 0x10000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x8000000) 01:34:43 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x7}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:34:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfffffdfd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:34:43 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x7) 01:34:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xf, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:34:43 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:34:43 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x8000000) 01:34:43 executing program 3: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000080)=[0x1, 0x4], &(0x7f00000000c0)=[0x0, 0x0], 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r6}}, 0x0) 01:34:43 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) 01:34:43 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10000000) [ 2475.968959] loop4: detected capacity change from 0 to 16776704 [ 2475.987006] loop5: detected capacity change from 0 to 135266304 01:34:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x198) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2b, 0x1, 0x1f, 0xff, 0x0, 0x3a, 0x9006, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3, @perf_bp={&(0x7f0000000000), 0x9}, 0x2820, 0x4, 0x977, 0x2, 0x0, 0x6, 0x1, 0x0, 0x728f, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r0, 0x1) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) sendfile(r1, r2, &(0x7f0000000100)=0x9, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000005, 0x13, r0, 0x0) [ 2475.995804] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2476.002716] EXT4-fs (loop4): get root inode failed [ 2476.003547] EXT4-fs (loop4): mount failed [ 2476.020281] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:34:43 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x8) [ 2476.053074] loop4: detected capacity change from 0 to 16776704 [ 2476.084059] loop5: detected capacity change from 0 to 135266304 [ 2476.088615] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2476.106202] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2476.108910] EXT4-fs (loop4): get root inode failed [ 2476.109933] EXT4-fs (loop4): mount failed 01:34:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xffffff7f, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:34:44 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x3b06, 0x2937, 0x1, &(0x7f0000000280)={[0x49543224]}, 0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cachetag=7,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',dfltuid=', @ANYRESHEX=r5, @ANYBLOB=',aname=,euid>', @ANYRESDEC=0xee01, @ANYBLOB=',dont_appraise,euid>', @ANYRESDEC, @ANYBLOB=',context=root,uid=', @ANYRESDEC=0xee00, @ANYBLOB=', ']) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:34:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="0400000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2476.245319] loop5: detected capacity change from 0 to 135266304 [ 2476.265204] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:34:57 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x40000000) 01:34:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xffffff8c, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:34:57 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x8}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:34:57 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:34:57 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 1) 01:34:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24a380, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:34:57 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10) 01:34:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="0500000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2489.700222] FAULT_INJECTION: forcing a failure. [ 2489.700222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2489.703147] CPU: 0 PID: 14764 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2489.704777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2489.706729] Call Trace: [ 2489.707517] dump_stack+0x107/0x167 [ 2489.708563] should_fail.cold+0x5/0xa [ 2489.709667] _copy_from_user+0x2e/0x1b0 [ 2489.710817] io_uring_setup+0x9b/0x2980 [ 2489.711967] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2489.713345] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2489.714777] ? wait_for_completion_io+0x270/0x270 [ 2489.716168] ? rcu_read_lock_any_held+0x75/0xa0 [ 2489.717494] ? vfs_write+0x354/0xb10 [ 2489.718561] ? fput_many+0x2f/0x1a0 [ 2489.719627] ? ksys_write+0x1a9/0x260 [ 2489.720712] ? __ia32_sys_read+0xb0/0xb0 [ 2489.721876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2489.723380] ? syscall_enter_from_user_mode+0x1d/0x50 01:34:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pnp', 0x1e1000, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x200000b, 0x100010, r1, 0x8000000) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000100)="1868ea4a1f7de1ee534493b7c11a2d3c4d9c47cb97f5d43400dbe7d3dd8143bc0ee84bb459f6bc97fb3ad1dabb0e5e3a0184baa923931c6ffcb8b0f50600ba0db868c3cc8abbb39dd6504495a001db572b9fa95e29e509", 0x57}, {&(0x7f0000000180)="08d3bbd6fa2b09084536ab685cc18c94c1baaa5eb18d73d652deedf65bb008de120a63d4f3d778779c9bb1b2fbc56d5081c82a366ae28ce145526a0dc9be5e7ce7b16d91ffed09fef520ab7c92ae797736a80a", 0x53}, {&(0x7f0000000200)="7197b9fffadbc7de0d2a22bb92bed5ef510cc74ca16f6eccd51b2360a64410154854880497de5874a6bafef2e0763fcc2c17b487dc94a3783d12c20d67d45b378d45e09e22863e1ac542c80e830a160758ef8e41ea4291a6d7ba51", 0x5b}, {&(0x7f0000000280)="16c5ddd84fe9256a73e39b690a048a18198f00d5d2a0810013049a5df52f3fdd0b49af9184227cca739d46ea49d760baec94dea9ceb7c31945e10e075c170417a2d411e4a6d519e8b6b1b3641a1e48c117f7", 0x52}], 0x4) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x15, 0x3) [ 2489.724859] do_syscall_64+0x33/0x40 [ 2489.726075] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2489.727568] RIP: 0033:0x7fa936a9db19 [ 2489.728629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2489.733874] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2489.736064] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2489.738084] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2489.740131] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2489.742163] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2489.744210] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:34:57 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x60) 01:34:57 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x53200fff) [ 2489.748853] loop5: detected capacity change from 0 to 135266304 [ 2489.761176] loop4: detected capacity change from 0 to 16776704 [ 2489.772870] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2489.778362] EXT4-fs (loop4): inodes count not valid: 5 vs 32 [ 2489.808205] loop5: detected capacity change from 0 to 135266304 01:34:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:34:57 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x3) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:34:57 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x300) [ 2489.832188] loop4: detected capacity change from 0 to 16776704 [ 2489.837193] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2489.871467] EXT4-fs (loop4): inodes count not valid: 5 vs 32 01:35:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xffffff97, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:35:10 executing program 2: r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:35:10 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 2) [ 2502.447411] FAULT_INJECTION: forcing a failure. [ 2502.447411] name failslab, interval 1, probability 0, space 0, times 0 01:35:10 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x500) [ 2502.449344] CPU: 0 PID: 14801 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2502.450598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2502.451998] Call Trace: [ 2502.452606] dump_stack+0x107/0x167 [ 2502.453608] should_fail.cold+0x5/0xa 01:35:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x88000, &(0x7f0000000100)={'trans=xen,', {[{@debug={'debug', 0x3d, 0x9}}]}}) [ 2502.454658] ? io_uring_setup+0x258/0x2980 [ 2502.455861] should_failslab+0x5/0x20 [ 2502.456896] kmem_cache_alloc_trace+0x55/0x320 [ 2502.458136] io_uring_setup+0x258/0x2980 [ 2502.459237] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2502.460561] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2502.461930] ? wait_for_completion_io+0x270/0x270 [ 2502.461975] loop4: detected capacity change from 0 to 16776704 [ 2502.463276] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2502.465337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2502.466750] do_syscall_64+0x33/0x40 [ 2502.467770] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2502.469152] RIP: 0033:0x7fa936a9db19 [ 2502.470171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2502.475180] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2502.477297] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2502.479239] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2502.481181] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2502.483109] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2502.485051] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:35:10 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x9}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:35:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="0600000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:35:10 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x53203fff) [ 2502.497638] EXT4-fs (loop4): inodes count not valid: 6 vs 32 [ 2502.524727] cgroup: fork rejected by pids controller in /syz2 01:35:10 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 3) [ 2502.533793] loop5: detected capacity change from 0 to 135266304 [ 2502.538256] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:35:10 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) wait4(r0, &(0x7f0000000100), 0x8, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x4, 0x6, 0x3f, 0xf8, 0x0, 0x0, 0x41, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x40902, 0x3f, 0x2ed8b87c, 0x9, 0x0, 0x2, 0x100, 0x0, 0x1c05, 0x0, 0x4}, r0, 0xf, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r1, r2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getpolicy={0x80, 0x15, 0x10, 0x70bd2c, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x4e20, 0x8000, 0xb, 0x0, 0x0, 0x6, 0x0, r3}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}, @encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0x1b}}}, @policy_type={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x5) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2502.551578] loop4: detected capacity change from 0 to 16776704 [ 2502.568575] EXT4-fs (loop4): inodes count not valid: 6 vs 32 [ 2502.576580] loop5: detected capacity change from 0 to 135266304 01:35:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) write$binfmt_elf64(r1, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x1, 0x1f, 0x8, 0x0, 0x2, 0x6, 0x1, 0x2e1, 0x40, 0x13f, 0x9, 0x2, 0x38, 0x2, 0x2, 0x40, 0x7d5}, [{0x5, 0x3, 0x0, 0xffffffffffffffff, 0x8, 0xac, 0x9, 0x5}], "04db0aa0271359295629ad3e00db600c034baf95ac6dbc36aee3859129e1f84a8fbdddaf426a59df125f85c1a81b939c5011c35cf6acccc90ab778aad0614300f641573e7fa859a68da22ceb579ed2f2cf13f85c5444efff1dc1109fe64ffcab377b5f541ef3dcd3b5a2070d83172e3448584f4298b87dca72a514a4e292ca70459e4fbfbf0e71b1edf661cf6632490f2cdec15774071df9fbd3f03b587772b13ee153b38be9bfa8d788e913", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb24) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) [ 2502.589004] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2502.610134] FAULT_INJECTION: forcing a failure. [ 2502.610134] name failslab, interval 1, probability 0, space 0, times 0 [ 2502.612209] CPU: 0 PID: 14831 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2502.613450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2502.614942] Call Trace: [ 2502.615438] dump_stack+0x107/0x167 [ 2502.616077] should_fail.cold+0x5/0xa [ 2502.616746] ? create_object.isra.0+0x3a/0xa20 [ 2502.617546] should_failslab+0x5/0x20 [ 2502.618235] kmem_cache_alloc+0x5b/0x310 [ 2502.618948] create_object.isra.0+0x3a/0xa20 [ 2502.619743] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 01:35:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="3000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:35:10 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x53803fff) 01:35:10 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x600) [ 2502.620659] kmem_cache_alloc_trace+0x151/0x320 [ 2502.621658] io_uring_setup+0x258/0x2980 [ 2502.622377] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2502.623243] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2502.624153] ? wait_for_completion_io+0x270/0x270 [ 2502.625043] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2502.625982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2502.626889] do_syscall_64+0x33/0x40 [ 2502.627568] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2502.628490] RIP: 0033:0x7fa936a9db19 [ 2502.629160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2502.632464] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2502.633785] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2502.635071] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2502.636357] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2502.637633] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2502.638906] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:35:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff6, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2502.708334] loop4: detected capacity change from 0 to 16776704 [ 2502.714818] loop5: detected capacity change from 0 to 135266304 [ 2502.720050] EXT4-fs (loop4): inodes count not valid: 48 vs 32 [ 2502.741071] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2502.767328] loop5: detected capacity change from 0 to 135266304 [ 2502.776126] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:35:23 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff0f2053) 01:35:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x144, 0x20, 0xc21, 0x0, 0x0, {0x82}, [@typed={0x7e, 0x0, 0x0, 0x0, @binary="2def745281a592ac351aac063efde4909b8ad5f8fe7d096821ef91090220f0ff9b149482d58bfee065c98b4f234d40e9463e9c07ba04f1f9839cc4b21e16f63f879a3c07613ce438969197541db8e8f328f03b11095ad8b5d50c7d3b961880058072024455f8d179971d06288a5a9c4469256328aa09fc426f17"}, @typed={0xc, 0x61, 0x0, 0x0, @u64}, @nested={0xa4, 0x7, 0x0, 0x1, [@generic="9bf450ddfd3179ab0bfc48296af0b46876c36fbd74ec41167cbf76a3d6b969a4efa5de1959683d6370e5962d3b394533962834ae7a16d7308eb3faa03792c6a0690e4c76cf2c5138fd670725af48d1c70796f5075f5d57bcdd4abe9b81b359740e0fa56d4426d49711335fec5dacb8898b5c5037b4eb1e1711bc5fb25151e8313b69e357c9c68a0066d57323d28d45aa528368dc2e39f63029995a68892c32fa"]}]}, 0x144}}, 0x0) close_range(r2, r1, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_complete(0x0) ioctl$CDROMSTOP(r3, 0x5307) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f6eef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdafad9501"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r6, 0x0, 0x0) unshare(0x48020200) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:35:23 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xfc, 0x6, 0x2, 0xff, 0x0, 0x3, 0x400, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x40000, 0x7f, 0x673, 0x5, 0xfffffffffffffff7, 0x8214, 0x0, 0x0, 0x9, 0x0, 0xaa9d}, r1, 0xe, r0, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:35:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:35:23 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x700) 01:35:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="200000007f000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:35:23 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xf}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:35:23 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 4) [ 2515.716098] FAULT_INJECTION: forcing a failure. [ 2515.716098] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2515.717665] CPU: 0 PID: 14870 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2515.718509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2515.719523] Call Trace: [ 2515.719852] dump_stack+0x107/0x167 [ 2515.720299] should_fail.cold+0x5/0xa [ 2515.720774] __alloc_pages_nodemask+0x182/0x600 [ 2515.721343] ? lock_release+0x680/0x680 [ 2515.721822] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2515.722569] ? lock_downgrade+0x6d0/0x6d0 [ 2515.723080] alloc_pages_current+0x187/0x280 [ 2515.723620] kmalloc_order+0x35/0x160 [ 2515.724092] kmalloc_order_trace+0x14/0xa0 [ 2515.724605] io_uring_setup+0x33c/0x2980 [ 2515.725092] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2515.725684] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2515.726307] ? wait_for_completion_io+0x270/0x270 [ 2515.726925] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2515.727574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2515.728199] do_syscall_64+0x33/0x40 [ 2515.728663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2515.729293] RIP: 0033:0x7fa936a9db19 [ 2515.729741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2515.731987] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2515.732912] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2515.733774] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2515.734634] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2515.735511] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2515.736371] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2515.739570] loop4: detected capacity change from 0 to 16776704 01:35:23 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000) 01:35:23 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3f2053) [ 2515.770937] loop5: detected capacity change from 0 to 135266304 [ 2515.773590] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2515.775441] EXT4-fs (loop4): get root inode failed [ 2515.776040] EXT4-fs (loop4): mount failed [ 2515.783361] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2515.803950] loop4: detected capacity change from 0 to 16776704 [ 2515.814981] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2515.816794] EXT4-fs (loop4): get root inode failed [ 2515.817599] EXT4-fs (loop4): mount failed [ 2515.824746] loop5: detected capacity change from 0 to 135266304 [ 2515.857813] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:35:23 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3f8053) 01:35:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2002000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:35:23 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 5) 01:35:23 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:35:23 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6000) 01:35:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2515.951607] FAULT_INJECTION: forcing a failure. [ 2515.951607] name failslab, interval 1, probability 0, space 0, times 0 [ 2515.953987] CPU: 1 PID: 15000 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2515.955576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2515.957454] Call Trace: [ 2515.958068] dump_stack+0x107/0x167 [ 2515.958897] should_fail.cold+0x5/0xa [ 2515.959784] ? create_object.isra.0+0x3a/0xa20 [ 2515.960822] should_failslab+0x5/0x20 [ 2515.961688] kmem_cache_alloc+0x5b/0x310 [ 2515.962617] create_object.isra.0+0x3a/0xa20 [ 2515.963618] ? kasan_unpoison_shadow+0x33/0x50 [ 2515.964670] kmalloc_order+0xfe/0x160 [ 2515.965534] kmalloc_order_trace+0x14/0xa0 [ 2515.966494] io_uring_setup+0x33c/0x2980 [ 2515.967428] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2515.968597] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2515.969792] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2515.970702] do_syscall_64+0x33/0x40 [ 2515.971551] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2515.972723] RIP: 0033:0x7fa936a9db19 [ 2515.973575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2515.977715] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2515.979444] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 01:35:23 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xffff8000) [ 2515.981065] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2515.982599] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2515.984234] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2515.985856] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2515.998625] loop5: detected capacity change from 0 to 135266304 01:35:23 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xd9}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2516.039346] loop4: detected capacity change from 0 to 16776704 [ 2516.047771] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:35:23 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x400000) 01:35:23 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 6) [ 2516.096496] EXT4-fs (loop4): inodes count not valid: 544 vs 32 01:35:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) [ 2516.138862] loop4: detected capacity change from 0 to 16776704 [ 2516.160177] EXT4-fs (loop4): inodes count not valid: 544 vs 32 [ 2516.164175] FAULT_INJECTION: forcing a failure. [ 2516.164175] name failslab, interval 1, probability 0, space 0, times 0 [ 2516.165585] CPU: 0 PID: 15028 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2516.166431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2516.167456] Call Trace: [ 2516.167786] dump_stack+0x107/0x167 [ 2516.168233] should_fail.cold+0x5/0xa [ 2516.168701] ? io_uring_setup+0x40b/0x2980 [ 2516.169222] should_failslab+0x5/0x20 [ 2516.169690] kmem_cache_alloc_trace+0x55/0x320 [ 2516.170248] io_uring_setup+0x40b/0x2980 [ 2516.170741] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2516.171330] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2516.171960] ? wait_for_completion_io+0x270/0x270 [ 2516.172562] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2516.173209] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2516.173837] do_syscall_64+0x33/0x40 [ 2516.174297] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2516.174920] RIP: 0033:0x7fa936a9db19 [ 2516.175375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2516.177631] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2516.178562] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2516.179433] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2516.180297] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2516.181164] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2516.182024] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:35:38 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x200, 0x68) openat(r0, &(0x7f0000000040)='./file0\x00', 0x42, 0x102) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x1, 0x0, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:35:38 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 7) 01:35:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2003000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:35:38 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xf0}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:35:38 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000fb37a33a546e5737272f9da728f19220ba91a13ed844649f052ea4629242d490b84ce598e4cd0613596bf05d2114ccd350b69c9058a22d14ae21da91bb06beb3b8e4b0ac9d96bc6ac93b1472de2568f074919dd7c76f2e47c26f1cf7ffffffffffff2b4d62d24b6614eed1ef210140ae58fbeb585b3c3d8e5737dfacb7a6c5cf1bbd67a8ac", @ANYRES32=0xffffffffffffffff, @ANYBLOB="03000000000000002e2f66696c653000"]) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x40048b0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x2e, @empty, 0x4e21, 0x1, 'sed\x00', 0x22, 0x0, 0x3}, {@broadcast, 0x4e23, 0x4, 0x40f, 0x0, 0xfff}}, 0x44) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) 01:35:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:35:38 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x800000000) 01:35:38 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x600000) 01:35:38 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x800000) [ 2530.498023] loop4: detected capacity change from 0 to 16776704 01:35:38 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x1000000000) 01:35:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c653000f78a6604e2cdd6c6abee28596e2d07a079aecbc20ef2b6325a2db787de04d367747c7889e2f696b7e90805c53889d6619741396a7e93914c1c2b9a72895345c23b829debbf5320e8fc19a1f1004321c6288d80ec0e3e4c5402bd74b6a21198b7ad59f1dae71b89"]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000003, 0x1010, r1, 0xcd67a000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) sendfile(r2, r0, &(0x7f0000000080)=0x7, 0x6) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$LOOP_SET_STATUS(r4, 0x1267, &(0x7f00000005c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "7a0a49805b3f8a1d1f3c51f4b0a08ee8cb28f6a71b6e747131e3558bbb840da72d4b522d3fb4c54d0509ef815a97cf1f293dce3a7c7cf60f7f8790c885451378", "d050516ce943c90f758a236f4aee0d825424dc6bd419233154e824257ddd96d1"}) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x80382, 0x10) execveat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000140)='\xde{!\x00'], &(0x7f0000000200)=[&(0x7f00000001c0)='\x00'], 0x1000) [ 2530.535733] FAULT_INJECTION: forcing a failure. [ 2530.535733] name failslab, interval 1, probability 0, space 0, times 0 [ 2530.538633] CPU: 1 PID: 15051 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2530.540348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2530.542420] Call Trace: [ 2530.543069] dump_stack+0x107/0x167 [ 2530.543968] should_fail.cold+0x5/0xa [ 2530.544897] ? create_object.isra.0+0x3a/0xa20 [ 2530.546017] should_failslab+0x5/0x20 [ 2530.546939] kmem_cache_alloc+0x5b/0x310 [ 2530.547938] create_object.isra.0+0x3a/0xa20 [ 2530.549002] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2530.550220] kmem_cache_alloc_trace+0x151/0x320 [ 2530.551352] io_uring_setup+0x40b/0x2980 [ 2530.552342] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2530.553513] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2530.554730] ? wait_for_completion_io+0x270/0x270 [ 2530.555915] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2530.557180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2530.558426] do_syscall_64+0x33/0x40 [ 2530.559326] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2530.560557] RIP: 0033:0x7fa936a9db19 [ 2530.561443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2530.565857] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2530.567689] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2530.569391] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2530.571107] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2530.572843] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2530.574556] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2530.577775] loop5: detected capacity change from 0 to 135266304 [ 2530.585331] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2530.600443] EXT4-fs (loop4): inodes count not valid: 800 vs 32 01:35:38 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10000000000) [ 2530.638159] loop5: detected capacity change from 0 to 135266304 [ 2530.647048] loop4: detected capacity change from 0 to 16776704 01:35:38 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 8) [ 2530.679459] EXT4-fs (loop4): inodes count not valid: 800 vs 32 [ 2530.681182] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2530.691688] FAULT_INJECTION: forcing a failure. [ 2530.691688] name failslab, interval 1, probability 0, space 0, times 0 [ 2530.693521] CPU: 0 PID: 15083 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2530.694611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2530.695893] Call Trace: [ 2530.696308] dump_stack+0x107/0x167 [ 2530.696871] should_fail.cold+0x5/0xa [ 2530.697476] ? create_object.isra.0+0x3a/0xa20 [ 2530.698202] should_failslab+0x5/0x20 [ 2530.698804] kmem_cache_alloc+0x5b/0x310 [ 2530.699456] create_object.isra.0+0x3a/0xa20 [ 2530.700149] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2530.700952] kmem_cache_alloc_trace+0x151/0x320 [ 2530.701656] io_uring_setup+0x40b/0x2980 [ 2530.702265] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2530.703013] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2530.703777] ? wait_for_completion_io+0x270/0x270 [ 2530.704547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2530.705355] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2530.706151] do_syscall_64+0x33/0x40 [ 2530.706731] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2530.707502] RIP: 0033:0x7fa936a9db19 [ 2530.708100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2530.710879] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2530.712042] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2530.713157] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2530.714286] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2530.714582] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2530.715374] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 01:35:38 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) poll(&(0x7f0000000240)=[{r0, 0x4040}, {0xffffffffffffffff, 0x498}, {r0, 0x10}, {0xffffffffffffffff, 0xa020}, {0xffffffffffffffff, 0x4002}], 0x5, 0x6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) sendfile(r3, r4, 0x0, 0x100000001) r6 = dup2(r2, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000140)=ANY=[@ANYBLOB="4100004ba8da9bdce78bddbe940000009aec3e00000000", @ANYRES32=r6, @ANYBLOB="00000000000000002ed518bccf653100"]) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r7, 0x0) [ 2530.715383] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:35:38 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 9) [ 2530.823251] FAULT_INJECTION: forcing a failure. [ 2530.823251] name failslab, interval 1, probability 0, space 0, times 0 [ 2530.826098] CPU: 1 PID: 15168 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2530.827744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2530.829703] Call Trace: [ 2530.830326] dump_stack+0x107/0x167 [ 2530.831188] should_fail.cold+0x5/0xa [ 2530.832096] ? create_object.isra.0+0x3a/0xa20 [ 2530.833175] should_failslab+0x5/0x20 [ 2530.834071] kmem_cache_alloc+0x5b/0x310 [ 2530.835031] create_object.isra.0+0x3a/0xa20 [ 2530.836082] kmemleak_alloc_percpu+0xa0/0x100 [ 2530.837183] pcpu_alloc+0x4e2/0x1240 [ 2530.838316] ? io_tctx_exit_cb+0xf0/0xf0 [ 2530.839252] percpu_ref_init+0x31/0x3d0 [ 2530.840183] io_uring_setup+0x47a/0x2980 [ 2530.841103] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2530.842198] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2530.843343] ? wait_for_completion_io+0x270/0x270 [ 2530.844761] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2530.846060] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2530.847397] do_syscall_64+0x33/0x40 [ 2530.848508] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2530.849860] RIP: 0033:0x7fa936a9db19 [ 2530.850799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2530.855721] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2530.857786] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2530.859764] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2530.861741] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2530.863759] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2530.865633] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:35:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2004000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:35:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x80000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:35:52 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xffffffffffffb) 01:35:52 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x300}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:35:52 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:35:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x30, r1, 0x8000000) 01:35:52 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 10) 01:35:52 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80ffff) [ 2544.925698] loop5: detected capacity change from 0 to 135266304 [ 2544.932332] FAULT_INJECTION: forcing a failure. [ 2544.932332] name failslab, interval 1, probability 0, space 0, times 0 [ 2544.935503] CPU: 0 PID: 15203 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2544.937422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2544.938643] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2544.939699] Call Trace: [ 2544.939742] dump_stack+0x107/0x167 [ 2544.939769] should_fail.cold+0x5/0xa [ 2544.939801] ? percpu_ref_init+0xd8/0x3d0 [ 2544.945479] should_failslab+0x5/0x20 [ 2544.946527] kmem_cache_alloc_trace+0x55/0x320 [ 2544.947801] ? io_tctx_exit_cb+0xf0/0xf0 [ 2544.948913] percpu_ref_init+0xd8/0x3d0 [ 2544.949899] io_uring_setup+0x47a/0x2980 [ 2544.950901] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2544.952105] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2544.953354] ? wait_for_completion_io+0x270/0x270 [ 2544.954565] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2544.955865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2544.957140] do_syscall_64+0x33/0x40 [ 2544.958060] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2544.959322] RIP: 0033:0x7fa936a9db19 [ 2544.960245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2544.964780] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2544.966655] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2544.968424] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2544.970182] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2544.971953] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2544.973713] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2545.003863] loop4: detected capacity change from 0 to 16776704 [ 2545.025956] loop5: detected capacity change from 0 to 135266304 [ 2545.039033] EXT4-fs (loop4): inodes count not valid: 1056 vs 32 [ 2545.048038] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:35:52 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x40000000000000) [ 2545.094046] loop4: detected capacity change from 0 to 16776704 01:35:52 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x3a3000, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x6}, 0x408c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0) 01:35:52 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x1000000) 01:35:52 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) r1 = clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x105401, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000001006b58188c201d684cb6c860000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c6530023f373ac62e709ee0bf46abf785dba05d6164b42c30"]) mkdirat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x1ff) [ 2545.143737] EXT4-fs (loop4): inodes count not valid: 1056 vs 32 sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000001040)={0x3408, 0x38, 0x20, 0x70bd2c, 0x25dfdbfc, {0x9}, [@typed={0x4, 0x62}, @nested={0x1004, 0x5c, 0x0, 0x1, [@generic="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"]}, @nested={0xc, 0x82, 0x0, 0x1, [@typed={0x8, 0x68, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x100c, 0x8c, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="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"]}, @nested={0xc, 0xc, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@loopback}, @nested={0x129e, 0x87, 0x0, 0x1, [@generic="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", @typed={0x9, 0x6, 0x0, 0x0, @str='syz1\x00'}, @typed={0xc, 0x92, 0x0, 0x0, @u64=0xf35f}, @generic="87107403e4c80881a39691593133bdb109d8d4d63b24beb1f2e23b9858faabaaecb8ec627598d8756880253497df1dae2a04eaae15a69e1de2c7aa01b2ebace05188f949e67aa251e5f8ba39ada8547d3f5442a361dd4f53d538e08a6c5ba4de591a3ef7498a51a4f0b063da84fe7c35e376e6da65b600ed9f8ecb1202b4794cfe9c8509ad129d36423df588b3db4f1888512e7e5622e0670eea4d4b6a7893ae6b256f248110087c", @generic="edc1bef18919c68c258f0ced47affa36d51dd59d1e840df49f9e723de406d95f0f149d7a698f97fd3d8cae0f0875567f1e9bdc5362690a2aba784a180ce70e04cd024f6e2adc7790e4962ec092a3a6519edc2091a567d818a0f0bcf93dcc20588a79c20475310f4cbafae5f27729c109f473cb647d281dbcf025dbcf53a87f25c247b4623b522eace3c7c778f7caf119f123da45ab53730cb3111e88811ba55ad806867d6fd9a4532df139848f01c13de3eb413b7c85ef09ddfe4d517fc216c2743c620ff3333a0ee9c8d953bb0214091b50e6ed2c4d83c5e514aa0b84fb4da13ea2ae96a4f6a0c06d92", @generic="a707d79952d660836e01db7e04d12a74cc786664700e6ce6d2c70df02e08e6e873fe33ee74f3f0baeedd04cdd2eed813490333c8c1324a28d7fbed98f118dc730c5b3a89657259d84fdc00042c8a94fa22de9b431aa69bf28993b371ac", @generic="a84a013c685f4850fcd60405c10f63cbfda528f2f16cc9b35484fc175e1a38a809e81e604d8f7644cb4670fb7e89f4b04f87d13ebea24ce7ddac224e123b42011d0c16d870a4316d475afbe46f4c39b4ffe39f0f29c385617cd03b82fbec1317137673d2ec4b2e04804da737f6f9", @generic="931b6e16a9f2445459c64401bcfe4361fdaf1a6fe80dfcac209d8481a04fbb3b2749a1fb6d"]}, @generic="8cb2c7ee4ca54e54294e8ee82df0eaa7e8340c5e5561408441a654a0d7b0a43d5c5425ffacac02d3bf14edc50010bf567b7facd799d7d8b8edf129d331d4b76984d3db77a21415367d3a7e48c45d059aab8e4e1fb001e4ed65b58be12a7e5a56270cf2a2e5702906bcae540618f9b73481b4eeef439338c3fb5ae8621788fb9411af5613c6347a45c78f8a4dc148239a899bff3e8168f832fdc8f806dbc884fca98e926a06cfa56c1a1204b6f208679a982b48290f22d91827dfcf0de4d73f911230dedd5a51817b2fba69ec3994712c3ef529df386c01ed95f1", @nested={0x36, 0x70, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @pid=r1}, @generic="5903654bfa9819ac55186c7c4019e88a3dec44f91434e394a77e55daa6be678c801edbe06cc30e1f9244"]}]}, 0x3408}, 0x1, 0x0, 0x0, 0x804}, 0x800) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x7, 0x2, 0x1, 0xfa, 0x0, 0x3, 0x22, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8}, 0x0, 0x1, 0x80, 0x7, 0x0, 0x9, 0x7f, 0x0, 0x9, 0x0, 0x4}, r1, 0xc, 0xffffffffffffffff, 0xa) write$binfmt_elf64(r2, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x81, 0xd, 0x7f, 0x9, 0x3, 0x3e, 0x6, 0x2f4, 0x40, 0xb7, 0x8, 0x2, 0x38, 0x1, 0x1, 0x2, 0x1}, [{0x323a72af, 0x0, 0x3, 0x7, 0x5, 0x3, 0x4c0, 0x5}, {0x7, 0x1, 0x1, 0x7f, 0x6, 0x8, 0x100000000, 0x4}], "95182b01220fda97a757d4a9e23baeca741c13dc0ed17cb538c2b4b6ed2aeb1cc6ba93fd38b316716224b5e1f054b97ecbf9d1d7c04e23d165459f32e347571e71f0222a48b3622364390dedcab7d844", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x700) 01:35:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xedc000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:35:53 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 11) [ 2545.197794] loop5: detected capacity change from 0 to 135266304 [ 2545.209223] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:35:53 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x2000000) 01:35:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2005000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:35:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2545.315335] FAULT_INJECTION: forcing a failure. [ 2545.315335] name failslab, interval 1, probability 0, space 0, times 0 [ 2545.318161] CPU: 1 PID: 15234 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2545.319861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2545.321858] Call Trace: [ 2545.322511] dump_stack+0x107/0x167 [ 2545.323390] should_fail.cold+0x5/0xa [ 2545.324332] ? create_object.isra.0+0x3a/0xa20 [ 2545.325589] should_failslab+0x5/0x20 [ 2545.326732] kmem_cache_alloc+0x5b/0x310 [ 2545.327966] create_object.isra.0+0x3a/0xa20 [ 2545.329268] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2545.330750] kmem_cache_alloc_trace+0x151/0x320 [ 2545.332037] ? io_tctx_exit_cb+0xf0/0xf0 [ 2545.333000] percpu_ref_init+0xd8/0x3d0 [ 2545.333960] io_uring_setup+0x47a/0x2980 [ 2545.334940] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2545.336112] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2545.337297] ? wait_for_completion_io+0x270/0x270 [ 2545.338467] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2545.339752] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2545.340982] do_syscall_64+0x33/0x40 [ 2545.341865] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2545.343082] RIP: 0033:0x7fa936a9db19 [ 2545.343982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2545.348309] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2545.350108] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2545.351787] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2545.353457] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2545.355146] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2545.356836] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:35:53 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x60000000000000) 01:35:53 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x500}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2545.378232] loop5: detected capacity change from 0 to 135266304 [ 2545.398730] loop4: detected capacity change from 0 to 16776704 [ 2545.405490] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:35:53 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x3000000) [ 2545.440755] loop5: detected capacity change from 0 to 135266304 [ 2545.454815] EXT4-fs (loop4): inodes count not valid: 1312 vs 32 [ 2545.462982] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:35:53 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80000000000000) [ 2545.513020] loop4: detected capacity change from 0 to 16776704 [ 2545.537478] EXT4-fs (loop4): inodes count not valid: 1312 vs 32 01:36:05 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000000) 01:36:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) connect$netlink(r0, &(0x7f00000000c0), 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) uselib(&(0x7f0000000000)='./file0/file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]}) 01:36:05 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x600}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:36:05 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x20010, r0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:36:05 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 12) 01:36:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2006000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:36:05 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80ffff00000000) [ 2558.167385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15366 comm=syz-executor.3 01:36:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2558.185489] FAULT_INJECTION: forcing a failure. [ 2558.185489] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2558.188038] CPU: 1 PID: 15374 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2558.189493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2558.191234] Call Trace: [ 2558.191791] dump_stack+0x107/0x167 [ 2558.192570] should_fail.cold+0x5/0xa [ 2558.193371] __alloc_pages_nodemask+0x182/0x600 [ 2558.194357] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2558.195622] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2558.196765] ? cap_capable+0x1cd/0x230 [ 2558.197585] alloc_pages_current+0x187/0x280 [ 2558.198516] __get_free_pages+0xc/0xa0 [ 2558.199329] io_uring_setup+0xe27/0x2980 [ 2558.200197] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2558.201253] ? wait_for_completion_io+0x270/0x270 [ 2558.202292] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2558.203388] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2558.204482] do_syscall_64+0x33/0x40 [ 2558.205262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2558.206338] RIP: 0033:0x7fa936a9db19 [ 2558.207117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2558.210980] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2558.212585] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2558.214082] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2558.215573] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2558.217067] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2558.218551] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2558.227289] loop5: detected capacity change from 0 to 135266304 [ 2558.228749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15366 comm=syz-executor.3 [ 2558.245925] loop4: detected capacity change from 0 to 16776704 [ 2558.250675] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2558.268955] loop5: detected capacity change from 0 to 135266304 [ 2558.273653] EXT4-fs (loop4): inodes count not valid: 1568 vs 32 [ 2558.281692] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:36:06 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x5000000) 01:36:06 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x100000000000000) [ 2558.344090] loop4: detected capacity change from 0 to 16776704 01:36:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r2}}, 0x9) [ 2558.364800] EXT4-fs (loop4): inodes count not valid: 1568 vs 32 01:36:24 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 13) 01:36:24 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x700}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:36:24 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6000000) [ 2576.293863] FAULT_INJECTION: forcing a failure. [ 2576.293863] name fail_page_alloc, interval 1, probability 0, space 0, times 0 01:36:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2007000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2576.296948] CPU: 1 PID: 15407 Comm: syz-executor.1 Not tainted 5.10.238 #1 01:36:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x8000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:36:24 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x200000000000000) 01:36:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80002, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) syz_io_uring_complete(r1) 01:36:24 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_io_uring_setup(0x3cf3, &(0x7f0000000000)={0x0, 0x3e96, 0x20, 0x3, 0x1bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = dup(r0) r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x2080, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r4}}, 0x8001) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$unix(r3, &(0x7f0000006680)=[{{&(0x7f0000000240), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/252, 0xfc}], 0x1, &(0x7f0000000400)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000580)=""/146, 0x92}, {&(0x7f0000000440)}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/81, 0x51}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000940)=""/197, 0xc5}], 0x6, &(0x7f0000000a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000000b80)=""/132, 0x84}, {&(0x7f0000000c40)=""/175, 0xaf}, {&(0x7f0000000d00)=""/184, 0xb8}, {&(0x7f0000000dc0)=""/221, 0xdd}, {&(0x7f0000000ec0)=""/59, 0x3b}, {&(0x7f0000000f00)=""/185, 0xb9}, {&(0x7f0000000fc0)=""/182, 0xb6}, {&(0x7f0000001080)=""/206, 0xce}, {&(0x7f0000001180)=""/75, 0x4b}, {&(0x7f0000001200)=""/4096, 0x1000}], 0xa, &(0x7f00000022c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000002380)=@abs, 0x6e, &(0x7f0000002940)=[{&(0x7f0000002400)=""/193, 0xc1}, {&(0x7f0000002500)=""/140, 0x8c}, {&(0x7f00000025c0)=""/250, 0xfa}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/64, 0x40}, {&(0x7f0000002800)=""/85, 0x55}, {&(0x7f0000002880)=""/125, 0x7d}, {&(0x7f0000002900)=""/32, 0x20}], 0x8, &(0x7f00000029c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}, {{&(0x7f0000002a00), 0x6e, &(0x7f0000003c40)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/169, 0xa9}, {&(0x7f0000003b40)=""/198, 0xc6}], 0x3}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000003d00)=""/3, 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000005200)=[{&(0x7f0000003d80)=""/196, 0xc4}, {&(0x7f0000003e80)=""/78, 0x4e}, {&(0x7f0000003f00)=""/80, 0x50}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/174, 0xae}, {&(0x7f0000005100)=""/42, 0x2a}, {&(0x7f0000005140)=""/163, 0xa3}], 0x8, &(0x7f0000005280)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f00000053c0), 0x6e, &(0x7f0000006600)=[{&(0x7f0000005440)=""/134, 0x86}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/77, 0x4d}, {&(0x7f0000006580)=""/4, 0x4}, {&(0x7f00000065c0)=""/54, 0x36}], 0x5}}], 0x8, 0x40000020, &(0x7f0000006880)={0x77359400}) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xff, 0x40, 0xa, 0xd8, 0x0, 0x101, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x820, 0x80000000, 0x7, 0x4, 0x62, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x1f66}, r5, 0x2, 0xffffffffffffffff, 0x4) [ 2576.298898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2576.301123] Call Trace: [ 2576.301799] dump_stack+0x107/0x167 [ 2576.302728] should_fail.cold+0x5/0xa [ 2576.303696] __alloc_pages_nodemask+0x182/0x600 [ 2576.304898] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2576.306444] ? cap_capable+0x1cd/0x230 [ 2576.307443] alloc_pages_current+0x187/0x280 [ 2576.308579] __get_free_pages+0xc/0xa0 [ 2576.309565] io_uring_setup+0xf9a/0x2980 [ 2576.310616] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2576.311906] ? wait_for_completion_io+0x270/0x270 [ 2576.313175] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2576.314508] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2576.315832] do_syscall_64+0x33/0x40 [ 2576.316793] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2576.318106] RIP: 0033:0x7fa936a9db19 [ 2576.319047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.323770] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2576.325711] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2576.327524] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2576.329336] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2576.331153] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2576.332987] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2576.344825] loop4: detected capacity change from 0 to 16776704 01:36:24 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x9, 0x15000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext, 0x8, 0x1000000000000000, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:36:24 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 14) [ 2576.393990] EXT4-fs (loop4): inodes count not valid: 1824 vs 32 [ 2576.404262] loop5: detected capacity change from 0 to 135266304 01:36:24 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0xa3, 0x9, 0xff, 0x0, 0x0, 0x2008, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xff81, 0x4, @perf_config_ext={0x4, 0x8}, 0x10040, 0x6, 0x61, 0x5, 0x400, 0x67b, 0x20f8, 0x0, 0x80000000, 0x0, 0x6}, 0xffffffffffffffff, 0xa, r0, 0x57e389165f6bd56e) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2576.427692] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2576.437989] loop4: detected capacity change from 0 to 16776704 [ 2576.443260] FAULT_INJECTION: forcing a failure. [ 2576.443260] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.446105] CPU: 0 PID: 15442 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2576.447805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2576.449853] Call Trace: [ 2576.450500] dump_stack+0x107/0x167 [ 2576.451408] should_fail.cold+0x5/0xa [ 2576.452358] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2576.453740] should_failslab+0x5/0x20 [ 2576.454678] kmem_cache_alloc_trace+0x55/0x320 [ 2576.455812] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2576.457156] io_uring_setup+0x14f6/0x2980 [ 2576.458189] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2576.459436] ? wait_for_completion_io+0x270/0x270 [ 2576.460662] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2576.461955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2576.463232] do_syscall_64+0x33/0x40 [ 2576.464158] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2576.465424] RIP: 0033:0x7fa936a9db19 [ 2576.466340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.470901] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2576.472785] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2576.474548] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2576.476323] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2576.478088] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2576.479857] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2576.492882] EXT4-fs (loop4): inodes count not valid: 1824 vs 32 01:36:24 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x7000000) 01:36:24 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x300000000000000) [ 2576.507750] loop5: detected capacity change from 0 to 135266304 [ 2576.515225] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:36:24 executing program 3: write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7f, 0x1}, 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x46e2, 0x89) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup2(r1, r1) r3 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) sendfile(r3, r2, &(0x7f0000000100)=0x7, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001c40)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, 0x2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)="f2cec86c9d18c04583ea523abbc0111e4c03c9fe20bf9a8a67df5edccb94638808b9702b4e7576cacc5bffa1865b829a6b7ea5caab63f9ea4d2b69bd9b3fa19caeb6dd8f112d720d53d1cff30ed63102012d536f6b2dce44847f7e87dcc6e949548a257a5674c7f1e41fe66eaad7869fa776e41fa1b5431dac5cb798f239a97c9a2977", 0x83}, {&(0x7f0000000480)="19f949d3831328928361a634a3d72a37aa1c96f9ac1ffa6ab59bce073b07fa7b740f7705fca0c8122d9d8e5164774d9af6c9e6c995acbae01ed812daf2b2ee96b0b32253510227d454287b8a12a259decbafb75ed05a05a0e091d93306d61dd7582cc6cd797195caed8f892feb9181c59cc5d086256431b31e1c43969047e60eeef04d5cf98647aa71f1e322c3d274f4d776915c6005503da222f4e22a73b98ebe48413d1650c9c4fdaaefbc5b84c9454daf7e33498b9bfc4ff8d9be3750966bee288b9057f04c28b910f76bcd7a05504cc2c441a1f2a83dfb4d06cdb9f47cfc2084f7001fc6ea1de0e2", 0xea}, {&(0x7f0000000680)="59a1b64dd25cbd8848fa8c621c77dd5f46ba5d198a00e742d09af7a5bb615d913fec6952e0b0673d9c90ab4bd6ab0c02390353832a5eebf67929c368f3be3c50cfe342f124fc31e9e18e4dede9f03123d560befb08df73dd2990ef9e30539750a73c0adf33d87d692c3e05367f161a79e3cbc6ae079b2996da31a03db64335a4d983295b5017135a4eddb04044131d7392d044ba9de20d831cf52779cc6e01bdeb5620afcf", 0xa5}], 0x3, &(0x7f0000000740)=[{0xf0, 0x10c, 0x3, "19f488b4d484f56e0db9dad440d4901a63da6341f8349ded439f7d90dd4f042b9c3b0f4ef37ec1c248b20dc1e4bbe650cb2c93b2f0c9cf6a71ababdfbfd86a92c696d0ac167c5cb3b95c4750d0ccdab31787886355ddeb5a4da6e99c3b34f3ce18801a2d5b5e0ea37c26ce9b1da70aaab34766b66aa4de0f3c9353723feca36c5e77a5b1805b4b73c1ad4d04ff7b6d66d29707aadc73d33f120dbd7ee4b6a743aa34d643e2a094b915ed945fd451c58ba3dca864970ccf62396b3959cbe6c392560429065c9091bfc266ddb4baf2a31a76e2450148499044e73c0bbd7f3c9e54"}, {0x1010, 0x1, 0x765714e9, "c12cc60da16678b93efc13ff8ba760b4ac8106d4d123188e1cea1acf5e0ae9665ca9abc9abe7852e8a964e9e920eda17f268738fa030bb6ac967dad228ad7c6ed0cac7610c957457b075e065f6a3522ba1f43fbb7aefab77117adb628fcea3914c5f693d272c0d1ccc9a56db502a7b438568725fc8c57aa5a7af57f795a6f7bffd391cc7ff4d76e6f90bf374008cd26e3d7699dbd3f70d5af106c84c8bbf3fb9f1f4b8213be6527303896e0eb41abdf3f86a87568e08caa35df120f5d8c5233e575d917d9093cb2a9a201c326471bf1b0b23a42edc8fa767a7c708f5cd96eb0ad22ce436b49144f8213c0b9912e9b6f3f5f69da04131f7c17254acdafb470e4e20e1461b350540f543714ef43e00ba4df57f28cfed1444a14a2d9b445323f807f0b76139ac4f8c44cc22219ae67884cd312358b264d57e5f602bd305e2c7b2b39a1bc3c4a6b48b09477aa81fe646210e3f158565441918904dd7efadd3f7613e81c2a30e8206e4c13db85d5b3952d16e716653f2f1fbb1028ada5331b091ff0b5ee942d5a1c0f91793ea4fd58873f5fceb99752b16f2cb38a941be0035e547b8be09a22c8dc4c0ddc462b2742c4a97a94cb88a89cd5263ae26bde5b65f84e698a70ff10fbae4e5b5fdaa97099113f9170d70deababebf1dace1747eacd8118cac6be6a0be447338577e35b5b670c828f7631a489e834ec906ce2ea589d1165245ac78ea54a1ea5cb0185626a59dffeb591cb151c5f18a5d4af585ee254135180d9985bd033852114048398d49d1e09bb9947bb8a4009df1d048e89fe4ea06a28e7a8069db4ad1f0fa34767dec2610451089254971aba68ae6a51c876b65edbe23b062226cbbcd3578c60d77a5434ab0dbf889775319a9401ac5788bb6623b92e181c2ffeda762a3b98d979e53f8aa8f174d178e2065c2ac37f6ebd778305e1c6c7b2fb81c18a497bae8aa6b4a48810e9adfec41d1c393cd258a0c44142cfdce408b6f5b2b5db6e2f487d9836e0dac76c00196fb9d5348a8d6455a22daf88d2f6502937ddf822d2eae5c28b4777a0f055405f993e02f2a2248c3f30e61aa6c574832f52e0703aa7f01adaf19e735b055e8ee21d1dae14c102bc217a3a2f7d1d56132248a5af2a4340f5cb8bc253132f5ca37dc63860daedc8dc0c78656b8929dce87e7e701b850200590f289be705945f1f854847cfac6e916350226226d1b024324eae899c5bb0ac20b945077771acd16263d5103b105e1d8427a42a9d4c3c9cc420c243c4bede6123cdf16e34eaf0eb5170cf94d459d58b666cde5badf23e420c38951f979166713d278ea3bea41420db4c173f9ada1a96539d387aab05c692ac500c462300fa798bb6fcfd94133e4e4a5ca9e7ad67def9099bae48c7dfe6265542ee107ace4c1d78b32a2ba0a585bd90c5554ed0c45a7c2ca3c2c12dbf59ae5ee38b2703c3d067873eb35c31b250122c0eb82032d3e9cead009051225af3ad6d7ff1d80293c9bead542a0c4e29942ac6f1cef391a00511573cb659446cdef51b0e88ab80946064ab3767df72ed189f0d8c0866a508166ee34367c5ad4c29ef26ad2b936674776f17c6ba7c42258741ef486a0da1422f5f057e9b991ac8f18569be3408955c2462a01dfc4249a608d6e480ab034ca4dbe3f0accb400f9e12d893570e8441f36879d3ce4ba1bcb14347d461cfb0daff40d0c3069e44029a864f27fe72e3fc6e31a7f72a178dae5712861b43c53ee1b802a7d1137262214d42566b7a5b835dd8a277d38381eed370d05af7ce25f56da492cb8b352bad30826b4c708b4716d81a400906d35766493ea906ad2300a8603f9529084b80f62c0e9659c822c06efba103324b4636702beac6f3c6dd38c70c8c212e135081da942020e554fecfc615638bead3e2842df934c21e54b44d8b9e23b9eca4dc1e828638629ccf606c78a14df93048d5e1da20b3aab7d144cbd9a7277733919201eaf9607b9a6438ed1a38e582242b9041efad4925950330f695e38225006e198367cb7283f05462f0c7884ea434f21848b345a3fd315ddb9fdd30b085ccc9f53072736dd6769583ea6b0b8aac608a080d15b5ae6be9b3fc0eaef35a8bb5cf9c55b5d9eaf4d7a7dd878afdc0192574c382a64c113893c63b0e2fdc336309e3b2de2ee011b3dd938dedbc86d316cff319d9e95244a3479888cbe2f0f3b093a63e4e036b10d05557ba6a23a85bb921df0449150a6a5ce0b571096ed5d99b0dcefa8ffe5012101c36b5eeb29658a999e13e7c227f19deb0abaa4c9f8b70dfb88e96a4b1ed52e32102e0db504e6e8a402b58384f34d64a8fab87819f4c8a1ba730d927043413601836c31ccd6d71e62488bc9e4f138e8b428c322b7fbb3df6da61e1e9865c8b3f40a48bdc772943e6d138d6f9f655e411917d5cc895d09ebc88785addf6006e9324df886e0552a7209d9284727397faaec5be00908cae3beab1df26a228dea733d5a7e704a30b18bc2cd3cbde9e5ce2c1d85752e1d42ed8a30ad2400391445feacbebd4bf502345ad36d72f539be02458883e623dc8bcc7a4dad6915edb84d994ca450b6cc750219aa8bebecbfc5b7e96ec991df94bdbab028a3452666a624cc0c85b10f5674678506e904fe8626f216d08eb5baa5b57282435ce0decaca4eb664f3cf3c124b9cb7ae68ce6fdeeef9658904502883c90e498928bac4e645dcb2f13b16bf67c4150bc67ed674a52eefb0727f66f8a29598ea0f974099633703474df405cf941e24728cabde50fe2bb1eaa94f5f2177b9ae2308aad56587f2eb781e0f1e9d56ae2c9cf055e5a34feaaab266468ab62162cc9dbb12f936e6bd3139513feac1ac971315f154120165072043d36069d7ce72530182a455732aa10dfd2153b471a6923d30d95221bf34835429148a78bb2ef00a911762b08a1c708b69aee0b29ce495268282ee3e3a71489efc247c654b95f21dbd76a441374a5e750563dca21a7f60bf5d1774eb6f8b37b9bdf8703693fd29ba98134206f7ec97422fe0096d918312f6ef7174fa8f73ef14732fed807d5b1186a5f2124daea69fec0ecaf4ab026319749067896d4c158cfbaace484bbdacc56dc5d8a627d659a65ff183ddce422208203278238f02b164d4fe51f8a8cfc85b2c2ffb7616196fc359f3fac74d14266e925225be2e6a68d5579472c68738822f4fe70ffde855e69110ac45d288578cf8813ed636ecee382fa5e5522462a2bd607680bc1f62ba772dbb144e1c2e315a62b0c0250003f4d888f22704f7204ddea08e05c85ef0012f3b7c86771d1159005972046a4fb9e7b39c1b77c59ef9bb57c843c1a0755850c85bbbdc5692fcbf7c477de08ab3523b1d088a929ad90abf5d5ceafffa3b751483d136667cb5cc3b9631748df5963740a5eedcdaa3d63d3a1d5f8d348cea9ae837b178512780944ce25d3b2131edff0d746e795ac85cc43fc02dd9ad43acafd3e24a4908307f47a222044a74beeda4ae0d4bbd2080499863f7948a639f58f249dd001b39e21134bb1b5512ca88b9e5e4f85928e2f85aefd0dd24b82b8ae08304a0459848cf8985fefca72b1655e6628d84d651931baccb3aed25d280c626d040153b66e3e967e406b0e1d2f33c8a6050e629186453ad4da5eaf885b96afa659be7b4010036239476ebfb3d7e5badf24febc9fdd2dd01c332cbdce72d1763769094e4d57cb7a05096527ade3515b286bd57e89f9f4cb07acb31df590084e0268cec2af5abe64f5aa1418a8db4421bfab9a7d80a4ae0e560fb3b90c29bf0b61053b131588bcb566311cf33d20022cb150c20d6bdaccd9cdc3a4f001ab1d58315496bf963ed276a7743908f7ae1122f1c2b0bac084178670344dbdcac6dc6b5d591455f7bad39eddb1b76ee840be899e86638f1834b17628e8fdc920b04dcd6688c74e457e3d7a35d52fa51c51fa4e82c9891abe056911b3722b46a6d03cc8dbccc33e4c7e560e9eeed430d584aa4553981b4fa29b8ec8227ac51ed01ce7942a3c024301d132ba0b164047d5abb779954ce714f4873c6bd5c26963be24d6c4403e8e10c7633b56559402b4d0bcd640441beb04ada37911a431e06c8fb9a54887cfddb12fcedbb7ae1c52de29f7e0098d4ff05de420aa3069d3941df904613422d19e5246e7157f24e6144ada53cdbaa9dc3efdca92e2ab511caea030572757b1bed57ecb3043fca4c4881bce0956527be3241e68c0eb62229d4908b7f651c9743900c320274f744a2a986506aa1f3fe068b80122a1f836717f86b042310e673721027b142aadbbbaf60dd17c33cf2dbe3dcfafe3f2040abe31d70c40f08cc44cc1ee2daa410c5e8cd69370eef1bf1712bba17f115483ef94de681cd60f7a396af1691c0241bda114d330164b78a885f37ac294d13156e1b718e98bca8d59c0aae05040998180d5cbc58cdc1424823dec188bf429f91d070903665fdcdd1f4344456ea272eb39f751103ffd9bc2824b4e95326e387408af910cccdb3ac0a787634ccb316de783e478d79348f4debf4159208d3e3074b731b250a4e3bcacc90523b32b8c54950ce7b5b6435b8482b34fc2873c5f77bffc4ba858e27eacd75759bb49a5d4792625e10d37b6f2e4fc1811740eb78068ce36a583fde4a48ec5b580451c7bce8adf565e688e73c4d0445dc0b7fa2f6d55e1037a7f5fe60f7c998c018154fc66eeb669ab7ef839ceba51127d87fc7caeb1c1c87d92d9945e36ca5d1c7027109839e4f260a14c4d515d959818c0cd808151b4b7e589119c51c799450f0ebbc808130fac8bb6e6be05ddc4dcdc8933fa0f4502923347f60c32ad51ec5e0ab056d8738007bcf6dd343ce4862373dc6095103e01b45b72172e0f1a8357ac8850d933406a2e14c6d154a286f2393dd44a60c0b8aa5359a6e23a516ccba2ff80e73154a16bca0cc6b405749f93ec0d200fb7d82fcda7b1199522d31529ca3b1fa0396b2e5377aa68fa370c758ce1e5a9aca789f524578eb4a154aff746303be21361fe677d4d5b8c9847bef75b7f5f5d831945606c8aa77b162fa31cf89b0f7e8d78fb9e99dda83f077ab518d3eb07e4a6736426d9198b48c801f0c50c1a86b787c09dd6013613a82a3e9a08560a3e8529283339311b64e028fc90826cfccf3ac24995acff7072db97e2188596c6034cdd6bacfa171a6abd8ef3fef66988289e7861a45152601e0adb66fa246c68ff19ab2f672cf6709c9a5ffa0b4b5ebf8d65457d9751fba2c82ea22d7a88c3094a274ae4ab65964ce62caf5d1e2fe0b2e41e258af941387f1e1f33be4f75ee098f180bdc5b4dbe73d3102c14e152bfd630538eb22ac468c5f9c15992be96977518d1510f71e0370208b735d671cc1d14443174dd14717808cf6648e9498db688895c6f5191721faf00ac317b046ac061a31388106edb6c54405dbf71b425d0485e97baedf0ba9ae486012186278c702da751897aec8b4cbb26c3febae5ecde1d8e956e07286b0da6b9108ccfcc5fbdd74f5a00f7b313909083f353edccd4e02cb3ca692f9e77b079efd1c2a65fb1119748584944596264c39863f65dad4f08e60f241a2712661ad0f3f89e399dc48289d9262a44684c1f5712e8e8b058a0e477805be6c7ce4c09e02cdacbf4f513ced21706f052f8ba112203cdeab53ae20bbd3c171834d0fcd46cc7152b666ba0624c133f6fe34fdb547a69b14469f8677532b291e89ff12b78c33810f069ad41ee43fd69aa854fdc0f4bc8da0bd75c64065ae88e913495bfc4d1afb1a199561430b608718dc4f2fc3c2b75"}, {0x50, 0x116, 0x0, "3c831d6dd6809287def00b67fed0261b4331444c81382dfbb46d55d653f8136f10e3da70c817adb12c1d19ffa1f76c6fa5b9693351584bc728df1d35d27446"}, {0x100, 0x116, 0x80000001, "ab414264ce375559b9f74c78bf339d197ceecbae6b337bf00c6064e722b96a8f9d97e4b7fe149c2d781e363841f4cec00e024f5e7e9a6784373ae57833c49cb4b142a47b73cdbc7cbcc3bde4798cd9d21ef5719c4d0fd57cdf91c0e9aba36b345bb478bd86225cf376a37b268ad7086166be6ed710454bf015c9ab4fb556270397f70e80f1ecce41f2da3e6af1704a396a474e56eae528f57878372a063d16ea780e198b76ce3fe3f0e270f00f441ebfce134de912b06f103ca2c892f8d96d87211066f525a7027cdfc6683e291e5309dcb90d420753463afb8157aafa19c8b1874a300d85e819b241b8b2603b68b4a7"}, {0x78, 0x0, 0x9, "cd5db5878a8330bee2e222c373de95ca0bd71dd90dce87662e331f681cdb5ada7d73043060446a0668b739b7eea1b30b1b4ad401d7f9250c9f0c230cbb563e05ed0398ffcc1e1a0ff902710e2bea778a27b24c14f1507e1b7243f22447ac4e7f6a1c958a"}, {0x80, 0x110, 0x3, "e0d5ee6e39b48a7b5976dc8b24a1f250eb15dc19eb0c61e1879103d7232f9c5ed9fd7a03ef99cda75e7dbfdcccfbcdfa1bbdcf347dc042623f5b9a4611fc072cc3632d720d12fa52019143e9874b3b07f81c48db90719131ff3ef79cc4672bd9c1800bc0fa6e0c20180ab05721"}, {0x78, 0x1, 0x2, "5072873e5c1e169f0f140759b40e0073b140197fc6cd49bac864e25208756b1ebc190334e5851cbaca6ec70ae7f40c560b36fc1f221fa5e1e1b4155d92b60de474cd588d4a7751ac695c92087928718636986319d8c81c925f69cab8cc76f11bd7"}, {0xc8, 0x104, 0x100, "2c781d01f18f5550220f4637849b823177bd049d91c180407a477d00a39af72a5033a3a010f616a4fe79a1dfce45bd1128a34428123d2eda9fc1cf6a6e224e1e0ebacc6fe4d7ef81728bb4d398be75aec88c4d7fea02f932aa88778abed9a148c057926157b1f7e855e678e6bd834cd916784756077a4fc90be43eb2aa7442d3b399d2f7f06d1507e2105840a26dd0c1172271a417278aa244efe05d15cb3a2186ca50cc98c0dd2841470c17874b3260f125ebec"}, {0x60, 0x115, 0x1, "932bedd066ed4796f52cf66d375a03c16294771c9cf245c92121c0a81d5486b00917c12dda9a949dbd8ca8ebb43d0392f0230d81c9709fc0e1cfd3181c2bf4352a9991478ea5589d07978b53"}], 0x14e8}, 0x0, 0x20000085}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r5}}, 0x7ff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0xffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x6) ioctl$LOOP_SET_STATUS(r2, 0x1267, &(0x7f00000005c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "7a0a49805b3f8a1d1f3c51f4b0a08ee8cb28f6a71b6e747131e3558bbb840da72d4b522d3fb4c54d0509ef815a97cf1f293dce3a7c7cf60f7f8790c885451378", "d050516ce943c90f758a236f4aee0d825424dc6bd419233154e824257ddd96d1"}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x8) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0xfffffffffffffdcf, 0x11, 0x2, {0x20, 0x3, 0x2}}, 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2010, r2, 0x0) 01:36:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2008000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:36:24 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x400000000000000) 01:36:24 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:36:24 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x900}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:36:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2576.774000] loop5: detected capacity change from 0 to 135266304 [ 2576.802540] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:36:39 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 15) 01:36:39 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xf00}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:36:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x100000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:36:39 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x500000000000000) 01:36:39 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x8000000) 01:36:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 01:36:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="200b000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:36:39 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2591.332736] loop5: detected capacity change from 0 to 135266304 [ 2591.345530] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2591.354720] FAULT_INJECTION: forcing a failure. [ 2591.354720] name failslab, interval 1, probability 0, space 0, times 0 [ 2591.357599] CPU: 0 PID: 15501 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2591.359317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2591.361360] Call Trace: [ 2591.362019] dump_stack+0x107/0x167 [ 2591.362927] should_fail.cold+0x5/0xa [ 2591.363876] ? create_object.isra.0+0x3a/0xa20 [ 2591.365006] should_failslab+0x5/0x20 [ 2591.365952] kmem_cache_alloc+0x5b/0x310 [ 2591.366962] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2591.368462] create_object.isra.0+0x3a/0xa20 [ 2591.369555] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2591.370823] kmem_cache_alloc_trace+0x151/0x320 [ 2591.371893] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2591.373143] io_uring_setup+0x14f6/0x2980 [ 2591.374094] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2591.375247] ? wait_for_completion_io+0x270/0x270 [ 2591.376384] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2591.377579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2591.378757] do_syscall_64+0x33/0x40 [ 2591.379604] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2591.380818] RIP: 0033:0x7fa936a9db19 [ 2591.381667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2591.385886] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2591.387624] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2591.389272] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2591.390901] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2591.392544] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2591.394173] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2591.428275] loop4: detected capacity change from 0 to 16776704 01:36:39 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x600000000000000) [ 2591.454831] loop5: detected capacity change from 0 to 135266304 [ 2591.461194] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2591.469689] EXT4-fs (loop4): inodes count not valid: 2848 vs 32 01:36:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x200000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:36:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)="762b5ec070c2c2b9ddcc9a5c45ec57f134c50a29f637d2e47abdc9917cf59a285359bcacf1858da0f4a0cde305736bfe342ac7878e2de0157b5a88f34539377e6e313e1d71c05ae5cacf22d603569d12eafb1ae4ffb8e1c82c8f273306ee254973cf7ab5be3f73ec77ed7d03442c41d01326c7f3b063d3ddc52a2bc703b1aec2ceee7778f75571ce82ad81ccf413e4345bae90d833d39d125a89486b37", 0x9d, 0x20000050, 0x1, {0x0, r2}}, 0x40000000) [ 2591.518047] loop4: detected capacity change from 0 to 16776704 [ 2591.540947] EXT4-fs (loop4): inodes count not valid: 2848 vs 32 [ 2591.548715] loop5: detected capacity change from 0 to 135266304 01:36:39 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x700000000000000) [ 2591.586640] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:36:39 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10000000) 01:36:39 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xd900}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:36:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x88}}, './file0\x00'}) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd=r2, 0x6, 0x0, 0x0, 0x0, 0x2, {0x1, r7}}, 0x984) 01:36:54 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xf000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:36:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10001, 0x50) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r3 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) poll(&(0x7f0000000080)=[{r2, 0x200}, {r3, 0xc041}, {r0, 0x1409}, {r1, 0x9000}], 0x4, 0x81) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r4) 01:36:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2018000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2606.683282] FAULT_INJECTION: forcing a failure. [ 2606.683282] name failslab, interval 1, probability 0, space 0, times 0 [ 2606.686040] CPU: 1 PID: 15551 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2606.687640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2606.689553] Call Trace: [ 2606.690161] dump_stack+0x107/0x167 [ 2606.691004] should_fail.cold+0x5/0xa [ 2606.691888] ? create_object.isra.0+0x3a/0xa20 [ 2606.692954] should_failslab+0x5/0x20 [ 2606.693830] kmem_cache_alloc+0x5b/0x310 01:36:54 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x40000000) 01:36:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x300000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:36:54 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 16) 01:36:54 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000000000000000) 01:36:54 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r4, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x1, {0x0, r11}}, 0x7) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2606.694771] create_object.isra.0+0x3a/0xa20 [ 2606.696037] kmemleak_alloc_percpu+0xa0/0x100 [ 2606.697095] pcpu_alloc+0x4e2/0x1240 [ 2606.697964] ? io_async_queue_proc+0x80/0x80 [ 2606.698974] percpu_ref_init+0x31/0x3d0 [ 2606.699893] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2606.701147] io_uring_setup+0x14f6/0x2980 [ 2606.702105] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2606.703270] ? wait_for_completion_io+0x270/0x270 [ 2606.704409] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2606.705613] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2606.706802] do_syscall_64+0x33/0x40 [ 2606.707657] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2606.708842] RIP: 0033:0x7fa936a9db19 [ 2606.709696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2606.713939] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2606.715698] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2606.717347] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2606.718986] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2606.720630] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2606.722267] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2606.726756] loop4: detected capacity change from 0 to 16776704 01:36:54 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xfbffffffffff0f00) [ 2606.764368] EXT4-fs (loop4): inodes count not valid: 6176 vs 32 [ 2606.789261] loop4: detected capacity change from 0 to 16776704 [ 2606.794368] loop5: detected capacity change from 0 to 135266304 [ 2606.799486] EXT4-fs (loop4): inodes count not valid: 6176 vs 32 [ 2606.816610] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:36:54 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 17) 01:36:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="201c000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2606.852647] loop5: detected capacity change from 0 to 135266304 01:36:54 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) sendfile(r1, r0, &(0x7f0000000000)=0x7, 0x400) 01:36:54 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x53600fff) [ 2606.878077] loop4: detected capacity change from 0 to 16776704 01:36:54 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff0f205300000000) [ 2606.914363] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2606.921882] EXT4-fs (loop4): inodes count not valid: 7200 vs 32 01:36:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) syz_io_uring_setup(0xf2d, &(0x7f0000000080)={0x0, 0x79c5, 0x10, 0x1, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x50, r2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x9, 0x6, 0x8001, 0x2}) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 01:36:54 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x34000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:36:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x400000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:36:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2069000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2607.085588] FAULT_INJECTION: forcing a failure. [ 2607.085588] name failslab, interval 1, probability 0, space 0, times 0 [ 2607.087068] CPU: 0 PID: 15663 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2607.087956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.089028] Call Trace: [ 2607.089368] dump_stack+0x107/0x167 [ 2607.089835] should_fail.cold+0x5/0xa [ 2607.090316] ? create_object.isra.0+0x3a/0xa20 [ 2607.090903] should_failslab+0x5/0x20 [ 2607.091389] kmem_cache_alloc+0x5b/0x310 [ 2607.091904] create_object.isra.0+0x3a/0xa20 [ 2607.092487] kmemleak_alloc_percpu+0xa0/0x100 [ 2607.093051] pcpu_alloc+0x4e2/0x1240 [ 2607.093532] ? io_async_queue_proc+0x80/0x80 [ 2607.094085] percpu_ref_init+0x31/0x3d0 [ 2607.094591] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2607.095277] io_uring_setup+0x14f6/0x2980 [ 2607.095806] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2607.096461] ? wait_for_completion_io+0x270/0x270 [ 2607.097097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2607.097765] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2607.098415] do_syscall_64+0x33/0x40 [ 2607.098887] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2607.099535] RIP: 0033:0x7fa936a9db19 [ 2607.100002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2607.102335] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2607.103307] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2607.104211] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2607.105139] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2607.106049] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2607.106955] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:36:54 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x53603fff) 01:36:55 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x80000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2607.166350] loop5: detected capacity change from 0 to 135266304 01:36:55 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3f205300000000) 01:36:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)="762b5ec070c2c2b9ddcc9a5c45ec57f134c50a29f637d2e47abdc9917cf59a285359bcacf1858da0f4a0cde305736bfe342ac7878e2de0157b5a88f34539377e6e313e1d71c05ae5cacf22d603569d12eafb1ae4ffb8e1c82c8f273306ee254973cf7ab5be3f73ec77ed7d03442c41d01326c7f3b063d3ddc52a2bc703b1aec2ceee7778f75571ce82ad81ccf413e4345bae90d833d39d125a89486b37", 0x9d, 0x20000050, 0x1, {0x0, r2}}, 0x40000000) [ 2607.195576] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:37:10 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x400300}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:37:10 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4002c}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:37:10 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 18) 01:37:10 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x20010, r0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:37:10 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x54803fff) 01:37:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000030080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:37:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x500000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:37:10 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3f805300000000) [ 2622.291319] FAULT_INJECTION: forcing a failure. [ 2622.291319] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.294197] CPU: 0 PID: 15731 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2622.295902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2622.297949] Call Trace: [ 2622.298603] dump_stack+0x107/0x167 [ 2622.299505] should_fail.cold+0x5/0xa [ 2622.300443] ? percpu_ref_init+0xd8/0x3d0 [ 2622.301477] should_failslab+0x5/0x20 [ 2622.302417] kmem_cache_alloc_trace+0x55/0x320 [ 2622.303540] ? io_async_queue_proc+0x80/0x80 [ 2622.304627] percpu_ref_init+0xd8/0x3d0 [ 2622.305606] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2622.306933] io_uring_setup+0x14f6/0x2980 [ 2622.307956] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2622.309202] ? wait_for_completion_io+0x270/0x270 [ 2622.310406] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2622.311691] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2622.312962] do_syscall_64+0x33/0x40 [ 2622.313872] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2622.315126] RIP: 0033:0x7fa936a9db19 [ 2622.316035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2622.320590] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2622.322462] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2622.324210] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2622.325968] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2622.327715] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2622.329471] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2622.332337] loop5: detected capacity change from 0 to 135266304 01:37:10 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff0f6053) [ 2622.351978] loop4: detected capacity change from 0 to 16776704 [ 2622.359438] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2622.368900] EXT4-fs (loop4): inodes count not valid: 196640 vs 32 [ 2622.389213] loop5: detected capacity change from 0 to 135266304 [ 2622.395819] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2622.417242] loop4: detected capacity change from 0 to 16776704 [ 2622.431577] EXT4-fs (loop4): inodes count not valid: 196640 vs 32 01:37:10 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x100010, r0, 0x0) 01:37:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x600000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:37:10 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 1) 01:37:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2080040080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:37:10 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3f6053) [ 2622.578978] loop5: detected capacity change from 0 to 135266304 [ 2622.592783] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2622.611508] loop4: detected capacity change from 0 to 16776704 [ 2622.633363] FAULT_INJECTION: forcing a failure. [ 2622.633363] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.636156] CPU: 0 PID: 15859 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 2622.637859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2622.639883] Call Trace: [ 2622.640549] dump_stack+0x107/0x167 [ 2622.641445] should_fail.cold+0x5/0xa [ 2622.642379] ? vm_area_dup+0x78/0x290 [ 2622.643324] should_failslab+0x5/0x20 [ 2622.644256] kmem_cache_alloc+0x5b/0x310 [ 2622.645265] vm_area_dup+0x78/0x290 [ 2622.646166] ? mark_lock+0xf5/0x2df0 [ 2622.647086] ? mark_lock+0xf5/0x2df0 [ 2622.648001] ? lock_acquire+0x197/0x470 [ 2622.648979] ? lock_chain_count+0x20/0x20 [ 2622.649997] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 2622.651129] ? lock_downgrade+0x6d0/0x6d0 [ 2622.652142] ? lock_chain_count+0x20/0x20 [ 2622.653176] ? vm_area_alloc+0x110/0x110 [ 2622.654165] ? __lock_acquire+0x1657/0x5b00 [ 2622.655243] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2622.656520] ? vmacache_find+0x55/0x2a0 [ 2622.657503] __split_vma+0xa8/0x4e0 [ 2622.658389] __do_munmap+0xfae/0x1260 [ 2622.659321] ? arch_get_unmapped_area+0x450/0x450 [ 2622.660499] ? lock_release+0x680/0x680 [ 2622.661475] mmap_region+0x7c8/0x1500 [ 2622.662414] do_mmap+0xcdb/0x11e0 [ 2622.663262] vm_mmap_pgoff+0x198/0x1f0 [ 2622.664209] ? randomize_page+0xb0/0xb0 [ 2622.665198] ksys_mmap_pgoff+0x41c/0x560 [ 2622.666182] ? find_mergeable_anon_vma+0x250/0x250 [ 2622.667382] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2622.668674] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2622.669931] do_syscall_64+0x33/0x40 [ 2622.670841] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2622.672092] RIP: 0033:0x7f13019cbb19 [ 2622.673003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2622.677511] RSP: 002b:00007f12fef41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2622.679372] RAX: ffffffffffffffda RBX: 00007f1301adef60 RCX: 00007f13019cbb19 [ 2622.681124] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2622.682875] RBP: 00007f12fef411d0 R08: 0000000000000003 R09: 0000000000000000 [ 2622.684639] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2622.686386] R13: 00007fff405bd44f R14: 00007f12fef41300 R15: 0000000000022000 [ 2622.688958] EXT4-fs (loop4): inodes count not valid: 294944 vs 32 [ 2622.717722] loop4: detected capacity change from 0 to 16776704 [ 2622.742489] EXT4-fs (loop4): inodes count not valid: 294944 vs 32 01:37:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000050080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:37:24 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup2(r0, r0) r1 = fork() ptrace$setopts(0x4206, r1, 0x10001, 0x3d) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x3cc, 0x22, 0x4, 0x70bd2b, 0x25dfdbff, {0x18}, [@typed={0x8, 0x69, 0x0, 0x0, @pid=r1}, @typed={0x4, 0x82}, @generic="64db8f4a246a582518327d2a32ed94750b6695852ff6dd12c4448802024574d4be95402560db2172bbedee9e1ec8932120b8c04583ea64447182d72793c7c90f8e1735824b8206524b9ead01c7c6bc8c9d20df6ce47d31ad6a601d22530b423c270abec010bbf6c0d85dbbed0aea66eeaf4140310d52c9709b2ba8e9c4df64836d513aa7c4111c6a55d8ea5d30eacf0f557ae54d1dd745b68b6dfc22f0f72254f31354b6c2d68a090b", @typed={0x14, 0x6f, 0x0, 0x0, @ipv6=@loopback}, @generic="749a4e002e3554e97ca06a90f8d0583147d0a0f4347eba6eb5ef0b2bf36e90363ec4df4bc1186170917f12ed7bcbf1f71f6b02813729e6e1897a98f00795cca4cc2ba89d3827d9cde0f9824ab823ce78bcfdf27dbed2f65d491eed33f6804f1ae76b34aa1467d774a0845357a9a5132853238c1994573be868e85f69287a77049bf41c43df7fe8b22e7a557083c3c0ac4efe7bad40afe67bcfdf5e748d7c06f03a6eadd96c75ab1ea7be2ecdad9632a4cafaaa590b5889e96c3f8f431fe5a2d57ff218d326688011c906b79455124b56dcf52b96cafe58f56d9e9637e42b64d0721baf03381be78d909fd20a2c255d156f5572bc0d210f", @nested={0x1f8, 0x39, 0x0, 0x1, [@typed={0xb9, 0x24, 0x0, 0x0, @binary="f5216c3faa8ad6b7b7a9ec4e78315be7be2cd28fba834812c44255514e871dfb919e4e2e5562aaaba9da643de60b33127f1da63e3f531cc601beee4d28da95e2d16b4c4fef6b7ac42c1dc0742ba48f006d078c6b7f93fe7ef1a4d63aa0a7531e295fd8c40a030dafb4594c979b03b132dbb7166e0639759405743ac7452a3fe7438dd5ab3ca062e5105aec574e318f2f3aecd782e996cb25111c3e31a03a37838cc0f93022280223e5d30b304d9e9c4091f11e34a6"}, @typed={0x14, 0x90, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @generic="ea72e9a3be3a25e233da40efa4e98383d9659839d83ca059fb53720ed07f748d437f697b98aee318dfd033cdd648e07271d35db3b28f5e88d0105958d19a5120ca550489ef592409e494128a4ec53c96162fc0a45258683f27a26f26cdd387fe9b701e4d84ff9fbc2f1bffbd963c1d468cdd50dc3f633af8e54641cfd2a3e6a563c1e93d6ca8fa81063c14963587d1c638d43b208832fcac138b2aabd2468cba961789ea4fcfc815cadd17adf12dfdccae36d908baacbeeb56c442dd1b467d0f32a1d7e53e9a0dea27cc51d07c475308649480db138af707", @typed={0x4, 0x26}, @generic="abb4a0f646e6a51a7258332903d653880196a9b1887c76116f36108a66b9dc905740eb24edbfc78539716450ffea0c5d02ba9f633266897314d4461244b14c77a312a0db7e16a732"]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 01:37:24 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3f8054) 01:37:24 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 19) 01:37:24 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x31c9, &(0x7f0000000000)={0x0, 0xd4a6, 0x0, 0x0, 0x396, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r3 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x3, 0x8f, {0x0, r3}, 0x7, 0x1, 0x0, {0x0, r4, r0}}, 0x1) 01:37:24 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xf0ffff}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:37:24 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 2) 01:37:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x700000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2636.606160] FAULT_INJECTION: forcing a failure. [ 2636.606160] name failslab, interval 1, probability 0, space 0, times 0 [ 2636.608055] CPU: 0 PID: 15886 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 2636.609110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2636.610389] Call Trace: [ 2636.610793] dump_stack+0x107/0x167 [ 2636.611336] should_fail.cold+0x5/0xa [ 2636.611909] ? create_object.isra.0+0x3a/0xa20 [ 2636.612625] should_failslab+0x5/0x20 [ 2636.613217] kmem_cache_alloc+0x5b/0x310 [ 2636.613829] create_object.isra.0+0x3a/0xa20 [ 2636.614513] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2636.615288] kmem_cache_alloc+0x159/0x310 [ 2636.615908] vm_area_dup+0x78/0x290 [ 2636.616473] ? mark_lock+0xf5/0x2df0 [ 2636.617058] ? mark_lock+0xf5/0x2df0 [ 2636.617620] ? lock_acquire+0x197/0x470 [ 2636.618236] ? lock_chain_count+0x20/0x20 [ 2636.618891] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 2636.619600] ? lock_downgrade+0x6d0/0x6d0 [ 2636.620231] ? lock_chain_count+0x20/0x20 [ 2636.620872] ? vm_area_alloc+0x110/0x110 [ 2636.621477] ? __lock_acquire+0x1657/0x5b00 [ 2636.622161] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2636.622962] ? vmacache_find+0x55/0x2a0 [ 2636.623557] __split_vma+0xa8/0x4e0 [ 2636.624101] __do_munmap+0xfae/0x1260 [ 2636.624716] ? arch_get_unmapped_area+0x450/0x450 [ 2636.625445] ? lock_release+0x680/0x680 [ 2636.626076] mmap_region+0x7c8/0x1500 [ 2636.626661] do_mmap+0xcdb/0x11e0 [ 2636.627206] vm_mmap_pgoff+0x198/0x1f0 [ 2636.627800] ? randomize_page+0xb0/0xb0 [ 2636.628414] ksys_mmap_pgoff+0x41c/0x560 [ 2636.629053] ? find_mergeable_anon_vma+0x250/0x250 [ 2636.629199] loop5: detected capacity change from 0 to 135266304 [ 2636.629782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2636.629798] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2636.629820] do_syscall_64+0x33/0x40 [ 2636.633300] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2636.634082] RIP: 0033:0x7f13019cbb19 [ 2636.634660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2636.637472] RSP: 002b:00007f12fef41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2636.638623] RAX: ffffffffffffffda RBX: 00007f1301adef60 RCX: 00007f13019cbb19 [ 2636.639693] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2636.640774] RBP: 00007f12fef411d0 R08: 0000000000000003 R09: 0000000000000000 [ 2636.641867] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2636.642933] R13: 00007fff405bd44f R14: 00007f12fef41300 R15: 0000000000022000 [ 2636.646708] FAULT_INJECTION: forcing a failure. [ 2636.646708] name failslab, interval 1, probability 0, space 0, times 0 [ 2636.648464] CPU: 0 PID: 15884 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2636.649532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2636.650763] Call Trace: [ 2636.651160] dump_stack+0x107/0x167 [ 2636.651708] should_fail.cold+0x5/0xa [ 2636.652295] ? create_object.isra.0+0x3a/0xa20 [ 2636.653004] should_failslab+0x5/0x20 [ 2636.653630] kmem_cache_alloc+0x5b/0x310 [ 2636.654282] create_object.isra.0+0x3a/0xa20 [ 2636.654950] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2636.655757] kmem_cache_alloc_trace+0x151/0x320 [ 2636.656492] ? io_async_queue_proc+0x80/0x80 [ 2636.657188] percpu_ref_init+0xd8/0x3d0 [ 2636.657795] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2636.658646] io_uring_setup+0x14f6/0x2980 [ 2636.659272] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2636.660053] ? wait_for_completion_io+0x270/0x270 [ 2636.660809] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2636.661601] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2636.662398] do_syscall_64+0x33/0x40 [ 2636.662987] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2636.663779] RIP: 0033:0x7fa936a9db19 [ 2636.664339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2636.664885] loop4: detected capacity change from 0 to 16776704 [ 2636.667122] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2636.667138] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2636.667146] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2636.667154] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2636.667162] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2636.667170] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2636.689872] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2636.695924] EXT4-fs (loop4): inodes count not valid: 327712 vs 32 [ 2636.715892] loop5: detected capacity change from 0 to 135266304 [ 2636.725870] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:37:24 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xffff8000) [ 2636.747327] loop4: detected capacity change from 0 to 16776704 [ 2636.767292] EXT4-fs (loop4): inodes count not valid: 327712 vs 32 01:37:24 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1f}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000d, 0x10, r1, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:37:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x800000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:37:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000060080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2636.878517] loop5: detected capacity change from 0 to 135266304 [ 2636.884809] loop4: detected capacity change from 0 to 16776704 [ 2636.890191] EXT4-fs (loop4): inodes count not valid: 393248 vs 32 [ 2636.926739] loop4: detected capacity change from 0 to 16776704 [ 2636.930811] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2636.932849] EXT4-fs (loop4): inodes count not valid: 393248 vs 32 [ 2636.951991] loop5: detected capacity change from 0 to 135266304 [ 2636.960966] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:37:36 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x800000000) 01:37:36 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 20) 01:37:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x900000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:37:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000070080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:37:36 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x1000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:37:36 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x20, 0x1, 0x1, 0xff, 0x0, 0x8001, 0x34800, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff80, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x4, 0xe74, 0x100, 0x0, 0xe619, 0x4, 0x23, 0x0, 0x10000, 0x0, 0xffffffffffffff01}, r1, 0x8, r0, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r2, 0x10000, 0x80011) 01:37:36 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r5, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) syz_io_uring_submit(r7, r1, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r8, &(0x7f0000000040)={0x2}, r0, 0x1, 0x0, 0x1}, 0xfffffff9) 01:37:36 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 3) [ 2648.864735] FAULT_INJECTION: forcing a failure. [ 2648.864735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2648.866507] CPU: 1 PID: 16027 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2648.867150] loop4: detected capacity change from 0 to 16776704 [ 2648.867472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.867477] Call Trace: [ 2648.867497] dump_stack+0x107/0x167 [ 2648.867515] should_fail.cold+0x5/0xa [ 2648.870926] _copy_to_user+0x2e/0x180 [ 2648.871465] io_uring_setup+0x11b5/0x2980 [ 2648.872047] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2648.872826] ? wait_for_completion_io+0x270/0x270 [ 2648.873653] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2648.874384] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2648.875105] do_syscall_64+0x33/0x40 [ 2648.875629] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2648.876347] RIP: 0033:0x7fa936a9db19 [ 2648.876879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2648.879454] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2648.880517] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2648.881518] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2648.882518] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2648.883510] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2648.884501] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2648.886316] FAULT_INJECTION: forcing a failure. [ 2648.886316] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.887980] CPU: 1 PID: 16031 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 2648.888965] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.890123] Call Trace: [ 2648.890499] dump_stack+0x107/0x167 [ 2648.891017] should_fail.cold+0x5/0xa [ 2648.891566] ? vm_area_alloc+0x1c/0x110 [ 2648.892130] should_failslab+0x5/0x20 [ 2648.892593] kmem_cache_alloc+0x5b/0x310 [ 2648.893071] vm_area_alloc+0x1c/0x110 [ 2648.893513] mmap_region+0x97e/0x1500 [ 2648.893958] do_mmap+0xcdb/0x11e0 [ 2648.894368] vm_mmap_pgoff+0x198/0x1f0 [ 2648.894817] ? randomize_page+0xb0/0xb0 [ 2648.895279] ksys_mmap_pgoff+0x41c/0x560 [ 2648.895647] EXT4-fs (loop4): inodes count not valid: 458784 vs 32 [ 2648.895747] ? find_mergeable_anon_vma+0x250/0x250 [ 2648.895765] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2648.897799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2648.898397] do_syscall_64+0x33/0x40 [ 2648.898822] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2648.899411] RIP: 0033:0x7f13019cbb19 [ 2648.899837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2648.901945] RSP: 002b:00007f12fef41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2648.902818] RAX: ffffffffffffffda RBX: 00007f1301adef60 RCX: 00007f13019cbb19 [ 2648.903632] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2648.904444] RBP: 00007f12fef411d0 R08: 0000000000000003 R09: 0000000000000000 [ 2648.905263] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2648.906078] R13: 00007fff405bd44f R14: 00007f12fef41300 R15: 0000000000022000 [ 2648.914768] loop5: detected capacity change from 0 to 135266304 [ 2648.918384] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2648.927117] loop4: detected capacity change from 0 to 16776704 [ 2648.931617] EXT4-fs (loop4): inodes count not valid: 458784 vs 32 [ 2648.939246] loop5: detected capacity change from 0 to 135266304 [ 2648.942576] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:37:36 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x1000000000) 01:37:36 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 21) 01:37:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="20000b0080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:37:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xa00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2649.023995] FAULT_INJECTION: forcing a failure. [ 2649.023995] name failslab, interval 1, probability 0, space 0, times 0 [ 2649.025766] CPU: 1 PID: 16082 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2649.026560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2649.027502] Call Trace: [ 2649.027808] dump_stack+0x107/0x167 [ 2649.028225] should_fail.cold+0x5/0xa [ 2649.028668] ? __d_alloc+0x2a/0x990 [ 2649.029095] should_failslab+0x5/0x20 [ 2649.029529] kmem_cache_alloc+0x5b/0x310 [ 2649.029994] __d_alloc+0x2a/0x990 [ 2649.030389] ? find_held_lock+0x2c/0x110 [ 2649.030852] d_alloc_pseudo+0x19/0x70 [ 2649.031286] alloc_file_pseudo+0xce/0x250 [ 2649.031756] ? trace_hardirqs_on+0x5b/0x180 [ 2649.032244] ? alloc_file+0x5a0/0x5a0 [ 2649.032686] anon_inode_getfile+0xc8/0x1f0 [ 2649.033178] io_uring_setup+0x138b/0x2980 [ 2649.033658] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2649.034233] ? wait_for_completion_io+0x270/0x270 [ 2649.034797] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2649.035395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2649.035985] do_syscall_64+0x33/0x40 [ 2649.036410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2649.037008] RIP: 0033:0x7fa936a9db19 [ 2649.037432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2649.039521] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2649.040385] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2649.041208] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2649.042024] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2649.042834] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2649.043647] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2649.049353] loop5: detected capacity change from 0 to 135266304 [ 2649.055597] loop4: detected capacity change from 0 to 16776704 [ 2649.059545] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2649.063639] EXT4-fs (loop4): inodes count not valid: 720928 vs 32 [ 2649.071222] loop5: detected capacity change from 0 to 135266304 [ 2649.082004] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:37:49 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 22) 01:37:49 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)={0x0, @adiantum, 0x0, @desc1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) ftruncate(r1, 0x1) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x3b5cbd413fbe49d2, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x1f, 0x7, 0x1f, 0x8, 0x0, 0x2, 0x58001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x80000001, 0x400}, 0x800, 0x0, 0xe32b, 0x5, 0x9, 0x5, 0xc40, 0x0, 0x9, 0x0, 0x81}, 0xffffffffffffffff, 0x7, r2, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:37:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xb00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:37:49 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2118, &(0x7f0000000000)={0x0, 0x1cbe, 0x1, 0x3, 0x1b8, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x7dcb, 0xfffffffffffffffd, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000240)=0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r7, r8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r10 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r13, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r14}}, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r14}}, 0x81) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0xfff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:37:49 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x2000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:37:49 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10000000000) 01:37:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000180080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:37:49 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 4) [ 2661.670833] FAULT_INJECTION: forcing a failure. [ 2661.670833] name failslab, interval 1, probability 0, space 0, times 0 [ 2661.673266] CPU: 1 PID: 16176 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2661.674693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2661.676398] Call Trace: [ 2661.676958] dump_stack+0x107/0x167 [ 2661.677709] should_fail.cold+0x5/0xa [ 2661.678504] ? create_object.isra.0+0x3a/0xa20 [ 2661.679439] should_failslab+0x5/0x20 [ 2661.680211] kmem_cache_alloc+0x5b/0x310 [ 2661.681075] create_object.isra.0+0x3a/0xa20 [ 2661.681972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2661.683018] kmem_cache_alloc+0x159/0x310 [ 2661.683864] __d_alloc+0x2a/0x990 [ 2661.684584] ? find_held_lock+0x2c/0x110 [ 2661.685436] d_alloc_pseudo+0x19/0x70 [ 2661.686217] alloc_file_pseudo+0xce/0x250 [ 2661.687062] ? trace_hardirqs_on+0x5b/0x180 [ 2661.687946] ? alloc_file+0x5a0/0x5a0 [ 2661.688742] anon_inode_getfile+0xc8/0x1f0 [ 2661.689649] io_uring_setup+0x138b/0x2980 [ 2661.690504] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2661.691532] ? wait_for_completion_io+0x270/0x270 [ 2661.692539] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2661.693643] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2661.694700] do_syscall_64+0x33/0x40 [ 2661.695476] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2661.696519] RIP: 0033:0x7fa936a9db19 [ 2661.697290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2661.701029] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2661.702603] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2661.704063] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2661.705541] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2661.707002] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2661.708468] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2661.719363] loop5: detected capacity change from 0 to 135266304 [ 2661.725512] FAULT_INJECTION: forcing a failure. [ 2661.725512] name failslab, interval 1, probability 0, space 0, times 0 [ 2661.728611] CPU: 0 PID: 16179 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 2661.730558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2661.732830] Call Trace: [ 2661.733607] dump_stack+0x107/0x167 [ 2661.734624] should_fail.cold+0x5/0xa [ 2661.735687] ? create_object.isra.0+0x3a/0xa20 [ 2661.736985] should_failslab+0x5/0x20 [ 2661.737843] kmem_cache_alloc+0x5b/0x310 [ 2661.738572] create_object.isra.0+0x3a/0xa20 [ 2661.739344] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2661.740243] kmem_cache_alloc+0x159/0x310 [ 2661.741005] vm_area_alloc+0x1c/0x110 [ 2661.741626] mmap_region+0x97e/0x1500 [ 2661.742129] do_mmap+0xcdb/0x11e0 [ 2661.742570] vm_mmap_pgoff+0x198/0x1f0 [ 2661.743044] ? randomize_page+0xb0/0xb0 [ 2661.743539] ksys_mmap_pgoff+0x41c/0x560 [ 2661.744036] ? find_mergeable_anon_vma+0x250/0x250 [ 2661.744644] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2661.745308] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2661.745942] do_syscall_64+0x33/0x40 [ 2661.746400] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2661.747031] RIP: 0033:0x7f13019cbb19 [ 2661.747484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2661.749749] RSP: 002b:00007f12fef41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2661.750686] RAX: ffffffffffffffda RBX: 00007f1301adef60 RCX: 00007f13019cbb19 [ 2661.751554] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2661.752419] RBP: 00007f12fef411d0 R08: 0000000000000003 R09: 0000000000000000 [ 2661.753307] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2661.754174] R13: 00007fff405bd44f R14: 00007f12fef41300 R15: 0000000000022000 [ 2661.760733] loop4: detected capacity change from 0 to 16776704 01:37:49 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 23) 01:37:49 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xffffffffffffb) [ 2661.772438] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2661.777159] EXT4-fs (loop4): inodes count not valid: 1572896 vs 32 [ 2661.788780] loop5: detected capacity change from 0 to 135266304 [ 2661.797560] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2661.812172] FAULT_INJECTION: forcing a failure. [ 2661.812172] name failslab, interval 1, probability 0, space 0, times 0 [ 2661.814668] CPU: 1 PID: 16190 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2661.816081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2661.816876] loop4: detected capacity change from 0 to 16776704 [ 2661.817803] Call Trace: [ 2661.817830] dump_stack+0x107/0x167 [ 2661.817854] should_fail.cold+0x5/0xa [ 2661.820635] ? __alloc_file+0x21/0x320 [ 2661.821454] should_failslab+0x5/0x20 [ 2661.822233] kmem_cache_alloc+0x5b/0x310 [ 2661.823064] __alloc_file+0x21/0x320 [ 2661.823825] alloc_empty_file+0x6d/0x170 [ 2661.824649] alloc_file+0x5e/0x5a0 [ 2661.825387] alloc_file_pseudo+0x16a/0x250 [ 2661.826241] ? alloc_file+0x5a0/0x5a0 [ 2661.827041] anon_inode_getfile+0xc8/0x1f0 [ 2661.827910] io_uring_setup+0x138b/0x2980 [ 2661.828758] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2661.829806] ? wait_for_completion_io+0x270/0x270 [ 2661.830821] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2661.831890] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2661.832957] do_syscall_64+0x33/0x40 [ 2661.833723] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2661.834762] RIP: 0033:0x7fa936a9db19 [ 2661.835518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2661.839284] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2661.840861] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2661.842356] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2661.843837] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2661.845314] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2661.846790] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2661.855923] EXT4-fs (loop4): inodes count not valid: 1572896 vs 32 01:37:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xd00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:37:49 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 5) [ 2661.934982] loop5: detected capacity change from 0 to 135266304 [ 2661.945207] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2661.949879] FAULT_INJECTION: forcing a failure. [ 2661.949879] name failslab, interval 1, probability 0, space 0, times 0 [ 2661.951355] CPU: 0 PID: 16267 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 2661.952209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2661.953244] Call Trace: [ 2661.953574] dump_stack+0x107/0x167 [ 2661.954021] should_fail.cold+0x5/0xa [ 2661.954495] ? perf_event_mmap+0x51a/0xd90 [ 2661.955021] should_failslab+0x5/0x20 [ 2661.955492] kmem_cache_alloc_trace+0x55/0x320 [ 2661.956058] perf_event_mmap+0x51a/0xd90 [ 2661.956560] ? perf_event_namespaces+0x50/0x50 [ 2661.957147] ? vma_link+0x619/0x820 [ 2661.957594] mmap_region+0x3a2/0x1500 [ 2661.958068] do_mmap+0xcdb/0x11e0 [ 2661.958499] vm_mmap_pgoff+0x198/0x1f0 [ 2661.958977] ? randomize_page+0xb0/0xb0 [ 2661.959481] ksys_mmap_pgoff+0x41c/0x560 [ 2661.959978] ? find_mergeable_anon_vma+0x250/0x250 [ 2661.960583] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2661.961248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2661.961890] do_syscall_64+0x33/0x40 [ 2661.962346] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2661.962977] RIP: 0033:0x7f13019cbb19 [ 2661.963437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2661.965712] RSP: 002b:00007f12fef41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2661.966655] RAX: ffffffffffffffda RBX: 00007f1301adef60 RCX: 00007f13019cbb19 [ 2661.967528] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2661.968410] RBP: 00007f12fef411d0 R08: 0000000000000003 R09: 0000000000000000 [ 2661.969304] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2661.970177] R13: 00007fff405bd44f R14: 00007f12fef41300 R15: 0000000000022000 01:37:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="20001c0080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:37:49 executing program 6: ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x79d9, &(0x7f0000000180)={0x0, 0x40003, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000140)) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x0, 0xf4) pwrite64(r1, &(0x7f0000000080)="4509627020086a350a3fc2892573d8edd99fa7f15fcc9613e108e5560488500f84ccb92d0d1b2849afb98af22e2f4520110752c5065db2687b65f7f58637a59ce93ca1d191436d3cd41070d4ceae7dd0de6dc9dd92", 0x55, 0x2) 01:37:49 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 24) 01:37:49 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x40000000000000) [ 2662.046247] loop4: detected capacity change from 0 to 16776704 [ 2662.050072] EXT4-fs (loop4): inodes count not valid: 1835040 vs 32 [ 2662.065902] loop4: detected capacity change from 0 to 16776704 [ 2662.077426] EXT4-fs (loop4): inodes count not valid: 1835040 vs 32 [ 2662.082778] FAULT_INJECTION: forcing a failure. [ 2662.082778] name failslab, interval 1, probability 0, space 0, times 0 [ 2662.085072] CPU: 1 PID: 16314 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2662.086401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2662.087992] Call Trace: [ 2662.088502] dump_stack+0x107/0x167 [ 2662.089213] should_fail.cold+0x5/0xa [ 2662.089938] ? create_object.isra.0+0x3a/0xa20 [ 2662.090803] should_failslab+0x5/0x20 [ 2662.091533] kmem_cache_alloc+0x5b/0x310 [ 2662.092307] create_object.isra.0+0x3a/0xa20 [ 2662.093141] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2662.094112] kmem_cache_alloc+0x159/0x310 [ 2662.094900] __alloc_file+0x21/0x320 [ 2662.095605] alloc_empty_file+0x6d/0x170 [ 2662.096376] alloc_file+0x5e/0x5a0 [ 2662.097053] alloc_file_pseudo+0x16a/0x250 [ 2662.097858] ? alloc_file+0x5a0/0x5a0 [ 2662.098599] anon_inode_getfile+0xc8/0x1f0 [ 2662.099392] io_uring_setup+0x138b/0x2980 [ 2662.100186] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2662.101154] ? wait_for_completion_io+0x270/0x270 [ 2662.102088] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2662.103086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2662.104064] do_syscall_64+0x33/0x40 [ 2662.104780] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2662.105763] RIP: 0033:0x7fa936a9db19 [ 2662.106463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2662.109929] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2662.111367] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2662.112708] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2662.114060] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2662.115396] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2662.116735] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2676.294682] loop5: detected capacity change from 0 to 135266304 [ 2676.299108] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:38:04 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 6) 01:38:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000200080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:38:04 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x400, r0, &(0x7f0000000040)=0x58, 0x5ba, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x4010, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:38:04 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x3000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:38:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xf00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:38:04 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) openat(r1, &(0x7f0000000180)='./file0\x00', 0x102, 0xc9) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:38:04 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x60000000000000) 01:38:04 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 25) [ 2676.311541] FAULT_INJECTION: forcing a failure. [ 2676.311541] name failslab, interval 1, probability 0, space 0, times 0 [ 2676.313143] CPU: 0 PID: 16329 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2676.314089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2676.315221] Call Trace: [ 2676.315590] dump_stack+0x107/0x167 [ 2676.316090] should_fail.cold+0x5/0xa [ 2676.316613] ? security_file_alloc+0x34/0x170 [ 2676.317242] should_failslab+0x5/0x20 [ 2676.317770] kmem_cache_alloc+0x5b/0x310 [ 2676.318329] security_file_alloc+0x34/0x170 [ 2676.318923] __alloc_file+0xb7/0x320 [ 2676.319435] alloc_empty_file+0x6d/0x170 [ 2676.319993] alloc_file+0x5e/0x5a0 [ 2676.320484] alloc_file_pseudo+0x16a/0x250 [ 2676.321062] ? alloc_file+0x5a0/0x5a0 [ 2676.321599] anon_inode_getfile+0xc8/0x1f0 [ 2676.322192] io_uring_setup+0x138b/0x2980 [ 2676.322769] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2676.323461] ? wait_for_completion_io+0x270/0x270 [ 2676.324144] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2676.324862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2676.325587] do_syscall_64+0x33/0x40 [ 2676.326097] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2676.326799] RIP: 0033:0x7fa936a9db19 [ 2676.327307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2676.329831] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2676.330876] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2676.331853] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2676.332824] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2676.333648] loop4: detected capacity change from 0 to 16776704 [ 2676.333803] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2676.333817] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2676.355697] loop5: detected capacity change from 0 to 135266304 [ 2676.364557] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2676.380818] FAULT_INJECTION: forcing a failure. [ 2676.380818] name failslab, interval 1, probability 0, space 0, times 0 [ 2676.383383] CPU: 1 PID: 16337 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 2676.384911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2676.386744] Call Trace: [ 2676.387332] dump_stack+0x107/0x167 [ 2676.388142] should_fail.cold+0x5/0xa [ 2676.388985] ? create_object.isra.0+0x3a/0xa20 [ 2676.390010] should_failslab+0x5/0x20 [ 2676.390850] kmem_cache_alloc+0x5b/0x310 [ 2676.391758] create_object.isra.0+0x3a/0xa20 [ 2676.392729] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2676.393867] kmem_cache_alloc_trace+0x151/0x320 [ 2676.394907] perf_event_mmap+0x51a/0xd90 [ 2676.395811] ? perf_event_namespaces+0x50/0x50 [ 2676.396850] ? vma_link+0x619/0x820 [ 2676.397679] mmap_region+0x3a2/0x1500 [ 2676.398600] do_mmap+0xcdb/0x11e0 [ 2676.399391] vm_mmap_pgoff+0x198/0x1f0 [ 2676.400265] ? randomize_page+0xb0/0xb0 [ 2676.401184] ksys_mmap_pgoff+0x41c/0x560 [ 2676.402099] ? find_mergeable_anon_vma+0x250/0x250 [ 2676.403200] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2676.404370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2676.405536] do_syscall_64+0x33/0x40 [ 2676.406368] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2676.407510] RIP: 0033:0x7f13019cbb19 01:38:04 executing program 6: r0 = syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xb95, 0xffffffff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x20010, r0, 0x10000000) [ 2676.408341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2676.412649] RSP: 002b:00007f12fef41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2676.414352] RAX: ffffffffffffffda RBX: 00007f1301adef60 RCX: 00007f13019cbb19 [ 2676.415920] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2676.417487] RBP: 00007f12fef411d0 R08: 0000000000000003 R09: 0000000000000000 [ 2676.419044] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2676.420601] R13: 00007fff405bd44f R14: 00007f12fef41300 R15: 0000000000022000 [ 2676.423523] EXT4-fs (loop4): inodes count not valid: 2097184 vs 32 01:38:04 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 26) [ 2676.462903] loop4: detected capacity change from 0 to 16776704 [ 2676.480031] FAULT_INJECTION: forcing a failure. [ 2676.480031] name failslab, interval 1, probability 0, space 0, times 0 [ 2676.480077] EXT4-fs (loop4): inodes count not valid: 2097184 vs 32 [ 2676.481823] CPU: 0 PID: 16350 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2676.484406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2676.485729] Call Trace: [ 2676.486150] dump_stack+0x107/0x167 [ 2676.486732] should_fail.cold+0x5/0xa [ 2676.487337] ? security_file_alloc+0x34/0x170 [ 2676.488050] should_failslab+0x5/0x20 [ 2676.488648] kmem_cache_alloc+0x5b/0x310 [ 2676.489309] security_file_alloc+0x34/0x170 [ 2676.489996] __alloc_file+0xb7/0x320 [ 2676.490582] alloc_empty_file+0x6d/0x170 [ 2676.491225] alloc_file+0x5e/0x5a0 [ 2676.491789] alloc_file_pseudo+0x16a/0x250 [ 2676.492458] ? alloc_file+0x5a0/0x5a0 [ 2676.493066] anon_inode_getfile+0xc8/0x1f0 [ 2676.493741] io_uring_setup+0x138b/0x2980 [ 2676.494397] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2676.495190] ? wait_for_completion_io+0x270/0x270 [ 2676.495971] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2676.496796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2676.497626] do_syscall_64+0x33/0x40 [ 2676.498212] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2676.499016] RIP: 0033:0x7fa936a9db19 [ 2676.499605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2676.502503] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2676.503704] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2676.504822] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2676.505951] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2676.507068] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2676.508187] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:38:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1100000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:38:04 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80000000000000) 01:38:04 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, 0x1, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'bridge0\x00', @ifru_flags}}) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 01:38:04 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 27) 01:38:04 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 7) [ 2676.592166] loop5: detected capacity change from 0 to 135266304 [ 2676.608708] FAULT_INJECTION: forcing a failure. [ 2676.608708] name failslab, interval 1, probability 0, space 0, times 0 [ 2676.610377] CPU: 0 PID: 16404 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2676.611423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2676.612656] Call Trace: [ 2676.612998] dump_stack+0x107/0x167 [ 2676.613557] should_fail.cold+0x5/0xa [ 2676.614123] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2676.614897] should_failslab+0x5/0x20 [ 2676.615471] kmem_cache_alloc_trace+0x55/0x320 [ 2676.616150] io_uring_alloc_task_context+0x99/0x6a0 [ 2676.616894] ? io_import_iovec+0x1120/0x1120 [ 2676.617559] ? lock_downgrade+0x6d0/0x6d0 [ 2676.618180] ? do_raw_spin_lock+0x121/0x260 [ 2676.618815] ? rwlock_bug.part.0+0x90/0x90 [ 2676.619443] __io_uring_add_tctx_node+0x2c6/0x520 [ 2676.620160] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2676.620939] ? alloc_fd+0x2e7/0x670 [ 2676.621491] io_uring_setup+0x1fbb/0x2980 [ 2676.622110] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2676.622858] ? wait_for_completion_io+0x270/0x270 [ 2676.623587] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2676.624364] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2676.625139] do_syscall_64+0x33/0x40 [ 2676.625693] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2676.626450] RIP: 0033:0x7fa936a9db19 [ 2676.627001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2676.629725] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2676.630844] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2676.631894] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2676.632776] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2676.633853] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2676.634734] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2676.644857] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:38:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="20003f0080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2676.658462] FAULT_INJECTION: forcing a failure. [ 2676.658462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2676.660068] CPU: 0 PID: 16434 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 2676.661077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2676.662091] Call Trace: [ 2676.662484] dump_stack+0x107/0x167 [ 2676.663014] should_fail.cold+0x5/0xa [ 2676.663573] _copy_to_user+0x2e/0x180 [ 2676.664131] simple_read_from_buffer+0xcc/0x160 [ 2676.664804] proc_fail_nth_read+0x198/0x230 [ 2676.665439] ? proc_sessionid_read+0x230/0x230 [ 2676.666108] ? security_file_permission+0xb1/0xe0 [ 2676.666811] ? proc_sessionid_read+0x230/0x230 [ 2676.667474] vfs_read+0x228/0x620 [ 2676.667980] ksys_read+0x12d/0x260 [ 2676.668498] ? vfs_write+0xb10/0xb10 [ 2676.669043] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2676.669807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2676.670556] do_syscall_64+0x33/0x40 [ 2676.671091] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2676.671827] RIP: 0033:0x7f130197e69c [ 2676.672363] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2676.675036] RSP: 002b:00007f12fef41170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2676.676141] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 00007f130197e69c [ 2676.677185] RDX: 000000000000000f RSI: 00007f12fef411e0 RDI: 0000000000000004 [ 2676.678213] RBP: 00007f12fef411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2676.679080] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2676.680114] R13: 00007fff405bd44f R14: 00007f12fef41300 R15: 0000000000022000 [ 2676.688423] loop4: detected capacity change from 0 to 16776704 01:38:04 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x4000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2676.695612] EXT4-fs (loop4): inodes count not valid: 4128800 vs 32 01:38:19 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80ffff00000000) 01:38:19 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x5000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:38:19 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:38:19 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:38:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000690080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:38:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x2000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:38:19 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x20, 0x20, 0x200001}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r3, r4, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xffffffffffffff66, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x8010, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20001, 0x80) r7 = socket$inet6(0xa, 0xa, 0x3) getsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r8 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r9 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2001, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r12, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0xffffffffffffffff, r6, r7, r8], 0x4, 0x0, 0x1, {0x0, r13}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:38:19 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 28) [ 2691.383813] loop5: detected capacity change from 0 to 135266304 [ 2691.390913] FAULT_INJECTION: forcing a failure. [ 2691.390913] name failslab, interval 1, probability 0, space 0, times 0 [ 2691.392169] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2691.393739] CPU: 1 PID: 16491 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2691.396696] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2691.398688] Call Trace: [ 2691.399314] dump_stack+0x107/0x167 [ 2691.400297] should_fail.cold+0x5/0xa [ 2691.401210] ? create_object.isra.0+0x3a/0xa20 [ 2691.402313] should_failslab+0x5/0x20 [ 2691.403222] kmem_cache_alloc+0x5b/0x310 [ 2691.404185] create_object.isra.0+0x3a/0xa20 [ 2691.405220] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2691.406450] kmem_cache_alloc_trace+0x151/0x320 [ 2691.407600] io_uring_alloc_task_context+0x99/0x6a0 [ 2691.408851] ? io_import_iovec+0x1120/0x1120 [ 2691.409937] ? lock_downgrade+0x6d0/0x6d0 [ 2691.410906] ? do_raw_spin_lock+0x121/0x260 [ 2691.411915] ? rwlock_bug.part.0+0x90/0x90 [ 2691.412919] __io_uring_add_tctx_node+0x2c6/0x520 [ 2691.414084] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2691.415316] ? alloc_fd+0x2e7/0x670 [ 2691.416186] io_uring_setup+0x1fbb/0x2980 [ 2691.417176] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2691.418389] ? wait_for_completion_io+0x270/0x270 [ 2691.419551] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2691.420781] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2691.422028] do_syscall_64+0x33/0x40 [ 2691.422912] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2691.424118] RIP: 0033:0x7fa936a9db19 [ 2691.424994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2691.429328] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2691.431077] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2691.432711] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2691.434348] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2691.435982] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2691.437624] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:38:19 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x100000000000000) [ 2691.515298] loop4: detected capacity change from 0 to 16776704 [ 2691.533355] EXT4-fs (loop4): inodes count not valid: 6881312 vs 32 01:38:19 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0xb00, 0x100000e, 0x13, r0, 0x0) 01:38:19 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 29) [ 2691.556583] loop5: detected capacity change from 0 to 135266304 [ 2691.561894] FAULT_INJECTION: forcing a failure. [ 2691.561894] name failslab, interval 1, probability 0, space 0, times 0 [ 2691.564566] CPU: 0 PID: 16527 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2691.566163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2691.568062] Call Trace: [ 2691.568658] dump_stack+0x107/0x167 [ 2691.569526] should_fail.cold+0x5/0xa [ 2691.570410] ? create_object.isra.0+0x3a/0xa20 [ 2691.571483] should_failslab+0x5/0x20 [ 2691.572348] kmem_cache_alloc+0x5b/0x310 [ 2691.573303] create_object.isra.0+0x3a/0xa20 [ 2691.574334] kmemleak_alloc_percpu+0xa0/0x100 [ 2691.575349] pcpu_alloc+0x4e2/0x1240 [ 2691.576215] __percpu_counter_init+0x10d/0x2d0 [ 2691.577290] io_uring_alloc_task_context+0xcc/0x6a0 [ 2691.578427] ? io_import_iovec+0x1120/0x1120 [ 2691.579429] ? lock_downgrade+0x6d0/0x6d0 [ 2691.580351] ? do_raw_spin_lock+0x121/0x260 [ 2691.581330] ? rwlock_bug.part.0+0x90/0x90 [ 2691.582291] __io_uring_add_tctx_node+0x2c6/0x520 [ 2691.583379] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2691.584608] ? alloc_fd+0x2e7/0x670 [ 2691.585519] io_uring_setup+0x1fbb/0x2980 [ 2691.586467] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2691.587612] ? wait_for_completion_io+0x270/0x270 [ 2691.588745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2691.589971] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2691.591162] do_syscall_64+0x33/0x40 [ 2691.592048] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2691.593225] RIP: 0033:0x7fa936a9db19 [ 2691.594106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2691.598316] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2691.600068] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2691.601704] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2691.603330] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2691.604957] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2691.606574] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2691.621234] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2691.639327] loop4: detected capacity change from 0 to 16776704 [ 2691.666598] EXT4-fs (loop4): inodes count not valid: 6881312 vs 32 01:38:19 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x100000e, 0x13, r0, 0x0) 01:38:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x2010000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:38:19 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x200000000000000) 01:38:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2004800080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:38:19 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x6000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:38:19 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x1400000000000e, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:38:19 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x300000000000000) [ 2691.881465] loop4: detected capacity change from 0 to 16776704 [ 2691.911187] EXT4-fs (loop4): inodes count not valid: 8389664 vs 32 [ 2691.946719] loop4: detected capacity change from 0 to 16776704 [ 2691.989761] EXT4-fs (loop4): inodes count not valid: 8389664 vs 32 01:38:34 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 30) 01:38:34 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x7000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:38:34 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x8, 0x7f, 0x0, 0x5, 0x21c05, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x4, @perf_config_ext={0x100, 0x5}, 0x41080, 0x5, 0xd4ca, 0x2, 0x7, 0x80000001, 0x4, 0x0, 0xe9, 0x0, 0xffffffff}, 0x0, 0xa, r0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:38:34 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4003, 0x100000e, 0x13, r0, 0x0) 01:38:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x2e00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:38:34 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xffffffff, 0x7, 0x1}) r4 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[r3, r4, r0, r0, r5, r0], 0x6, 0x0, 0x0, {0x0, r6}}, 0x8) 01:38:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="20fdef0080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:38:34 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x400000000000000) [ 2706.650978] FAULT_INJECTION: forcing a failure. [ 2706.650978] name failslab, interval 1, probability 0, space 0, times 0 [ 2706.653698] CPU: 0 PID: 16751 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2706.655346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2706.657314] Call Trace: [ 2706.657955] dump_stack+0x107/0x167 [ 2706.658821] should_fail.cold+0x5/0xa [ 2706.659727] ? create_object.isra.0+0x3a/0xa20 [ 2706.660814] should_failslab+0x5/0x20 [ 2706.661726] kmem_cache_alloc+0x5b/0x310 [ 2706.662695] create_object.isra.0+0x3a/0xa20 [ 2706.663749] kmemleak_alloc_percpu+0xa0/0x100 [ 2706.664816] pcpu_alloc+0x4e2/0x1240 [ 2706.665726] __percpu_counter_init+0x10d/0x2d0 [ 2706.666815] io_uring_alloc_task_context+0xcc/0x6a0 [ 2706.668000] ? io_import_iovec+0x1120/0x1120 [ 2706.669058] ? lock_downgrade+0x6d0/0x6d0 [ 2706.670062] ? do_raw_spin_lock+0x121/0x260 [ 2706.671092] ? rwlock_bug.part.0+0x90/0x90 [ 2706.672108] __io_uring_add_tctx_node+0x2c6/0x520 [ 2706.673258] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2706.674520] ? alloc_fd+0x2e7/0x670 [ 2706.675405] io_uring_setup+0x1fbb/0x2980 [ 2706.676409] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2706.677631] ? wait_for_completion_io+0x270/0x270 [ 2706.678799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2706.680043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2706.681271] do_syscall_64+0x33/0x40 [ 2706.682168] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2706.683389] RIP: 0033:0x7fa936a9db19 [ 2706.684277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2706.688632] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2706.690448] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2706.692137] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2706.693838] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2706.695527] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2706.697212] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2706.702718] loop5: detected capacity change from 0 to 135266304 01:38:34 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r0, 0xb8, 0x0, 0x7, 0x2}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2706.745165] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2706.754631] loop4: detected capacity change from 0 to 16776704 [ 2706.760734] EXT4-fs (loop4): inodes count not valid: 15727904 vs 32 [ 2706.779202] loop4: detected capacity change from 0 to 16776704 [ 2706.783015] EXT4-fs (loop4): inodes count not valid: 15727904 vs 32 [ 2706.786167] loop5: detected capacity change from 0 to 135266304 [ 2706.821114] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:38:46 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x9000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:38:46 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfc, 0x2, 0x33, 0x6, 0x0, 0x6, 0x1, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x84, 0x1, 0xfffffffc, 0x5, 0x20, 0xfffffffb, 0x5ef, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xc, r0, 0x8) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x8010, r1, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:38:46 executing program 6: r0 = syz_io_uring_setup(0x620b, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8010, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$LOOP_SET_STATUS(r4, 0x1267, &(0x7f00000005c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "7a0a49805b3f8a1d1f3c51f4b0a08ee8cb28f6a71b6e747131e3558bbb840da72d4b522d3fb4c54d0509ef815a97cf1f293dce3a7c7cf60f7f8790c885451378", "d050516ce943c90f758a236f4aee0d825424dc6bd419233154e824257ddd96d1"}) r5 = epoll_create(0x0) openat(r3, &(0x7f0000000080)='./file0/file0\x00', 0x100, 0x10) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r4, &(0x7f0000000000)={0x50000008}, r5, 0x1, 0x0, 0x1}, 0xffffffff) 01:38:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="20effd0080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:38:46 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 31) 01:38:46 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x100000e, 0x13, r0, 0x0) 01:38:46 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x500000000000000) 01:38:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x37c16fc800000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2719.104757] loop4: detected capacity change from 0 to 16776704 [ 2719.146007] loop5: detected capacity change from 0 to 135266304 01:38:46 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x600000000000000) [ 2719.164541] FAULT_INJECTION: forcing a failure. [ 2719.164541] name failslab, interval 1, probability 0, space 0, times 0 [ 2719.167465] CPU: 1 PID: 16896 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2719.168941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2719.170690] Call Trace: [ 2719.171253] dump_stack+0x107/0x167 [ 2719.172028] should_fail.cold+0x5/0xa [ 2719.172837] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2719.173951] should_failslab+0x5/0x20 [ 2719.174746] kmem_cache_alloc_trace+0x55/0x320 [ 2719.175711] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2719.176775] ? io_import_iovec+0x1120/0x1120 [ 2719.177715] ? lock_downgrade+0x6d0/0x6d0 [ 2719.178576] ? do_raw_spin_lock+0x121/0x260 [ 2719.179485] ? rwlock_bug.part.0+0x90/0x90 [ 2719.180375] __io_uring_add_tctx_node+0x2c6/0x520 [ 2719.181383] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2719.182494] ? alloc_fd+0x2e7/0x670 [ 2719.183277] io_uring_setup+0x1fbb/0x2980 [ 2719.184151] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2719.185211] ? wait_for_completion_io+0x270/0x270 [ 2719.186257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2719.187356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2719.188435] do_syscall_64+0x33/0x40 [ 2719.189219] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2719.190303] RIP: 0033:0x7fa936a9db19 [ 2719.191082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2719.194951] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2719.196553] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2719.198059] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2719.199569] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2719.201058] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2719.202636] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:38:47 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x700000000000000) [ 2719.214794] EXT4-fs (loop4): inodes count not valid: 16641824 vs 32 [ 2719.228019] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:38:47 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x373}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x10013, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2719.294997] loop5: detected capacity change from 0 to 135266304 [ 2719.308875] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:38:47 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4005, 0x100000e, 0x13, r0, 0x0) 01:38:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000020080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:38:47 executing program 2: recvmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/109, 0x6d}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2}}, {{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000240), 0x0, &(0x7f0000000280)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000500)=""/153, 0x99}, {&(0x7f00000005c0)=""/176, 0xb0}, {&(0x7f0000000680)=""/157, 0x9d}, {&(0x7f0000000740)=""/228, 0xe4}, {&(0x7f0000000440)=""/1, 0x1}, {&(0x7f0000000840)=""/125, 0x7d}, {&(0x7f0000000940)=""/225, 0xe1}], 0x8, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000002140)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/89, 0x59}, {&(0x7f0000001c80)=""/154, 0x9a}, {&(0x7f0000001d40)=""/163, 0xa3}, {&(0x7f0000001e00)=""/136, 0x88}, {&(0x7f0000001ec0)=""/255, 0xff}, {&(0x7f0000001fc0)=""/68, 0x44}, {&(0x7f0000002040)=""/177, 0xb1}, {&(0x7f0000002100)=""/42, 0x2a}], 0x9, &(0x7f0000002200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000002300), 0x6e, &(0x7f0000002800)=[{&(0x7f0000002380)=""/142, 0x8e}, {&(0x7f0000002440)=""/189, 0xbd}, {&(0x7f0000002500)=""/202, 0xca}, {&(0x7f0000002600)=""/206, 0xce}, {&(0x7f0000002700)=""/36, 0x24}, {&(0x7f0000002740)=""/112, 0x70}, {&(0x7f00000027c0)=""/43, 0x2b}], 0x7, &(0x7f0000002880)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}], 0x5, 0x0, &(0x7f0000002b00)={0x0, 0x3938700}) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:38:47 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000000000000000) 01:38:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x3f00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2719.425792] loop4: detected capacity change from 0 to 16776704 [ 2719.445969] EXT4-fs (loop4): inodes count not valid: 131104 vs 32 [ 2719.514689] loop4: detected capacity change from 0 to 16776704 [ 2719.545588] EXT4-fs (loop4): inodes count not valid: 131104 vs 32 01:39:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000030080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:39:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:39:03 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:39:03 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r4, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x5de4, &(0x7f0000000000)={0x0, 0xeb5a, 0x4, 0x1, 0x393, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)={0x0, 0x989680}, 0x1, 0x2cda56a00dcb6edf, 0x1}, 0x7) 01:39:03 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 32) 01:39:03 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4006, 0x100000e, 0x13, r0, 0x0) [ 2735.991103] FAULT_INJECTION: forcing a failure. [ 2735.991103] name failslab, interval 1, probability 0, space 0, times 0 [ 2735.994278] CPU: 0 PID: 17139 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2735.996182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2735.998493] Call Trace: [ 2735.999223] dump_stack+0x107/0x167 [ 2736.000226] should_fail.cold+0x5/0xa [ 2736.001272] ? create_object.isra.0+0x3a/0xa20 [ 2736.002558] should_failslab+0x5/0x20 [ 2736.003611] kmem_cache_alloc+0x5b/0x310 [ 2736.004739] create_object.isra.0+0x3a/0xa20 [ 2736.005977] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2736.007383] kmem_cache_alloc_trace+0x151/0x320 [ 2736.008677] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2736.010143] ? io_import_iovec+0x1120/0x1120 [ 2736.011353] ? lock_downgrade+0x6d0/0x6d0 [ 2736.012488] ? do_raw_spin_lock+0x121/0x260 [ 2736.013670] ? rwlock_bug.part.0+0x90/0x90 [ 2736.014874] __io_uring_add_tctx_node+0x2c6/0x520 [ 2736.016204] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2736.017647] ? alloc_fd+0x2e7/0x670 [ 2736.018689] io_uring_setup+0x1fbb/0x2980 [ 2736.019839] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2736.021228] ? wait_for_completion_io+0x270/0x270 [ 2736.022609] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2736.024051] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2736.025470] do_syscall_64+0x33/0x40 [ 2736.026517] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2736.027926] RIP: 0033:0x7fa936a9db19 [ 2736.028947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2736.034055] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2736.035977] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2736.037753] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2736.039545] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2736.041305] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2736.043084] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2736.051042] loop5: detected capacity change from 0 to 135266304 [ 2736.060327] loop4: detected capacity change from 0 to 16776704 [ 2736.066817] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2736.074207] EXT4-fs (loop4): inodes count not valid: 196640 vs 32 01:39:03 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xf000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:39:03 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xfbffffffffff0f00) [ 2736.088587] loop5: detected capacity change from 0 to 135266304 [ 2736.094308] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:39:03 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1013, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@caif, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000200)=""/242, 0xf2}, {&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f0000000400)=""/148, 0x94}, {&(0x7f00000004c0)=""/228, 0xe4}], 0x5, &(0x7f0000000640)=""/120, 0x78}, 0x0, 0x40010063, 0x1, {0x2}}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) pread64(r0, &(0x7f0000000740)=""/232, 0xe8, 0x0) [ 2736.108893] loop4: detected capacity change from 0 to 16776704 [ 2736.117785] EXT4-fs (loop4): inodes count not valid: 196640 vs 32 01:39:03 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4007, 0x100000e, 0x13, r0, 0x0) 01:39:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4800000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:39:03 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff0f605300000000) 01:39:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000040080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2736.186175] loop5: detected capacity change from 0 to 135266304 01:39:04 executing program 6: pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_enter(r0, 0x59b2, 0xa48a, 0x3, &(0x7f0000000040)={[0x100000000]}, 0x8) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 01:39:04 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 33) [ 2736.232497] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:39:04 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c6530202020205e7b2e285c2020a82e203c2840202c0af226e0450969763a68eacb0fe7ece4ef0522b004623a4862ccb3fe17c6def92dc4028c9ea26e4e7f31e07771cac927078cfa87b05f521988"], 0x46) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r3 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) fcntl$dupfd(r2, 0x0, r3) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = fcntl$dupfd(r1, 0x406, r4) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=@fragment={0x5e, 0x0, 0x5, 0x0, 0x0, 0x7, 0x68}, 0x8) [ 2736.250474] loop4: detected capacity change from 0 to 16776704 [ 2736.274328] EXT4-fs (loop4): inodes count not valid: 262176 vs 32 [ 2736.292682] loop4: detected capacity change from 0 to 16776704 [ 2736.299821] EXT4-fs (loop4): inodes count not valid: 262176 vs 32 01:39:04 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3f605300000000) 01:39:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4c00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:39:04 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x200000, 0x100000e, 0x13, r0, 0x0) [ 2736.323226] FAULT_INJECTION: forcing a failure. [ 2736.323226] name failslab, interval 1, probability 0, space 0, times 0 [ 2736.326139] CPU: 0 PID: 17283 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2736.327804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2736.329821] Call Trace: [ 2736.330475] dump_stack+0x107/0x167 [ 2736.331362] should_fail.cold+0x5/0xa [ 2736.332281] ? io_wq_create+0xeb/0xc00 [ 2736.333219] should_failslab+0x5/0x20 [ 2736.334157] __kmalloc+0x72/0x390 [ 2736.334996] io_wq_create+0xeb/0xc00 [ 2736.335904] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2736.337128] ? io_import_iovec+0x1120/0x1120 [ 2736.338218] ? io_apoll_task_func+0x2d0/0x2d0 [ 2736.339310] ? __io_req_find_next+0x300/0x300 [ 2736.340401] ? do_raw_spin_lock+0x121/0x260 [ 2736.341452] ? rwlock_bug.part.0+0x90/0x90 [ 2736.342525] __io_uring_add_tctx_node+0x2c6/0x520 [ 2736.343701] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2736.344985] ? alloc_fd+0x2e7/0x670 [ 2736.345922] io_uring_setup+0x1fbb/0x2980 [ 2736.346945] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2736.348178] ? wait_for_completion_io+0x270/0x270 [ 2736.349386] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2736.350690] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2736.351948] do_syscall_64+0x33/0x40 [ 2736.352853] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2736.354106] RIP: 0033:0x7fa936a9db19 [ 2736.355014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2736.359503] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2736.361363] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2736.363109] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2736.364853] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2736.366596] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2736.368333] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:39:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x6000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:39:04 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x9effffff}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:39:04 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 34) 01:39:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000050080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:39:04 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x100000e, 0x13, r0, 0x0) 01:39:04 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2736.539746] loop4: detected capacity change from 0 to 16776704 01:39:04 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3f805400000000) [ 2736.548876] FAULT_INJECTION: forcing a failure. [ 2736.548876] name failslab, interval 1, probability 0, space 0, times 0 [ 2736.550230] CPU: 1 PID: 17399 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2736.551021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2736.551964] Call Trace: [ 2736.552270] dump_stack+0x107/0x167 [ 2736.552687] should_fail.cold+0x5/0xa [ 2736.553122] ? create_object.isra.0+0x3a/0xa20 [ 2736.553641] should_failslab+0x5/0x20 [ 2736.554103] kmem_cache_alloc+0x5b/0x310 [ 2736.554567] create_object.isra.0+0x3a/0xa20 [ 2736.555064] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2736.555636] __kmalloc+0x16e/0x390 [ 2736.556044] io_wq_create+0xeb/0xc00 [ 2736.556473] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2736.557050] ? io_import_iovec+0x1120/0x1120 [ 2736.557550] ? io_apoll_task_func+0x2d0/0x2d0 [ 2736.558066] ? __io_req_find_next+0x300/0x300 [ 2736.558573] ? do_raw_spin_lock+0x121/0x260 [ 2736.559063] ? rwlock_bug.part.0+0x90/0x90 [ 2736.559545] __io_uring_add_tctx_node+0x2c6/0x520 [ 2736.560091] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2736.560688] ? alloc_fd+0x2e7/0x670 [ 2736.561107] io_uring_setup+0x1fbb/0x2980 [ 2736.561582] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2736.562167] ? wait_for_completion_io+0x270/0x270 [ 2736.562728] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2736.563326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2736.563912] do_syscall_64+0x33/0x40 [ 2736.564335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2736.564917] RIP: 0033:0x7fa936a9db19 [ 2736.565339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2736.567436] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2736.568301] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2736.569106] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2736.569919] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2736.570728] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2736.571537] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2736.586768] loop5: detected capacity change from 0 to 135266304 [ 2736.593617] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2736.597575] EXT4-fs (loop4): inodes count not valid: 327712 vs 32 [ 2736.618525] loop4: detected capacity change from 0 to 16776704 [ 2736.621663] EXT4-fs (loop4): inodes count not valid: 327712 vs 32 [ 2736.633556] loop5: detected capacity change from 0 to 135266304 [ 2736.667494] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:39:18 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xd9000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:39:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xff, 0x22, 0xc0, 0x8, 0x0, 0x6, 0x0, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0xc08a, 0x9, 0xffff29ef, 0x3, 0x2, 0x400, 0x1, 0x0, 0x800, 0x0, 0x6d4b}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x3, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x88, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe000, 0x4, @perf_config_ext={0x6, 0x8}, 0x8000, 0x4, 0x1, 0x3, 0x7, 0x10001, 0x7ff, 0x0, 0x7fff, 0x0, 0xc42}, r1, 0x0, r0, 0x1) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x6, 0x20000000000, 0xff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:39:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x6800000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:39:18 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:39:18 executing program 6: r0 = syz_io_uring_setup(0x5dbf, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:39:18 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x7ffffffff000, 0x100000e, 0x13, r0, 0x0) 01:39:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000060080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:39:18 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 35) [ 2750.888162] loop5: detected capacity change from 0 to 135266304 [ 2750.898312] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2750.907045] FAULT_INJECTION: forcing a failure. [ 2750.907045] name failslab, interval 1, probability 0, space 0, times 0 [ 2750.909818] CPU: 0 PID: 17432 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2750.911532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2750.913582] Call Trace: [ 2750.914260] dump_stack+0x107/0x167 [ 2750.915170] should_fail.cold+0x5/0xa [ 2750.915796] loop4: detected capacity change from 0 to 16776704 [ 2750.916119] ? io_wq_create+0x6ef/0xc00 [ 2750.918541] should_failslab+0x5/0x20 [ 2750.919492] kmem_cache_alloc_node_trace+0x59/0x340 [ 2750.920741] io_wq_create+0x6ef/0xc00 [ 2750.921702] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2750.922979] ? io_import_iovec+0x1120/0x1120 [ 2750.924077] ? io_apoll_task_func+0x2d0/0x2d0 [ 2750.925190] ? __io_req_find_next+0x300/0x300 [ 2750.926316] ? do_raw_spin_lock+0x121/0x260 [ 2750.927386] ? rwlock_bug.part.0+0x90/0x90 [ 2750.928452] __io_uring_add_tctx_node+0x2c6/0x520 [ 2750.929659] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2750.930964] ? alloc_fd+0x2e7/0x670 [ 2750.931884] io_uring_setup+0x1fbb/0x2980 [ 2750.932930] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2750.934203] ? wait_for_completion_io+0x270/0x270 [ 2750.935422] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2750.936717] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2750.938010] do_syscall_64+0x33/0x40 [ 2750.938935] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2750.940206] RIP: 0033:0x7fa936a9db19 [ 2750.941140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2750.945705] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2750.947600] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2750.949437] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2750.951225] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2750.953005] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2750.954784] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2750.967211] EXT4-fs (loop4): inodes count not valid: 393248 vs 32 [ 2750.983863] loop5: detected capacity change from 0 to 135266304 [ 2751.006128] loop4: detected capacity change from 0 to 16776704 [ 2751.018941] EXT4-fs (loop4): inodes count not valid: 393248 vs 32 [ 2751.034774] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:39:34 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xf0ffffff}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:39:34 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 36) 01:39:34 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0) 01:39:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x6c00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:39:34 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0002, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = syz_open_pts(r0, 0x200040) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000040)={0xfffffff9, 0x7f, 0x7f}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 01:39:34 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '-:'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\\*#\\{!\\@,\'@'}], 0xa, "f9fdb548863b86ef9f6740cb466b48fe819de370e8cfba923c279bca63d44d82def757834f01c168fea4b55e7186e1713f042d7c3c51112190f0ee254eb674b6f4573d30d89f1de773e88786f585b70cafb124446e0f3005b135105d3a400f257e1d7a68c747b5bb9beb5c569446a5a8290ee7a0ebd94621322e571bf982ef09c30ea46405dd8f0a24151ffbb2cd9a3d24a1c0923203b0e6464599081ce1d4b39b952451778b657d1016f77800bb66b80f6ca71370df0efe2758164cb781f0355fce79634923ba5ccad8a5a420d55a5264c1b196b86f795a3d53cd0ab1733619fd7d1363627f622d1e4f8dfc6fbabc8037f855738e1ea3"}, 0x115) syz_io_uring_setup(0x51f, &(0x7f0000000000)={0x0, 0xddef, 0x20, 0x0, 0x367, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r5, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd=r0, 0x0, &(0x7f0000000340)="bb2e3e345672481275f2bd8925dfc5fbabb265a6c11947d89261f51d7dcf1e2395c75be9ba441734d422047fd4c8bbb1c7920f28f279e8a32ff6142e739144fca200b60fd179b9ba49cf232bbe63151d7b70bd528110424d2014c8dbc694f977061abec681d5a2d7c2287e31a63fde051ab4ec20406bef276932f19df06c6ef3d1fbce82", 0x84, 0x8}, 0x8) 01:39:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000070080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:39:34 executing program 2: perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x118d0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_mmap}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x38, 0x0, 0x65, 0x61, 0x35, 0x65, 0x30], 0x2d, [0x36, 0x0, 0x31], 0x2d, [0x38, 0x32, 0x33, 0x37], 0x2d, [0x31, 0x63, 0xa, 0x64], 0x2d, [0x39, 0x62, 0x35, 0x37, 0x35, 0x65, 0x6b, 0x66]}}}, {@smackfshat={'smackfshat', 0x3d, '$'}}]}}) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2766.516833] loop5: detected capacity change from 0 to 135266304 [ 2766.532112] loop4: detected capacity change from 0 to 16776704 [ 2766.534903] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2766.537292] FAULT_INJECTION: forcing a failure. [ 2766.537292] name failslab, interval 1, probability 0, space 0, times 0 [ 2766.540049] CPU: 1 PID: 17594 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2766.541693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2766.543670] Call Trace: [ 2766.544296] dump_stack+0x107/0x167 [ 2766.545164] should_fail.cold+0x5/0xa [ 2766.546086] ? create_object.isra.0+0x3a/0xa20 [ 2766.547172] should_failslab+0x5/0x20 [ 2766.548086] kmem_cache_alloc+0x5b/0x310 [ 2766.549051] ? io_wq_create+0x114/0xc00 [ 2766.549999] create_object.isra.0+0x3a/0xa20 [ 2766.551052] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2766.552267] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2766.553494] io_wq_create+0x6ef/0xc00 [ 2766.554418] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2766.555635] ? io_import_iovec+0x1120/0x1120 [ 2766.556680] ? io_apoll_task_func+0x2d0/0x2d0 [ 2766.557740] ? __io_req_find_next+0x300/0x300 [ 2766.558815] ? do_raw_spin_lock+0x121/0x260 [ 2766.559841] ? rwlock_bug.part.0+0x90/0x90 [ 2766.560848] __io_uring_add_tctx_node+0x2c6/0x520 [ 2766.561985] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2766.563231] ? alloc_fd+0x2e7/0x670 [ 2766.564116] io_uring_setup+0x1fbb/0x2980 [ 2766.565105] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2766.566310] ? wait_for_completion_io+0x270/0x270 [ 2766.567484] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2766.568740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2766.569961] do_syscall_64+0x33/0x40 [ 2766.570863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2766.572080] RIP: 0033:0x7fa936a9db19 [ 2766.572959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2766.577313] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2766.579136] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2766.580869] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2766.582571] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2766.584257] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2766.585944] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:39:34 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x2) [ 2766.602978] EXT4-fs (loop4): inodes count not valid: 458784 vs 32 [ 2766.626206] loop4: detected capacity change from 0 to 16776704 [ 2766.638994] EXT4-fs (loop4): inodes count not valid: 458784 vs 32 [ 2766.641466] loop5: detected capacity change from 0 to 135266304 [ 2766.646334] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:39:34 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = dup2(r0, r0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x48c0, &(0x7f0000000080)={0x0, 0xba51, 0x2, 0x2, 0x155, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x20}, 0x0, {0x0, r4}}, 0x800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:39:34 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 37) 01:39:34 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r5, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x2007, @fd_index=0xa, 0x772c, &(0x7f0000000000)=""/90, 0x5a, 0x1, 0x0, {0x0, r8}}, 0x7) 01:39:34 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) wait4(r2, &(0x7f0000000100), 0x8, &(0x7f0000000280)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x8000000) syz_io_uring_setup(0x6b5f, &(0x7f0000000340)={0x0, 0x9ab6, 0x20, 0x2, 0x169, 0x0, r0}, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000, 0xa, 0x1}, 0x9) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$LOOP_SET_STATUS(r6, 0x1267, &(0x7f00000005c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "7a0a49805b3f8a1d1f3c51f4b0a08ee8cb28f6a71b6e747131e3558bbb840da72d4b522d3fb4c54d0509ef815a97cf1f293dce3a7c7cf60f7f8790c885451378", "d050516ce943c90f758a236f4aee0d825424dc6bd419233154e824257ddd96d1"}) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x0, 0x0, 0x96, 0x7, 0x0, 0x8ee, 0x802, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0xb}, 0x40020, 0x0, 0x3, 0x2, 0x0, 0x5, 0x4, 0x0, 0x8, 0x0, 0x6}, r2, 0x7, r6, 0xa) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000001, 0x50, r0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = accept$unix(r5, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) dup(r9) getsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) syz_io_uring_submit(r7, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r8, 0x9, 0x0, 0x1, 0x1, 0x1}, 0x0) r10 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r10, 0x80047210, &(0x7f0000000040)) [ 2766.718796] FAULT_INJECTION: forcing a failure. [ 2766.718796] name failslab, interval 1, probability 0, space 0, times 0 [ 2766.720420] CPU: 0 PID: 17685 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2766.721403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2766.722586] Call Trace: [ 2766.722960] dump_stack+0x107/0x167 [ 2766.723471] should_fail.cold+0x5/0xa [ 2766.724006] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2766.724708] should_failslab+0x5/0x20 [ 2766.725251] kmem_cache_alloc_trace+0x55/0x320 [ 2766.725895] __io_uring_add_tctx_node+0x15c/0x520 [ 2766.726578] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2766.727308] ? alloc_fd+0x2e7/0x670 [ 2766.727824] io_uring_setup+0x1fbb/0x2980 [ 2766.728406] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2766.729114] ? wait_for_completion_io+0x270/0x270 [ 2766.729808] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2766.730549] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2766.731270] do_syscall_64+0x33/0x40 [ 2766.731789] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2766.732505] RIP: 0033:0x7fa936a9db19 [ 2766.733025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2766.735602] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2766.736671] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2766.737665] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2766.738667] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2766.739655] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2766.740641] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:39:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x7400000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:39:34 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x3) 01:39:34 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xfffff000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:39:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000080080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:39:34 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 38) 01:39:34 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000e, 0x80010, r0, 0x0) [ 2766.914416] loop4: detected capacity change from 0 to 16776704 [ 2766.917923] EXT4-fs (loop4): inodes count not valid: 524320 vs 32 [ 2766.929595] FAULT_INJECTION: forcing a failure. [ 2766.929595] name failslab, interval 1, probability 0, space 0, times 0 [ 2766.932579] CPU: 1 PID: 17804 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2766.934284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2766.936287] Call Trace: [ 2766.936958] dump_stack+0x107/0x167 [ 2766.937862] should_fail.cold+0x5/0xa [ 2766.938816] ? create_object.isra.0+0x3a/0xa20 [ 2766.939930] should_failslab+0x5/0x20 [ 2766.940883] kmem_cache_alloc+0x5b/0x310 [ 2766.941901] create_object.isra.0+0x3a/0xa20 [ 2766.942980] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2766.944228] kmem_cache_alloc_trace+0x151/0x320 [ 2766.945383] __io_uring_add_tctx_node+0x15c/0x520 [ 2766.946587] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2766.947863] ? alloc_fd+0x2e7/0x670 [ 2766.948772] io_uring_setup+0x1fbb/0x2980 [ 2766.949801] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2766.951069] ? wait_for_completion_io+0x270/0x270 [ 2766.952284] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2766.953581] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2766.954848] do_syscall_64+0x33/0x40 [ 2766.955768] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2766.957027] RIP: 0033:0x7fa936a9db19 [ 2766.957948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2766.962447] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2766.964288] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2766.966046] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2766.967810] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2766.969562] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2766.971297] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:39:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x7a00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:39:47 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xffffff7f}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:39:47 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 39) 01:39:47 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x1]}, 0x8) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_LABELS_MASK={0x8, 0x17, [0xffffffe0]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0xb49d, 0x51, 0x8001, 0xffff, 0x7411, 0x6, 0x7, 0x1]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x884}, 0x800) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x2, 0x4) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:39:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="20000b0080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:39:47 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:39:47 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4) 01:39:47 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS(r1, 0x1267, &(0x7f00000005c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "7a0a49805b3f8a1d1f3c51f4b0a08ee8cb28f6a71b6e747131e3558bbb840da72d4b522d3fb4c54d0509ef815a97cf1f293dce3a7c7cf60f7f8790c885451378", "d050516ce943c90f758a236f4aee0d825424dc6bd419233154e824257ddd96d1"}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@mcast1, 0x78, r4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000280)={'sit0\x00', r4, 0x2f, 0x1e, 0x20, 0x5, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x7800, 0x1, 0x9, 0x5}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x6, 0x8000, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x8, 0x80, 0x5, 0xff}}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@mcast1, 0x78, r8}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000280)={'sit0\x00', r8, 0x2f, 0x1e, 0x20, 0x5, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x7800, 0x1, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x9, 0x1, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x40, 0xff54, 0x5}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000580)={0x6a4, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x800, 0x9, 0x1, 0x4}, {0x3, 0x69, 0xdc, 0x1}, {0x6a, 0x3, 0x80, 0x2}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xc, 0x5a}]}}}, {0x3c, 0x1, @user_linkup={{{0xfffffd4e}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x2, 0x3f, 0x7}]}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa9b7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}]}}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x40}, 0x80) r10 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r10, 0x0) [ 2779.957335] FAULT_INJECTION: forcing a failure. [ 2779.957335] name failslab, interval 1, probability 0, space 0, times 0 [ 2779.960549] CPU: 0 PID: 17819 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2779.962253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2779.964286] Call Trace: [ 2779.964930] dump_stack+0x107/0x167 [ 2779.965817] should_fail.cold+0x5/0xa [ 2779.966770] ? xas_alloc+0x336/0x440 [ 2779.967707] should_failslab+0x5/0x20 [ 2779.968644] kmem_cache_alloc+0x5b/0x310 [ 2779.969654] ? stack_trace_consume_entry+0x160/0x160 [ 2779.970961] xas_alloc+0x336/0x440 [ 2779.971847] xas_create+0x34a/0x10d0 [ 2779.972790] ? kernel_text_address+0xf2/0x120 [ 2779.973906] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2779.975259] xas_store+0x8c/0x1c40 [ 2779.976184] __xa_store+0x164/0x2d0 [ 2779.977107] ? xa_delete_node+0x280/0x280 [ 2779.978154] ? trace_hardirqs_on+0x5b/0x180 [ 2779.979269] xa_store+0x31/0x50 [ 2779.980108] __io_uring_add_tctx_node+0x1cf/0x520 [ 2779.981316] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2779.982643] ? alloc_fd+0x2e7/0x670 [ 2779.983579] io_uring_setup+0x1fbb/0x2980 [ 2779.984627] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2779.985890] ? wait_for_completion_io+0x270/0x270 [ 2779.987159] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2779.988470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2779.989762] do_syscall_64+0x33/0x40 [ 2779.990742] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2779.992119] RIP: 0033:0x7fa936a9db19 [ 2779.993053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2779.997761] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2779.999837] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2780.001624] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2780.003440] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2780.005231] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2780.007026] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2780.017424] loop4: detected capacity change from 0 to 16776704 [ 2780.041657] loop5: detected capacity change from 0 to 135266304 [ 2780.047323] EXT4-fs (loop4): inodes count not valid: 720928 vs 32 [ 2780.053205] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2780.061816] loop4: detected capacity change from 0 to 16776704 [ 2780.072480] EXT4-fs (loop4): inodes count not valid: 720928 vs 32 [ 2780.074937] loop5: detected capacity change from 0 to 135266304 [ 2780.078085] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:39:47 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)={0x20, 0x1a, 0x1, 0x0, 0x0, {0x80}}, 0x3f}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:39:47 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 40) 01:39:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x8000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2780.127583] FAULT_INJECTION: forcing a failure. [ 2780.127583] name failslab, interval 1, probability 0, space 0, times 0 [ 2780.129013] CPU: 1 PID: 17942 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2780.129856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2780.130880] Call Trace: [ 2780.131207] dump_stack+0x107/0x167 [ 2780.131654] should_fail.cold+0x5/0xa [ 2780.132124] ? create_object.isra.0+0x3a/0xa20 [ 2780.132685] should_failslab+0x5/0x20 [ 2780.133160] kmem_cache_alloc+0x5b/0x310 [ 2780.133662] create_object.isra.0+0x3a/0xa20 [ 2780.134212] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2780.134837] kmem_cache_alloc+0x159/0x310 [ 2780.135350] xas_alloc+0x336/0x440 [ 2780.135787] xas_create+0x34a/0x10d0 [ 2780.136252] ? kernel_text_address+0xf2/0x120 [ 2780.136809] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2780.137461] xas_store+0x8c/0x1c40 [ 2780.137909] __xa_store+0x164/0x2d0 [ 2780.138366] ? xa_delete_node+0x280/0x280 [ 2780.138879] ? trace_hardirqs_on+0x5b/0x180 [ 2780.139411] xa_store+0x31/0x50 [ 2780.139820] __io_uring_add_tctx_node+0x1cf/0x520 [ 2780.140406] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2780.141041] ? alloc_fd+0x2e7/0x670 [ 2780.141494] io_uring_setup+0x1fbb/0x2980 [ 2780.142010] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2780.142636] ? wait_for_completion_io+0x270/0x270 [ 2780.143234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2780.143881] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2780.144512] do_syscall_64+0x33/0x40 [ 2780.144967] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2780.145592] RIP: 0033:0x7fa936a9db19 [ 2780.146047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2780.148284] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2780.149210] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2780.150077] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2780.150956] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2780.151818] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2780.152680] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2780.178865] loop5: detected capacity change from 0 to 135266304 01:39:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000180080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:39:48 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:39:48 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x5) 01:39:48 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r4, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r9, r10, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x0, 0x4}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r11, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r2, r8, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x1}, 0x1) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000008, 0x30, r0, 0x10000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_submit(r1, r12, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, 0xffffffffffffffff, 0x0, r0}, 0x6) [ 2780.216787] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2780.234580] loop4: detected capacity change from 0 to 16776704 [ 2780.242863] EXT4-fs (loop4): inodes count not valid: 1572896 vs 32 [ 2780.253732] loop5: detected capacity change from 0 to 135266304 01:39:48 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r4, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x2, 0x2de, 0x0, 0x1ff, 0x4}, 0xfffffff7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:39:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="20001c0080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2780.301282] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:39:48 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xffffff9e}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:39:48 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 41) 01:39:48 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x59c5, &(0x7f0000000000)={0x0, 0x40ff, 0x0, 0x1, 0x397, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffffc, &(0x7f0000000080)) 01:39:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000690080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:39:48 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6) [ 2780.411984] FAULT_INJECTION: forcing a failure. [ 2780.411984] name failslab, interval 1, probability 0, space 0, times 0 [ 2780.413436] CPU: 1 PID: 18055 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2780.414237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2780.415186] Call Trace: [ 2780.415494] dump_stack+0x107/0x167 [ 2780.415909] should_fail.cold+0x5/0xa [ 2780.416346] ? xas_alloc+0x336/0x440 [ 2780.416780] should_failslab+0x5/0x20 [ 2780.417219] kmem_cache_alloc+0x5b/0x310 [ 2780.417686] xas_alloc+0x336/0x440 [ 2780.418095] xas_create+0x34a/0x10d0 [ 2780.418538] ? kernel_text_address+0xf2/0x120 [ 2780.419055] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2780.419661] xas_store+0x8c/0x1c40 [ 2780.420080] __xa_store+0x164/0x2d0 [ 2780.420497] ? xa_delete_node+0x280/0x280 [ 2780.420975] ? trace_hardirqs_on+0x5b/0x180 [ 2780.421489] xa_store+0x31/0x50 [ 2780.421874] __io_uring_add_tctx_node+0x1cf/0x520 [ 2780.422436] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2780.423030] ? alloc_fd+0x2e7/0x670 [ 2780.423452] io_uring_setup+0x1fbb/0x2980 [ 2780.423928] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2780.424505] ? wait_for_completion_io+0x270/0x270 [ 2780.425063] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2780.425664] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2780.426269] do_syscall_64+0x33/0x40 [ 2780.426695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2780.427286] RIP: 0033:0x7fa936a9db19 [ 2780.427709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2780.429808] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2780.430685] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2780.431495] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2780.432308] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2780.433118] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2780.433929] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:40:03 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$LOOP_SET_STATUS(r2, 0x1267, &(0x7f00000005c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "7a0a49805b3f8a1d1f3c51f4b0a08ee8cb28f6a71b6e747131e3558bbb840da72d4b522d3fb4c54d0509ef815a97cf1f293dce3a7c7cf60f7f8790c885451378", "d050516ce943c90f758a236f4aee0d825424dc6bd419233154e824257ddd96d1"}) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x2, 0x1, 0x8, 0x9, 0x0, 0x94b, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0xf}, 0x1004, 0x8000, 0x2, 0x8, 0x0, 0x3, 0x1, 0x0, 0x400, 0x0, 0x8}, r0, 0x5, r2, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = fork() ptrace(0x10, r3) r4 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x200, 0x20000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x40, 0x5, 0x6, 0x87, 0x0, 0x81, 0x10240, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp, 0xad9, 0x2, 0xb61b, 0x0, 0xffffffffffffffd5, 0x8000005, 0x0, 0x0, 0x8, 0x0, 0xdf}, r3, 0x5, r4, 0x318627702fed40b2) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:40:03 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xfffffff0}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:40:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x8cffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:40:03 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 42) 01:40:03 executing program 6: futex(&(0x7f0000000000)=0x1, 0x8, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x2) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:40:03 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x7) 01:40:03 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x6d78, 0xfe08, 0x1, &(0x7f0000000000)={[0x2]}, 0x8) 01:40:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000380000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2795.818711] FAULT_INJECTION: forcing a failure. [ 2795.818711] name failslab, interval 1, probability 0, space 0, times 0 [ 2795.821356] CPU: 1 PID: 18097 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2795.823010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2795.824975] Call Trace: [ 2795.825609] dump_stack+0x107/0x167 [ 2795.826488] should_fail.cold+0x5/0xa [ 2795.827398] ? create_object.isra.0+0x3a/0xa20 [ 2795.828482] should_failslab+0x5/0x20 [ 2795.829389] kmem_cache_alloc+0x5b/0x310 [ 2795.830366] ? mark_held_locks+0x9e/0xe0 [ 2795.831332] create_object.isra.0+0x3a/0xa20 [ 2795.832369] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2795.833571] kmem_cache_alloc+0x159/0x310 [ 2795.834567] xas_alloc+0x336/0x440 [ 2795.835408] xas_create+0x34a/0x10d0 [ 2795.836299] ? kernel_text_address+0xf2/0x120 [ 2795.837354] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2795.838602] xas_store+0x8c/0x1c40 [ 2795.839461] __xa_store+0x164/0x2d0 [ 2795.840327] ? xa_delete_node+0x280/0x280 [ 2795.841313] ? trace_hardirqs_on+0x5b/0x180 [ 2795.842338] xa_store+0x31/0x50 [ 2795.843121] __io_uring_add_tctx_node+0x1cf/0x520 [ 2795.844250] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2795.845474] ? alloc_fd+0x2e7/0x670 [ 2795.846340] io_uring_setup+0x1fbb/0x2980 [ 2795.847331] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2795.848514] ? wait_for_completion_io+0x270/0x270 [ 2795.849670] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2795.850912] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2795.852126] do_syscall_64+0x33/0x40 [ 2795.852993] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2795.854186] RIP: 0033:0x7fa936a9db19 [ 2795.855063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2795.859349] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2795.861123] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2795.862789] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2795.864453] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2795.866117] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2795.867795] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2795.870980] loop4: detected capacity change from 0 to 16776704 [ 2795.897613] loop5: detected capacity change from 0 to 135266304 [ 2795.903988] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2795.912415] EXT4-fs (loop4): inodes count not valid: 50331680 vs 32 [ 2795.920551] loop5: detected capacity change from 0 to 135266304 [ 2795.926129] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2795.937073] loop4: detected capacity change from 0 to 16776704 [ 2795.943453] EXT4-fs (loop4): inodes count not valid: 50331680 vs 32 01:40:18 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x8000000000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:40:18 executing program 6: syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x93a, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x19f}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x4, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x15, 0x3, 0x82}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x1, 0x5, 0x8, 0x8, 0x80}, 0x6f, &(0x7f0000000340)={0x5, 0xf, 0x6f, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0xe, 0xa9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x8, 0x4}, @generic={0x59, 0x10, 0xb, "7a879840c17be28e9468cf3bab641a964e634382dbd53ecd650378282351ae7fc431f12619ba2d3141f280c81d71a69a39f80e415586f7803f7a8c96b89b6c6f35bf76f43184ab6bda88521dbd3d56d9cbd5816a94ad"}]}, 0x7, [{0x9e, &(0x7f00000003c0)=@string={0x9e, 0x3, "d9d2426c7fa24ad443f37c46d88dc9b49508bc0b1cdc89e84dadabc13c3f18d647046aedc27fc64f8e5ccd555a583a636daf1476be0c16a90187470da9019c7ace41df22885a111451add1f69c5fece255cf87d6a0bd7abdbc2548b715173b1778918ded0598a4e5094034b5092ce1918e4ab8ec288f6a6cf3c9c084144acae26a70a75a4c79dfc243234ff05da6fc2a441d33c4ea5dc538ee1a0e68"}}, {0x2a, &(0x7f00000000c0)=@string={0x2a, 0x3, "19013f6b64415689563107550e88f5e7ead98c460e3240206904f0b713d76132afd2c6216507b0b5"}}, {0x3f, &(0x7f0000000280)=@string={0x3f, 0x3, "fe140a5863e9207530a6a44382fc13e5a90a7612217d63454bfd8701b3c8b8435ab7b4880ffd444e234711fa729f9197368c0f484c8b165fa2240f5714"}}, {0x2f, &(0x7f0000000480)=@string={0x2f, 0x3, "fc99faea2e8296e6e9f46b1f13a43000d89c4570ceffe9680999949769bf7d779cded522bfebc8a27629063d00"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x83e}}, {0x3a, &(0x7f0000000540)=@string={0x3a, 0x3, "87302fa57bf73ca6b9bda5367fdb52077cfd26345e175a47dcde25c8b209a62af7b317932e7a8892f9b9734f7014bbc616db6ec60c77c8e6"}}]}) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_usb_connect$uac1(0x5, 0xb9, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x4, 0x0, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0x40}, [@extension_unit={0xd, 0x24, 0x8, 0x5, 0xcf0, 0x6, "bb2d16291482"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x206, 0x5, 0x76, 0x7f9, 0x8, 0x7b}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x6, 0x3, [0x7, 0x3, 0x4]}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x6, 0x6, [0x2, 0x3, 0xf, 0x3, 0x4, 0x1], 0x8d}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x4, 0xa4, "17"}, @processing_unit={0x7, 0x24, 0x7, 0x6, 0x1, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xa4, 0x2, 0x81, {0x7, 0x25, 0x1, 0x2, 0x1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x4, 0x7, {0x7, 0x25, 0x1, 0x80, 0x6, 0x101}}}}}}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x110, 0x5, 0x2, 0xf9, 0x40, 0x9}, 0x5, &(0x7f0000000740)={0x5, 0xf, 0x5}, 0x4, [{0x30, &(0x7f0000000800)=@string={0x30, 0x3, "dd424b632735fef857e4effc66a65bdae05a1d8c63f75cb2c1f381a4b6e241706f4cd2347ed00872f9c9a15691e4"}}, {0x3a, &(0x7f0000000880)=@string={0x3a, 0x3, "9699e5528e5be950e547f39ceb9a56dd10da9e172f6e4dc11a3eef3c2c32d48601fa5d7509824639818aa052b09f9f23b4199e72f2ca6faf"}}, {0x33, &(0x7f00000008c0)=@string={0x33, 0x3, "e093f504a08c44add20ea94097b00d749c7d524c6009374d337d1ecd538cc531fe8e50e9c1bf2de4897e5bff37a601b358"}}, {0x59, &(0x7f0000001900)=@string={0x59, 0x3, "90f172fbb7ad3a44d72bfaaf0444fe2386d6bee60f24aa7ddcb1fd9882b602851bc55f48d19b1f73a35de9f55a842c47804d370c093ba6a04ff60ee3cd4db62439498d01dac65e8a750c0ff108aff67b971d286617420b"}}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r2, r3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_usb_connect(0x3, 0xe57, &(0x7f0000000940)={{0x12, 0x1, 0x300, 0xf9, 0x46, 0xbc, 0x20, 0x1e0e, 0x9100, 0xb313, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe45, 0x3, 0xff, 0x2, 0x80, 0x1f, [{{0x9, 0x4, 0xd0, 0x5, 0xf, 0x3f, 0xb1, 0x9d, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0xff}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x301, 0x6, 0x4, 0x51}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x6, 0x4, [0x3, 0xa, 0x7, 0x1], 0x7}]}], [{{0x9, 0x5, 0x2, 0x10, 0x20, 0xff, 0x2, 0xc9, [@generic={0xc9, 0xa, "3512094d0be135dffa272294e0c65278c272cfbaf80db2263e74d2d75c02f67961037112fa99877bfdb0227c58681bbb1205e3407bf4e330298bd08aee48bf003fb78180f1f94ee2881640a5ca6df529838b833dca84de8fbd55e51d0dca6fc2fd91044a4e3e58ebd611916fe585e5e4baf4bc40139e1193baba004a0b05cd676d80b5a02204ff2fd1bdbfa9992d95b13a6b3c98dda62eaa1079bbadf5bd2d8a42f1e5138d827a9fcc6b1b57b353f389c9cfac70c132019725eae1e86fdaeda4e350d8363cf4d8"}, @generic={0xcd, 0x30, "1952476bdf5898b71dae4ec8e4411adfc30591c3f00000f60a9652c24d1a2910856b81669439334bc54df424123992ba9de46092fb9ac4b4dac840a2c9d2176cad0abe22069259057df0f599c12677fcde880abf5ad058afd7359588e1d09507a776fbfd5c407c306d64f21b4190fd991b93ae4a530e7add4c3ac21f68f3adc5369d1e8da440dcc1f159b21c7ea525712aa263b8bb6e862da5ba6018b2a93451a0f1a30dfb87f4f715900c916cc1ec02e20bef53d49b5a7befb8826c09f036fd817f01ae3029b5feb9a321"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x58, 0x62, 0x1, 0x40}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x98, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x36, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1f, 0x5}]}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x5, 0x93, 0x9}}, {{0x9, 0x5, 0x4ce0f2eab32b1bc0, 0x4, 0x200, 0xbd, 0x1f, 0x8, [@generic={0x57, 0x2a, "bbebbb1c3a3bdcf37be904fb48a66c998675bcbc187b46fd44f89d339d721eb1c821ac6c198d3775b59fadb2a363b507940e70f4c5b389e9d5dda814e8ee2fcec87e8ba47b890d5a52af363c390182a029789886cf"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x5}]}}, {{0x9, 0x5, 0x2, 0x18, 0x40, 0x1, 0x91, 0x1f}}, {{0x9, 0x5, 0x4, 0x8, 0x40, 0x1, 0x81, 0x6}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x8, 0xe, 0xff, [@generic={0xc1, 0x23, "3909c8bfbba84b507092a2e9594035cf7f93d1d62b03c762b111b64df0c32573d5338d525b0ec14f481f0d7f8e70c6845cdd05af0be7960fb96badfef28cf3acb1b23d6d7440d7253e5ccdee0977f8e202a16e080bbd4724ada0bff684c57cd4e6e1f519e76ef93cc233413e49a6cac5679bf1000818e5d35bc7a6c27deb69f239ec616c1eb3842b2bb45faec966e40d816be0e61f9f90f08c1caf3cfa00c7e0e9815c7587c818a562604e0eb0a707e26cbd59f222d1caa63f0ab25f45464a"}, @generic={0xf7, 0x6, "7a21e18ff79d8ccf8ae4bf580462e5f023a009b02ac555e4db9a5f32a4117b50c0a9d5398daf9c687f47e64931d2664c0fb7af91a4f6d3c1af10146384a6ebfbaed30f2de1befaaaa46e69440fa8ae094c0e445e2ec6e37f0bcc2802154fd9c6c679094c86e65adfbd4179ee10f199ff362b7a429f63bf30ac9fd1a924a68db2d56d8918386ddb7634912f5207f5bf1fa6d727b5171942a4c965bda3614901edf245c25c3655aaa68b4fffaa483c5256864ea8fdfd2a05c20501448f6cea0c132e7ac7602c3839a7816e7fe9a665bbe6219e496528cf75d3fe9ab9e09585cd5233534223444a6bf58c93726b31522fdc0093922f17"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x80, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfe, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x6}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x8, 0x0, 0x1, [@generic={0xe6, 0x21, "e956b3ffc08c78f38e3d821ce35b33dfa5ac34433929fd2084c44e524f59720022b95816eae537f88d848135bb41843fe9590be8e652d114cfb022b663c480aab15d7bf972b03e59ef0eb0400f90397a100f574f12235c3693cf6411649f04fb104dfa7b1e7cbfdd520657fea19ea65b278b6df0891fe207f49a54801ccd9927c553b82be65833abed5ee63ce1257e6b376fa0c757d5a008c1eb53ccf100d41338a709c73fdb6e888b539f4b6c9f33d4d078bd5801b41e5d7a21c3872c69ca4d8428c741d006069fe259b3d69fa2c87d0eed2f1bfe2f8d9807cb4685525a1c86910ab9a3"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x88, 0x5}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x20, 0x1f, 0x4, [@generic={0xdf, 0xf, "d3882fc595409e13f92eac8dd156c19631cc812a5feacd4472f016e3df2dcc97f7673499769b1e6537d4ad8b6f58269de019836898bcb98d1ed497a8d7f3d65ade4b5f4ce3a82bd7dda85082f6a7d9385ff6aeed43a05735cd18e9fb8b4b9d9d29f18c2c9a2807568957b260322e2f60778886b3e21e06e3b84c338351b14490bd92446a0bed40bf37c230498e52b0538fdb18d1c8a5f6d2ba4731d2fb7e7f5e03f9aeca642ed7b6a7302a7abc616ec33e85ef4647159af83deb2ea6dd62021999e86e2e8c9999b8a69c3fcadc75ae30888fc25916b09df2e4e3eda1b9"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x8000}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x8, 0x6, 0x9, [@generic={0x3f, 0x23, "657c9f9ea45a8e75d66130f0198d90a1319b0805c277a683eea1bd043f6e18b316d3a8c0ebb5a015c1fd7944dd1b2c0058ffcf249a35f78449deca0ada"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x20, 0xff, 0x81}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x2a, 0x78, 0x3, [@generic={0x3c, 0x7, "2d1f28c7479478166fbc3feb079f400aed491fe54aa550cef67e33e847c6f7ea734e2c84f6bf76a9239d46a4bad7baa1a95a81598a998cb9d5e7"}, @generic={0x54, 0x7, "f9621c3d26b9b4665e12180e4d86e8b297677c6612972a86e76734f3a0e66aaa0cc59d991b179a5711b375c032dbcdc3bd72a34c8f9e6b7f568a74514514e603e991917fbbd842341fdd68d1f38db9958de9"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x98, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5f, 0x800}, @generic={0xda, 0x11, "6b9c619ba3c38bf182e31c3cbdce89d0f0e170d30a2858a4d637d86cb6c3a084bf776803c981fa213a10501db14b6bb4db3536b1fba2b34c4109bbf9f3308714b5c9251d42d024c05a71bf7ffd14ad6111fb07dd893090cd368772273cd3fc022e28ac6348bf4e7d9d556c3367af0caa2c744f8a35786afe0bb448c219c25bbd03633a85f64465b7e2e3bbef35d785578bafe4de701b07fc504de06f1d23973d11e7e8552a7278902cb2bfa7bddb8449bd78ba13cc0ea8a10a5a5c572b49e9cf6948f504bafde1086efdb486847563a87afc4b790c903f83"}]}}]}}, {{0x9, 0x4, 0xf6, 0x4, 0xe, 0x87, 0xa9, 0x6c, 0x81, [@uac_as], [{{0x9, 0x5, 0xd, 0x0, 0x10, 0x7, 0x3, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x3}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x5, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x7f, 0x1, 0x0, [@generic={0x1b, 0x73df5a80fae79ca, "18b720aea4186e39cef86e510a84d8fef3120705120b544c43"}]}}, {{0x9, 0x5, 0x45, 0x0, 0x200, 0x9, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0x7c, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x182, 0x9, 0x3720}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x7, 0x3, 0x2}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x1, 0x1, 0x40, [@generic={0x8f, 0x22, "2c3b090f99f53712f16f493f277bb0100996f8c01e10391ed9b0df6fd0a303a22cc6faf32e9ba050baad67a372c0df3fb6c7203ac684bb15ad1951ca40b18b633bdb66e7d51587a4303379ef802b7a7a67a4ab8b1005a7e9a188118f15ec7961269d4588e2f18ec19397c77d7b0e1ece3d09cad7631f2ae63639be9f25b910b5a56fad9aced4c4ca29f1abf761"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x69, 0x37f}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x80, 0x1f, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x6}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0xb9, 0x80, 0xfe, [@generic={0x4e, 0x11, "a80a9bbb5f71480e1a41e23b20ac177456d80a3114b2649f33d6af35a906c31f79ac759aea458aa088404f8df991a6a8417d375febb488cdd7decc34a92085abf12baff096015feb281ac4ad"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x0, 0x1, 0x52, 0x6c}}, {{0x9, 0x5, 0xd, 0x1, 0x10, 0x1, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x55, 0xfff}, @generic={0x60, 0x4, "d97c103bce184161a47ebdd3efb0a26038e0b4185e55761e8b6088e154b58a820516832b0ab4ecff7f31b2fcbbe5572348ddceb83149807459e59897d8dff0aaa07ab04d8d9c75ec9f87e7fb8bdddc43963d178562de362ea5839cd7a840"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x4d, 0x7, 0x0, [@generic={0x90, 0x22, "519e0f2e8ce5ab54116794e424db8da8c454ee27e25777c3f290079a85587b6b0ff1d5bdaba061e69a0ab4c162cea97e914f9125c23016684405b3bdb9737e0df8b9078bc3ef8f5724bfc47a3e8ef57b6292e8d04b1ab35353e202da91ecf8ca19bf01b98e7c207a757ad7b19ce08c959386433d7bc6431ab274586a00b781e673297beba73fbe0fb59f60278235"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x1, 0x0, 0xc0, [@generic={0xb6, 0x6, "4a09151ce6cc8d5c077cf37142ff25e40780676b9daa1a9c4b7211b23c174bb6a98c7d8534f50d52952d342d88fb45ad02ff546e183f8efc97cda3db1214002917978ed31c8e71bc405fd8f0e0aa4e28af3b7cfa2ea9b183e1eada1481fd239dd58b2f69fc3d2d2895549a7cd26eb639beedd95bae8c230545a660875a9525108ea85831b3bf5c1d2d1ac69f69d307fd51c280b85b8bc7eb87317298ecde3af998961a443970f0d8783b06031a2920d91344fafc"}, @generic={0xb6, 0xd, "96df86c22640ff206c02618d778ef47fae5e0128ed1c3f4dcc207e9e14c11430c02e71efca899c1ceb7ed3be716aa350a9cb4e3c3a21d48991d3b3a031656ee1678edd2401b01fcbb4169c103b92f7fcff27a50af43aa6696e83fca98f7f6b7cdda6574dc49059e9bd9f8396ac86402af49dbbca737d7b2d28942eee07ae8b8aa3a687a536e45309f99a44a57fc3d758c8119332db1452742b3fd64e8af8912171550434c146135cead9492c332f7876896d9dab"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x3f, 0x1, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x40}]}}]}}, {{0x9, 0x4, 0xdc, 0x3, 0x9, 0x90, 0x7b, 0xdd, 0xf8, [], [{{0x9, 0x5, 0xc, 0x10, 0x200, 0x66, 0x8, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x7}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x5, 0x6, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0xfff}, @generic={0xdb, 0x9, "792fb91040d5d6023ded89bd9ea30ad4405712c76d7c775ed1b363424061588da1b7378018b411387ffd00dbf219de3bf1303840b99cdecb7e6ad32097390cb428b2b1060476959e45e2b48ed523473702574b025392699874484074f8ae16382a04ae5968369a07e553b2991c0dc912e1a9420fa14c8fff98818a2ee7347477b2f7522aceec487aafed517fea1799717c13f9ec5586e2d21bb86263e1373e857661848ebaae1f34be6ff8bdca520e8f02f2fe733eecff25d1a94759ac6ee0da12e97d7ed2711b2e1ea568fbf67db696613283d18702840540"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x20, 0x4, 0x7, 0x4, [@generic={0x5d, 0x9, "c8983ba3db0564f47b1e520d4f40a5326a16d974b09ffa961b37e4fe4740a68d96550bdbde2ca9cae9e67a0daeddccb21af11f646308ac6d6c4d1c28efa4307bfc2881fc0e18e15a9fbc3d632b5d37fa477a77e4fd9c0d12705089"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x600, 0x0, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xd, 0x5, 0x7f, [@generic={0x75, 0xd, "c6fc8a946b63771b0dd41b903abe92f4f097d4438cdd6f45a5e4b583228ec2deac90ce5542531fe8a4ddfe9306e7e56346f5fea06ce2bfdccb6194105be11d0582c19535031535d86bff1c8c20d130047380f7e6d6fdcf0861f189537965cae9e9779521f2392753350c2757ff01b250ba5cbb"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x9}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x1f, 0x5, 0x7}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x11, 0x3f, 0x3f}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x0, 0x40, 0x4}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xd8, 0x5, 0x9, [@generic={0x11, 0x8, "118e5437d9caeaa3f42dfbd6eb87dc"}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0xac91352e5e9a1fc6, 0x0, 0x81, 0x8, 0xff, 0x4}, 0x112, &(0x7f00000017c0)={0x5, 0xf, 0x112, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "44b1d1d6a3b75a505f6916fbae17973b"}, @generic={0xf9, 0x10, 0xb, "eb711cd16c2cb447c9b378f354e8ee5a3453f6f658d7a4233f7e362bbc8b6ec82c5ba271c99cc99cb4fd690b8604f11af16f86a842fe811c46fb986170343b41102d3c0de8fe07ae6da044eea0be3851d3801da206ac72fa0b856c1ee5796191ac5dd8f31e11d13fec5476b058089a0bec236b35ad58d4f14b22f2503adf516f16dcdd2fdd8c9e82c52578d632f9feeb7a2880cf42b3bded66427d3930b10501f689e06bd71388b0aa8bdb14074b09f8d416bbde627b79b5b2da6efe0538b7457d4fea64b77d31cef5a6d11c5a0e3dec96c3d6d2cdc8be722efd6233e65a10005a4879719b5eaecf70e70d747ccd13e5f6c24ee70715"}]}, 0x1, [{0x3c, &(0x7f0000000780)=@string={0x3c, 0x3, "63309a864ce52bdafd8dbb35b9c37d796e057cc0384c052c2c4e4ab9ca8a48adf7691dc7c5336f83172908a996c0751c01ba5a762a1ee4f5eb2f"}}]}) r5 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r5, 0xff, 0x1, 0x0, 0x3, 0x0, {0x1, r6}}, 0x8001) 01:40:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup2(r1, r1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x9, 0x20, 0x6, 0x0, 0x78, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_config_ext={0xffff000000000000, 0xffffffffffffff90}, 0x8000, 0x1, 0x2, 0x7, 0x7, 0x67f5, 0x3ed, 0x0, 0x10000, 0x0, 0x2}, r0, 0x3, r1, 0x9) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:40:18 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 43) 01:40:18 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffe}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = dup3(r0, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x1800002, 0x10, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x249a4b91e0e87de3, 0x2010, r2, 0x10000000) 01:40:18 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x8) [ 2810.810034] FAULT_INJECTION: forcing a failure. [ 2810.810034] name failslab, interval 1, probability 0, space 0, times 0 [ 2810.812726] CPU: 1 PID: 18225 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2810.814388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2810.816393] Call Trace: [ 2810.817027] dump_stack+0x107/0x167 [ 2810.817913] should_fail.cold+0x5/0xa [ 2810.818849] ? xas_alloc+0x336/0x440 [ 2810.819759] should_failslab+0x5/0x20 [ 2810.820683] kmem_cache_alloc+0x5b/0x310 [ 2810.821673] xas_alloc+0x336/0x440 01:40:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x97ffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:40:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000800480000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2810.822548] xas_create+0x34a/0x10d0 [ 2810.823711] ? kernel_text_address+0xf2/0x120 [ 2810.824795] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2810.826066] xas_store+0x8c/0x1c40 [ 2810.826952] __xa_store+0x164/0x2d0 [ 2810.827830] ? xa_delete_node+0x280/0x280 [ 2810.828838] ? trace_hardirqs_on+0x5b/0x180 [ 2810.829888] xa_store+0x31/0x50 [ 2810.830701] __io_uring_add_tctx_node+0x1cf/0x520 [ 2810.831865] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2810.833129] ? alloc_fd+0x2e7/0x670 [ 2810.834021] io_uring_setup+0x1fbb/0x2980 [ 2810.835038] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2810.836255] ? wait_for_completion_io+0x270/0x270 [ 2810.837428] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2810.838690] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2810.839925] do_syscall_64+0x33/0x40 [ 2810.840813] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2810.842035] RIP: 0033:0x7fa936a9db19 [ 2810.842936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2810.843263] loop4: detected capacity change from 0 to 16776704 [ 2810.847336] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2810.847395] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2810.851774] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2810.853485] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2810.855197] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2810.856898] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2810.858930] EXT4-fs (loop4): inodes count not valid: 75497504 vs 32 01:40:18 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10) [ 2810.888240] loop4: detected capacity change from 0 to 16776704 [ 2810.908298] loop5: detected capacity change from 0 to 135266304 [ 2810.917566] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:40:18 executing program 7: syncfs(0xffffffffffffffff) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup2(r0, r0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x742, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000180000b3", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r2 = syz_io_uring_setup(0x4003, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 01:40:18 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 44) [ 2810.947584] loop5: detected capacity change from 0 to 135266304 [ 2810.952641] EXT4-fs (loop4): inodes count not valid: 75497504 vs 32 01:40:18 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x60) 01:40:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000580000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2810.975843] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:40:18 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x300) [ 2811.019274] FAULT_INJECTION: forcing a failure. [ 2811.019274] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.022469] CPU: 1 PID: 18355 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2811.024041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2811.025890] Call Trace: [ 2811.026482] dump_stack+0x107/0x167 [ 2811.027306] should_fail.cold+0x5/0xa [ 2811.028158] ? create_object.isra.0+0x3a/0xa20 [ 2811.029183] should_failslab+0x5/0x20 [ 2811.030032] kmem_cache_alloc+0x5b/0x310 [ 2811.030949] ? mark_held_locks+0x9e/0xe0 [ 2811.031851] create_object.isra.0+0x3a/0xa20 [ 2811.032821] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2811.033947] kmem_cache_alloc+0x159/0x310 [ 2811.034883] xas_alloc+0x336/0x440 [ 2811.035671] xas_create+0x34a/0x10d0 [ 2811.036503] ? kernel_text_address+0xf2/0x120 [ 2811.037493] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2811.038664] xas_store+0x8c/0x1c40 [ 2811.039468] __xa_store+0x164/0x2d0 [ 2811.040275] ? xa_delete_node+0x280/0x280 [ 2811.041201] ? trace_hardirqs_on+0x5b/0x180 [ 2811.042160] xa_store+0x31/0x50 [ 2811.042901] __io_uring_add_tctx_node+0x1cf/0x520 [ 2811.043968] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2811.045125] ? alloc_fd+0x2e7/0x670 [ 2811.045939] io_uring_setup+0x1fbb/0x2980 [ 2811.046874] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2811.047989] ? wait_for_completion_io+0x270/0x270 [ 2811.049068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2811.050218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2811.051363] do_syscall_64+0x33/0x40 [ 2811.052180] entry_SYSCALL_64_after_hwframe+0x67/0xd1 01:40:18 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = fork() ptrace(0x10, r2) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000080)={0x2, 0xfffffffffffffffc}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x93, 0x3b, 0x8, 0x81, 0x0, 0x9, 0xc000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x40, 0x5}, 0x1190, 0x9, 0x0, 0x5, 0x0, 0x8001, 0x2, 0x0, 0x1, 0x0, 0x2}, r2, 0x5, r1, 0x8) 01:40:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xf6ffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2811.053304] RIP: 0033:0x7fa936a9db19 [ 2811.054311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2811.058361] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2811.060037] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2811.061597] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2811.063168] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2811.064728] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2811.066277] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2811.121294] loop5: detected capacity change from 0 to 135266304 [ 2811.125885] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2811.140051] loop5: detected capacity change from 0 to 135266304 [ 2811.142788] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:40:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000680000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:40:33 executing program 6: r0 = eventfd(0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2000, @fd=r0, 0x200, 0x6, 0x8, 0x4, 0xcbc939cdb0ce191d}, 0x5) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 01:40:33 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x5, 0x7f, 0x0, 0x4, 0x0, 0x2, 0x1413, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x6, 0x8001}, 0x4000, 0x7fff, 0x101, 0x5, 0x9, 0x8001, 0xfff8, 0x0, 0x10001}, r1, 0xa, r0, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4500000000010300000000000000000007000008300001802c00018014000000000000aa1400040000000000000000000000000000000001"], 0x44}}, 0x40800) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fallocate(r2, 0x2d, 0xfffffffffffffe01, 0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:40:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xf9fdffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:40:33 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) 01:40:33 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x500) 01:40:33 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 45) 01:40:33 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x40030000000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2826.113012] FAULT_INJECTION: forcing a failure. [ 2826.113012] name failslab, interval 1, probability 0, space 0, times 0 [ 2826.115803] CPU: 1 PID: 18486 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2826.117407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2826.119323] Call Trace: [ 2826.119938] dump_stack+0x107/0x167 [ 2826.120784] should_fail.cold+0x5/0xa [ 2826.121668] ? xas_alloc+0x336/0x440 [ 2826.122534] should_failslab+0x5/0x20 [ 2826.123420] kmem_cache_alloc+0x5b/0x310 [ 2826.124380] xas_alloc+0x336/0x440 [ 2826.125208] xas_create+0x34a/0x10d0 [ 2826.126085] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 2826.127251] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2826.128470] xas_store+0x8c/0x1c40 [ 2826.129309] __xa_store+0x164/0x2d0 [ 2826.130155] ? xa_delete_node+0x280/0x280 [ 2826.131129] ? trace_hardirqs_on+0x5b/0x180 [ 2826.132135] xa_store+0x31/0x50 [ 2826.132900] __io_uring_add_tctx_node+0x1cf/0x520 [ 2826.134029] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2826.135255] ? alloc_fd+0x2e7/0x670 [ 2826.136109] io_uring_setup+0x1fbb/0x2980 [ 2826.137082] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2826.138255] ? wait_for_completion_io+0x270/0x270 [ 2826.139402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2826.140610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2826.141802] do_syscall_64+0x33/0x40 [ 2826.142669] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2826.143872] RIP: 0033:0x7fa936a9db19 [ 2826.144737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2826.149010] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2826.150773] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2826.152417] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2826.154064] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2826.155724] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2826.157382] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2826.163842] loop4: detected capacity change from 0 to 16776704 [ 2826.185246] loop5: detected capacity change from 0 to 135266304 [ 2826.192869] EXT4-fs (loop4): inodes count not valid: 100663328 vs 32 [ 2826.203845] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2826.225762] loop4: detected capacity change from 0 to 16776704 01:40:34 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x600) 01:40:34 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="8028cafe4031a58b05d44af33068e25e9deda9b518964fe4fb27dcf4fb415b0ca2cb9d28f5442d522773a5175ed4ae001c3dbe5020c4306c5b33f95300cabfe0a7d8aefeed0b560e6166e94c2585a105519047ffe0ca67cabb47470cacb6bbe7d8d6f2edcc4094df4d6e8c7ccf902a0dbc9394afa9abef5d7a9862b2ef3a84a7ae6d356464e04a69e1ef8673d4f46d4aa0f914770e0404b0410e2097822e427ca31180ff1982e41de15075e8596fc82a", 0xb0, 0x7f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:40:34 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r4, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) syz_io_uring_submit(r2, r1, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@generic={0x15, "246ef644910e72285af3d1d97bfca2340a12022e47e875f83f6d45bbd9ec73e6f0e114229042147ebe397581836d3aba8d9cbd3936634ccc86684033a137d686ac437c47b91b93aef16d8275a4164e4bbb303c0ce23e012c2310a7a54e7c56cb3cfd4e938a8acd75dc459fac1b57bd8afaca587d3a6c8bc975bd576e1aa1"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="0fa0d2272a67f2f74502c06b1b41d3efb7a0b41178134c30157ccaa658c2b1a85c40dd0f80d56d279d7e21e4d3dcc576b6fa", 0x32}, {&(0x7f00000000c0)="f79ecaba4a339f761c261f1034d9aadba27a679227c8959210008642439e2d55b1c5869ecc6ef2", 0x27}, {&(0x7f0000000200)="a4bd5c3a4663b3b19332d5cd264e51b689e86be091cd1c2bc67118d67ad0e962566ebba06afc0c0e49123d07557187711061b53c3fc45e6baada3ecb3aa8948529a0eec3842aa389fc9b70028ab5cd2e06bddeeea964901f68e3efb0", 0x5c}, {&(0x7f0000000280)="7ea762a5e5bed6ed3301b0636c0e8a", 0xf}, {&(0x7f00000002c0)="35d892f6947685b5b014a10171ea92512bd778ec7f772f56dce9da0c791da108e07260e8959a62d3d94231b0254cf40fd24fecb1406b1e0f9cb81959783c24e3e0ecae7d90161c333cd1865dc5cfee8dfb98b4b134f8b5d50d89f3f035ef48d5c72edcdfe3abae4fb76d775419f3a5a966ed84616d6d02d1871cf6a9df39221e88585947ba23056c6973044f037d83017d8bdb6f21e69befd2c483e4c3e49066c8ef45e1e546d7cc0a85c4be2a601c5014c3edc801624f85", 0xb8}, {&(0x7f0000000380)}], 0x6, &(0x7f0000000440)=[{0xe8, 0x10a, 0x7c8, "16711cbd72ee81b586757c2d6bd468f07f440121bc4d70233f878579fc1d6eaf0d3f58bbb0d0ec28445cf46c5f4059509b2134952a4180064073b437ba3eacad33f9115249434bba5187475f30adb7d50b84edc198144d712becbceb30c95dc0fd5a31c3992386dea6cf10e356467dec3dc2092d45359cb938a9ab51b1d48ea006bbb86b9dfb7f5c6efe9992d75220d118f60cfb703a99e0d445a05b238adfbe2d333ddc5f52fc51bb284a5b6a0f2a024fe34b23e3d2784dd62bc571eb29807386a36c31be5a7f83afad1a4b6f29df1f91d76c3aa1329d"}, {0xb8, 0x88, 0x94da, "a6fec5b7536d744b2b6a989befd6d34abffc15c09f2c0acf6a73956368bc2aa80690280053d501396023aae717f85e00101cd7664cfb1afad9c79772dbe8be7df794d3d6f01bb74eca43bd01c3c841269162ba456f22668435ba2a39fd77a251caac7c134ebdc674c1931d35a409730886830f19bd32219efbe85f6a90ae8eaf5c987714b4e8575b3353128e2b60efa187cceb6fc538f3d3076c1efbbc696cd32bf473a76baa"}, {0x58, 0x6, 0x4, "2ff214d3f4b349a7795392bcaa4737d3e8261857039c7c44fd9659dbce3b1e4ebf3a92ec1dfb239d9cbf504e43f21e73d084b9b9f43a62290583f8afaa874c1d6dd80f"}, {0x78, 0x10b, 0xffff, "d255e3d24c3842243b5f8da1cbee49531c8286e17066a325e2c37f838c40983cc1ce206982c371b426c51453cf85864582014e4b4c05bf3f743db026276a1876e9db803dbd023bcedf7dbd8a7b0242b1adc2d97a19adbd253d13896d1e1d13dc04145a631d94f459"}, {0xb0, 0x10c, 0x3, "2884eb816055558c99aa8f51617c62893b098495ea9df606ec67a36bb16adc207fd7ff992de574cae26051e7e711c08eb01147633297342d5708402f5293ad533134e65ca3659a61cb1611cc67be318fea439b1b54e3f65e4f5f16aa6be04b205a510514efcd45a2be93b30d91d541d59de161fc01526a1b89fd13587138530f8abc626445ec36b8a589b4681625489dca460d335eb8aa3cc79f9bfb7bd4"}, {0x20, 0x114, 0x78d8, "caa9a518d401000000"}, {0x20, 0x3a, 0x0, "3a1cf69447345ddda6399af63bb645"}], 0x360}, 0x0, 0x4004000, 0x1}, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2826.260253] loop5: detected capacity change from 0 to 135266304 [ 2826.269416] EXT4-fs (loop4): inodes count not valid: 100663328 vs 32 [ 2826.284272] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:40:34 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 46) 01:40:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000780000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:40:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfcfdffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2826.432126] loop5: detected capacity change from 0 to 135266304 [ 2826.434495] FAULT_INJECTION: forcing a failure. [ 2826.434495] name failslab, interval 1, probability 0, space 0, times 0 [ 2826.437181] CPU: 0 PID: 18618 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2826.438836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2826.440824] Call Trace: [ 2826.441459] dump_stack+0x107/0x167 [ 2826.442335] should_fail.cold+0x5/0xa [ 2826.443251] ? create_object.isra.0+0x3a/0xa20 [ 2826.444341] should_failslab+0x5/0x20 [ 2826.445255] kmem_cache_alloc+0x5b/0x310 [ 2826.446232] ? mark_held_locks+0x9e/0xe0 [ 2826.447210] create_object.isra.0+0x3a/0xa20 [ 2826.448258] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2826.449469] kmem_cache_alloc+0x159/0x310 [ 2826.450455] xas_alloc+0x336/0x440 [ 2826.451298] xas_create+0x34a/0x10d0 [ 2826.452163] ? kernel_text_address+0xf2/0x120 [ 2826.453240] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2826.454498] xas_store+0x8c/0x1c40 [ 2826.455388] __xa_store+0x164/0x2d0 [ 2826.456265] ? xa_delete_node+0x280/0x280 [ 2826.457271] ? trace_hardirqs_on+0x5b/0x180 [ 2826.458310] xa_store+0x31/0x50 [ 2826.459123] __io_uring_add_tctx_node+0x1cf/0x520 [ 2826.460207] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2826.461382] ? alloc_fd+0x2e7/0x670 [ 2826.462214] io_uring_setup+0x1fbb/0x2980 [ 2826.463161] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2826.464299] ? wait_for_completion_io+0x270/0x270 [ 2826.465405] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2826.466579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2826.467755] do_syscall_64+0x33/0x40 [ 2826.468593] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2826.469745] RIP: 0033:0x7fa936a9db19 [ 2826.470582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2826.474762] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2826.476488] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2826.478105] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2826.479732] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2826.481352] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2826.482976] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:40:34 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x700) 01:40:34 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) r7 = dup2(r3, 0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @remote, 0x3, 0xfc01, 0x81, 0x400, 0x0, 0x4060041}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10010, r3, 0x8000000) syz_io_uring_submit(r8, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r9 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r10, 0x0, &(0x7f00000003c0)="32eacc74008f9263c0e2e4483a6e56bf8eed9d19ec1e750b9444ee0ec500576de66cb817be25e0fb894f1155a7b008cffd54c78f890898a8583888220a1e1aded3a99f11a2987b5057f0c29adf2427f1bc776c5ba847d2c99a753cc59ce1bc1dfb33e290c6e57fabde63ff159e06fb228e7f646cd9b914f4e5ea3e163ec8366c3123dec20277a464e953a8521630d87ff1d8fd05dadef3bcd17118ee1f0870008760b585994ebbcff7509a277f14a20c4b2346a566cf37cdb4c25ecbc7c17059d4a9c9594b0402287a05fcc09dcc4520df806938d8a8912378f4042816bb003f3ec7abe3", 0xe4, 0x40}, 0x1) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r9, 0x0, &(0x7f0000000080)="9b55aa51535cc526c1f1a3e6c91039293e8e4b4df7d8e2a21e32661067a15f439719e8dea1b4a7d1bcdbd462c8301ef37bc36c5a37ae23e98436c25b18cc405a84092ef0d7", 0x45, 0x40000c0, 0x1}, 0xbd) [ 2826.496641] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:40:34 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 47) 01:40:34 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x20000000, 0x8, 0x2, 0x2a6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000e, 0x100010, r0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r3}}, 0x30) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x20010, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x65, 0x1}, 0x7) [ 2826.546720] loop5: detected capacity change from 0 to 135266304 [ 2826.581506] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2826.607707] FAULT_INJECTION: forcing a failure. [ 2826.607707] name failslab, interval 1, probability 0, space 0, times 0 [ 2826.610385] CPU: 0 PID: 18627 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2826.611967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2826.613853] Call Trace: [ 2826.614470] dump_stack+0x107/0x167 [ 2826.615312] should_fail.cold+0x5/0xa [ 2826.616177] ? xas_alloc+0x336/0x440 [ 2826.617024] should_failslab+0x5/0x20 [ 2826.617900] kmem_cache_alloc+0x5b/0x310 [ 2826.618833] xas_alloc+0x336/0x440 [ 2826.619641] xas_create+0x34a/0x10d0 [ 2826.620497] ? kernel_text_address+0xf2/0x120 [ 2826.621521] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2826.622718] xas_store+0x8c/0x1c40 [ 2826.623535] __xa_store+0x164/0x2d0 [ 2826.624362] ? xa_delete_node+0x280/0x280 [ 2826.625307] ? trace_hardirqs_on+0x5b/0x180 [ 2826.626287] xa_store+0x31/0x50 [ 2826.627047] __io_uring_add_tctx_node+0x1cf/0x520 [ 2826.628135] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2826.629319] ? alloc_fd+0x2e7/0x670 [ 2826.630154] io_uring_setup+0x1fbb/0x2980 [ 2826.631105] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2826.632245] ? wait_for_completion_io+0x270/0x270 [ 2826.633355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2826.634533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2826.635708] do_syscall_64+0x33/0x40 [ 2826.636549] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2826.637707] RIP: 0033:0x7fa936a9db19 [ 2826.638552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2826.642733] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2826.644455] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2826.646057] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2826.647684] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2826.649290] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2826.650903] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:40:47 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x1010, r0, 0x0) 01:40:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000b80000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:40:47 executing program 6: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r1 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) dup3(r0, r1, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x88) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 01:40:47 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000) 01:40:47 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x30, 0xfc, 0x0, 0x5, 0x0, 0x8, 0x20082, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x6, @perf_bp={&(0x7f0000000000), 0x1}, 0x120, 0xfff, 0x7, 0x3, 0x3, 0x4, 0x0, 0x0, 0x1, 0x0, 0x800}, r0, 0xa, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:40:47 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:40:47 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 48) 01:40:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfdfdffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:40:47 executing program 6: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x20010, 0xffffffffffffffff, 0x0) [ 2839.259730] loop4: detected capacity change from 0 to 16776704 [ 2839.261901] FAULT_INJECTION: forcing a failure. [ 2839.261901] name failslab, interval 1, probability 0, space 0, times 0 [ 2839.264680] CPU: 0 PID: 18650 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2839.266377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2839.268411] Call Trace: [ 2839.269055] dump_stack+0x107/0x167 [ 2839.269944] should_fail.cold+0x5/0xa [ 2839.270878] ? create_object.isra.0+0x3a/0xa20 [ 2839.271993] should_failslab+0x5/0x20 [ 2839.272915] kmem_cache_alloc+0x5b/0x310 [ 2839.273900] ? mark_held_locks+0x9e/0xe0 [ 2839.274904] create_object.isra.0+0x3a/0xa20 [ 2839.275968] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2839.277206] kmem_cache_alloc+0x159/0x310 [ 2839.278226] xas_alloc+0x336/0x440 [ 2839.279099] xas_create+0x34a/0x10d0 [ 2839.280019] ? kernel_text_address+0xf2/0x120 [ 2839.281113] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2839.282388] xas_store+0x8c/0x1c40 [ 2839.283285] __xa_store+0x164/0x2d0 [ 2839.284173] ? xa_delete_node+0x280/0x280 [ 2839.285187] ? trace_hardirqs_on+0x5b/0x180 [ 2839.286244] xa_store+0x31/0x50 [ 2839.287063] __io_uring_add_tctx_node+0x1cf/0x520 [ 2839.288240] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2839.289508] ? alloc_fd+0x2e7/0x670 [ 2839.290405] io_uring_setup+0x1fbb/0x2980 [ 2839.291430] ? __do_sys_io_uring_enter+0x1890/0x1890 01:40:47 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r4, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r7, &(0x7f0000000000)=0x80, &(0x7f0000000040)=@rc={0x1f, @none}}, 0x81) [ 2839.292662] ? wait_for_completion_io+0x270/0x270 [ 2839.294018] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2839.295309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2839.296569] do_syscall_64+0x33/0x40 [ 2839.297472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2839.298715] RIP: 0033:0x7fa936a9db19 [ 2839.299627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2839.304129] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2839.305988] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2839.307732] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2839.309468] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2839.311227] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2839.312973] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2839.315111] EXT4-fs (loop4): inodes count not valid: 184549408 vs 32 [ 2839.327011] loop5: detected capacity change from 0 to 135266304 [ 2839.338441] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:40:47 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 49) [ 2839.366659] loop5: detected capacity change from 0 to 135266304 01:40:47 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6000) [ 2839.378845] loop4: detected capacity change from 0 to 16776704 01:40:47 executing program 6: capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x6, 0xaf2, 0x6, 0x0, 0xc7ca, 0x4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x80b01, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 2839.392460] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2839.399496] EXT4-fs (loop4): inodes count not valid: 184549408 vs 32 01:40:47 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x3737) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$LOOP_SET_STATUS(r5, 0x1267, &(0x7f00000005c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "7a0a49805b3f8a1d1f3c51f4b0a08ee8cb28f6a71b6e747131e3558bbb840da72d4b522d3fb4c54d0509ef815a97cf1f293dce3a7c7cf60f7f8790c885451378", "d050516ce943c90f758a236f4aee0d825424dc6bd419233154e824257ddd96d1"}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000240)={0x4dc, 0x10, 0x200, 0x70bd29, 0x25dfdbfb, {0x19}, [@typed={0x14, 0x27, 0x0, 0x0, @ipv6=@loopback}, @generic="2fe69c11c09949824ef341b61d7dd814b545f20983735f00186175020657c0ceb2404a61185b90a2da044ad30678ee6edb748baf7eedca4123280ce5585f6eba57e06081bec8a58abdabb3ad0383eff6ad24c57bc43031eb20c735ae19bfcfa9c71a617eab965c94ade80cc8", @generic="f78c7ea0ecb38766546fb65435dc68bb2360f71a2fc0c2d6b88ee6d20129e0604370b41ca046eef09a9ff990f47f96caef66da2f2cae01b843506d99fc636fbd83a8e6a0a94af57a60c8e7ffb8302c7ef111825ef155163be09aba4d2b2682c0dde1e975fa9f18d036586ac10e022b1251280b32", @nested={0x211, 0x41, 0x0, 0x1, [@typed={0x14, 0x4f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @typed={0x8, 0x5a, 0x0, 0x0, @u32}, @typed={0xe7, 0x5, 0x0, 0x0, @binary="a373b4d44364c61680fc17ed4ca95037c656b161017e9dbc80fcab698566f6f111642b513a156d23889ffc100f64e9408d2ea60dd244ee49b8da0cea1a7dc37f0d80fb30bd716d7b8db4cfef043a7debf3a42e142dd5a8bac7f9d15efa9e17db55767c3d46c8da698066d03c941d773e8523ba5c1c41480ee4d1bf1dc11f2832f98681ebf8b7db1b6b4a173a634edd5eea96de60d44e3b97b2ad08be3df212d796794daddec6168c766f80f3386ed70556208d4bee73d9e66f5dd155561a1ab05f0909666b68ce85721412616ddeef8644a2d0c7d356947ee79af948c05c55aa6272c8"}, @generic="56974451f8e19cf99bbf154d9c3b5277f453a0bbd3c4df55cd3a1287c2cbb16a385fa959c044b0633e32be0f8801c62500cca09a7f6cb1f2620ee10378e33e6d46d9f8772eac8e6f8b6bd693ee9e6816d205ca2a3caadcaba7109079ba4a1202250af3872c3e5cc890ceef71748fea54a26a14e10dbef04bf3bd8f8a2fdb007b95ac11a85cb6726bf75080881ace5258ef4145c7449b6408c647e269019aa77d9f289f7e43", @typed={0x63, 0x5e, 0x0, 0x0, @binary="0b61f73c00de120e90d6b7a5958268fa665b752320bb9ea8332b2635b9a74047016efbfe9325215e6bab90439f244f41a193bec96f86dadd871897f0386d91afe5b584c67e0e24dd77df42ca57c7d62b48d701d378ed0a5763a6c336af5e4b"}]}, @typed={0xc, 0x61, 0x0, 0x0, @u64=0x6}, @typed={0x14, 0x65, 0x0, 0x0, @ipv6=@empty}, @nested={0xd5, 0x2e, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @uid=r6}, @generic="78777aea89f12ae966044d252c6bde0e56f6674bda8e8505644be551bbfc2181e1ae2932628f5f3904295922ac3dd2260c000e727072a902ba0b14bc21adc64526038c5b3a90c143682cb4c02b1e72fb3ce4cc88f22278737400f995a64e440ad338e4687ad7f9bc6d7c7d3725554b2d5b8f95d4739d7469efd544c16186c9d49eb1a292f37cf276409d9c3c542cd4b9ee45f9f46ae52bbe8951093581f7450596f4f11916133037d2ffb3e2f731b3c4b1989ed784", @typed={0x4, 0x84}, @typed={0x8, 0x1f, 0x0, 0x0, @pid}, @typed={0x8, 0x36, 0x0, 0x0, @u32=0x200}]}, @generic="661963188f510c7f1d80c566e1d1e9f9d7309032ae072139132e07a8e8e6b00ea18840532e9d6439b592c66f58a8f5ebe3acedfe85e9a3a1c083053ced58bd6240f4bf3e80f7d2e7529b62c62dc3032b5c22f3e679f2ef13c0bb3095756b8e0103239815f988430af71e081d3c5a7e5325a032f0528e53b87069ebd012c57600e0c3d5a6e45c4f4575b0c6d23c996ad68b1c6106da816788a9012ad42d38d18bdb623354", @nested={0x22, 0x3a, 0x0, 0x1, [@generic="2a9107ff5b4c8137f44f7e6a73246cabc90b3c207ac9c33c7d0562836557"]}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x40080a1}, 0x4040000) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000200)=0xfffffede) [ 2839.460782] FAULT_INJECTION: forcing a failure. [ 2839.460782] name failslab, interval 1, probability 0, space 0, times 0 [ 2839.462163] CPU: 1 PID: 18670 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2839.462973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2839.463926] Call Trace: [ 2839.464234] dump_stack+0x107/0x167 [ 2839.464656] should_fail.cold+0x5/0xa [ 2839.465093] ? xas_alloc+0x336/0x440 [ 2839.465524] should_failslab+0x5/0x20 [ 2839.465960] kmem_cache_alloc+0x5b/0x310 [ 2839.466430] xas_alloc+0x336/0x440 [ 2839.466851] xas_create+0x34a/0x10d0 [ 2839.467287] ? kernel_text_address+0xf2/0x120 [ 2839.467812] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2839.468416] xas_store+0x8c/0x1c40 [ 2839.468831] __xa_store+0x164/0x2d0 [ 2839.469253] ? xa_delete_node+0x280/0x280 [ 2839.469737] ? trace_hardirqs_on+0x5b/0x180 [ 2839.470234] xa_store+0x31/0x50 [ 2839.470618] __io_uring_add_tctx_node+0x1cf/0x520 [ 2839.471180] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2839.471779] ? alloc_fd+0x2e7/0x670 [ 2839.472204] io_uring_setup+0x1fbb/0x2980 [ 2839.472685] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2839.473270] ? wait_for_completion_io+0x270/0x270 [ 2839.473837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2839.474442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2839.475044] do_syscall_64+0x33/0x40 [ 2839.475472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2839.476057] RIP: 0033:0x7fa936a9db19 [ 2839.476486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2839.478597] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2839.479474] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2839.480287] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2839.481101] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2839.481916] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2839.482727] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:40:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000001880000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:40:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfdffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:40:47 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x400000) [ 2839.560677] loop5: detected capacity change from 0 to 135266304 [ 2839.564127] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2839.581152] loop5: detected capacity change from 0 to 135266304 [ 2839.590146] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2839.595178] loop4: detected capacity change from 0 to 16776704 [ 2839.599160] EXT4-fs (loop4): inodes count not valid: 402653216 vs 32 01:40:47 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x79ce, &(0x7f0000000000)={0x0, 0xcf9e, 0x10, 0x2, 0x341, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 01:40:47 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x100000000000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:40:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfeffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2839.658105] loop5: detected capacity change from 0 to 135266304 [ 2839.666634] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2839.686389] loop5: detected capacity change from 0 to 135266304 [ 2839.689997] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:41:03 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 50) 01:41:03 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) creat(&(0x7f0000000000)='./file0\x00', 0x62) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:41:03 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x200000000000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:41:03 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x211}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20010, r1, 0x8000000) 01:41:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xff0f000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:41:03 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c00), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}}]}, 0x28}}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="000327bd7000fcdbdf25060000002600070073797374656d5f753a6f626a6563745f723a617574685f63616368655f743a733000000008000500ac1e0001140006006d6163766c616e3100000000000000001400020000000000000000000000ffffe0000002140006006970365f76746930000000000000000008000400ac1414aa080004000000000014000300ff02000000000000000000000000000108000500e00000012b00070073797374656d5f753a6f626a6563745f723a64656661756c745f636f6e7465787a5f743a73300000"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c050}, 0x0) r5 = syz_io_uring_setup(0x699e, &(0x7f0000000040)={0x0, 0x2ab2, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xb398c6e4473c4a9f}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) r6 = eventfd2(0x2, 0x1) pwrite64(r6, &(0x7f0000000300)="fffe9cb9a2b2fbde205290b82bf48fb52345b9ec27dc03cf862ae741ff73587f2c43243d130bd5b6d74be0caef", 0x2d, 0x81) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) 01:41:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000001c80000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:41:03 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x600000) [ 2855.543398] FAULT_INJECTION: forcing a failure. [ 2855.543398] name failslab, interval 1, probability 0, space 0, times 0 [ 2855.546009] CPU: 1 PID: 18814 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2855.547584] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2855.549465] Call Trace: [ 2855.550067] dump_stack+0x107/0x167 [ 2855.550892] should_fail.cold+0x5/0xa [ 2855.551775] ? create_object.isra.0+0x3a/0xa20 [ 2855.552810] should_failslab+0x5/0x20 [ 2855.553669] kmem_cache_alloc+0x5b/0x310 [ 2855.554585] ? mark_held_locks+0x9e/0xe0 [ 2855.555521] create_object.isra.0+0x3a/0xa20 [ 2855.556506] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2855.557657] kmem_cache_alloc+0x159/0x310 [ 2855.558602] xas_alloc+0x336/0x440 [ 2855.559418] xas_create+0x34a/0x10d0 [ 2855.560270] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 2855.561409] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2855.562592] xas_store+0x8c/0x1c40 [ 2855.563423] __xa_store+0x164/0x2d0 [ 2855.564256] ? xa_delete_node+0x280/0x280 [ 2855.565201] ? trace_hardirqs_on+0x5b/0x180 [ 2855.566186] xa_store+0x31/0x50 [ 2855.566959] __io_uring_add_tctx_node+0x1cf/0x520 [ 2855.568082] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2855.569296] ? alloc_fd+0x2e7/0x670 [ 2855.570158] io_uring_setup+0x1fbb/0x2980 [ 2855.571138] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2855.572307] ? wait_for_completion_io+0x270/0x270 [ 2855.573456] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2855.574674] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2855.575884] do_syscall_64+0x33/0x40 [ 2855.576748] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2855.577939] RIP: 0033:0x7fa936a9db19 [ 2855.578801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 01:41:03 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x800000) [ 2855.583089] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2855.585051] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2855.586705] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2855.588370] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2855.590100] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2855.591936] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2855.607572] loop4: detected capacity change from 0 to 16776704 01:41:03 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x0) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_io_uring_submit(r2, r1, &(0x7f00000023c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000002380)={&(0x7f0000000080)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002340)=[{&(0x7f0000000200)=""/84, 0x54}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/173, 0xad}], 0x4}, 0x0, 0x0, 0x0, {0x1}}, 0x0) [ 2855.633696] loop5: detected capacity change from 0 to 135266304 [ 2855.638528] EXT4-fs (loop4): inodes count not valid: 469762080 vs 32 [ 2855.650612] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2855.652938] loop4: detected capacity change from 0 to 16776704 [ 2855.660041] EXT4-fs (loop4): inodes count not valid: 469762080 vs 32 [ 2855.696423] loop5: detected capacity change from 0 to 135266304 [ 2855.699935] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:41:03 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 51) 01:41:03 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x253}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2855.760069] FAULT_INJECTION: forcing a failure. [ 2855.760069] name failslab, interval 1, probability 0, space 0, times 0 [ 2855.761668] CPU: 0 PID: 18946 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2855.762588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2855.763711] Call Trace: [ 2855.764068] dump_stack+0x107/0x167 [ 2855.764556] should_fail.cold+0x5/0xa [ 2855.765058] ? xas_alloc+0x336/0x440 [ 2855.765558] should_failslab+0x5/0x20 [ 2855.766075] kmem_cache_alloc+0x5b/0x310 [ 2855.766620] xas_alloc+0x336/0x440 [ 2855.767104] xas_create+0x34a/0x10d0 [ 2855.767607] ? kernel_text_address+0xf2/0x120 [ 2855.768208] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2855.768903] xas_store+0x8c/0x1c40 [ 2855.769387] __xa_store+0x164/0x2d0 [ 2855.769869] ? xa_delete_node+0x280/0x280 [ 2855.770424] ? trace_hardirqs_on+0x5b/0x180 [ 2855.771004] xa_store+0x31/0x50 [ 2855.771441] __io_uring_add_tctx_node+0x1cf/0x520 [ 2855.772203] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2855.772945] ? alloc_fd+0x2e7/0x670 [ 2855.773480] io_uring_setup+0x1fbb/0x2980 [ 2855.774037] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2855.774718] ? wait_for_completion_io+0x270/0x270 [ 2855.775387] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2855.776084] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2855.776758] do_syscall_64+0x33/0x40 [ 2855.777249] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2855.777935] RIP: 0033:0x7fa936a9db19 [ 2855.778429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2855.780918] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2855.781932] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2855.783073] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2855.784216] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2855.785357] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2855.786481] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:41:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f0000000040)={&(0x7f0000001fc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0xb58, 0xe, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xb0c, 0x3, 0x0, 0x1, [{0x578, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x2b8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "58ac12721b4010eb10440fa2e8e645e7dddfd2ae28090aa7ac3e45cf310f630dd1ff44afe0b9cfbb4648d2b29bd062e7687e7658297b0bcb43ab5200a479e10fa06b0a4b36c3bd0b7ae05fac0d6c3c0e48215d1a4a0696f1efe54456ab4c19e25e1fcb8d13d738039641af5250c849562bdbc3e046847ae65988ac9f319e48acb8486bbc1e78946647d4fb804e39a66c9faa38360d18be0d5ee8bbf8de50cf3c53b2df681267220e92dfb269da15f7d59c199eeb702d3c61e4d89444e292a7eccdcec1cbd1e68c88a58488463e00212a354dca614c133f203640f65bac5fc692"}, @NFTA_DATA_VALUE={0x72, 0x1, "3db2c2b48a2b93b91911893f2c59ef8d733f4766e869ca60da6f2f3e15e7f4a8b46f93c1e548790596a333e8f673a0b48b7bbb701ebec139ab47b3ff7040bb3d3a02681fc432fa533c9b6a314c83f8569df3582c09f612036ebf8eb042d3edb76500ab2ab8fe3aef02fc9cf243c0"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x46, 0x1, "45e8c5326df881e7ab75882b3ca1778a937fc652b1c5f706f25d73895dd4769b0ca54aee3ce5a1aadfba866916c958ebf082b2447214e7273467262aa036f970675d"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xd}]}]}, @NFTA_SET_ELEM_KEY={0xc4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb3, 0x1, "7b092199e804c94383290fbdaa2a489752b251699320464a766dfab4ad387c44d5b23d569073f5337d72fff1d14cf6f79d8f96881512e43860d05ba9ae655e015a7c1187ddf471788100d1e6195daf6f33c4832ed25b5c74be286e240988f0f5e4461ce4d94e672dab89d04ced1617bc206db1ec01649e55d4052e1aba36647633d994f58eee53550241b519de02f67b1e1d2b87bbe13ecbe03410e4c3940534ac8df31626ed5c6d944467c1658b26"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_DATA={0x150, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xca, 0x1, "661be0cfc37ab960de087fa1241d2118ea6b7b1cf939c7ddfad5b49b1927c2ee9c3f629043b0290915a99bae4602b6d4047505f4beb3006487f73ae107270ab815faa33ffa3d550deda23d07b9409fab0d22576d5e8be9ce0403439f2205128cd53781a69bb6ab23c9b4d1575a18edaa362da3f30455afb05992a0708c814693d89e48eed0616a9b6a18818ec103ce222119dca4ff9e8d58d1a2215d7a7ff47777a7e67e20296d49098964a0442b13530eaab8b2203b586805f9e9f4ffa9900a48958fe18336"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x7c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x45, 0x1, "c0507a3b66b32f8fbecdfa884345a264a2a1d552341a5c8935d5ba1e4ed1801bad6f20856fdf3ad433865ffc9ff26a9ffb9fc0c3394fcc1dab0e3fd8edd157f9d0"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x580, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_ELEM_KEY={0x290, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc1, 0x1, "0d2c04e8878f724da30ba6cc3ed83539bb840faa5953fc86a748e1cfc463a186fa56ba64f0d03f8e159c3ad745594fcb5fb74637bcd825dee7da62015c22b56f5a4f9cdb097cd1f273522e8d6789eafd0182842f90fbc6e5e056306067fd61ecc46ef19642466759e786f26a491019632571d665224556d1c76e0c8f8d56be40826d2c79b139ab91f3b706730441760fb80c452343475da7b2fffc1c5c97c80248de7a10e4998d19cbf296cea8b09cdace5ff3f4ca35da95985f8f437c"}, @NFTA_DATA_VALUE={0xc5, 0x1, "4dd21511fb5f4d63da407b0b28007f03f433f3ac0525446a7f30773e4b64d84cd0505befd6fd908bf2bc7b4fe39714281deb9a303fd593b77d450075bd22bd727cba3575897edba94e0125808b1eb414b5718edfc7b0efb27dc77bb0514f24c91b930e72c516bb48ac3fb45f236fe146ff414a0504cc7e6d70b437bba21be718925d166fc809e71d7f9242cc3e651d737dcd47084f1dcd8a0362a929fc81ded329830cfded35145e1edf00b0b9ccea002cd0552c822a0086f7a69dd641b530a547"}, @NFTA_DATA_VALUE={0x19, 0x1, "80e2a4d572a39dc9f0c6fc67dafee909906a9d0321"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb2, 0x1, "9a4c77c69ac0aa7a9b4287a542dc25f1c62f89ffe2d7f802fae073b905faf57fbf8c4a4fcfdaffc3a0255f8b51da288f05ab6c99dd0a1383f809bec825bf6ef216ec470553c7aaeb6c6da13c51225238e4d09b866233882525c05af2cbb3ecec9e3652ac21a2f941aa9dcd44d8d38ff1dc6a32c82e73904a571efdb433a6ce4a8222f1f9a50f0d3c6b67034b77e575952e207267a300d96b6a06fb0c3f94ac5ac499c8dc98e3e58091892c7c8093"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0xfc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "3698b14fe89af4055749cf6213962cf5303e394a3e5497b622debd8ecb0b80fbd2783984a831544de1c291f37271b056d1191207e906d8aa5ad8cd99109a3eb58cb086fdbdb6452a277226cea7827a13fb90ab891293768c41c365c68e1dc16b494862ff4456935da11f3eb51f140d983d6e1ea6655d8cd01dbdce8bfbf8565eea70d34510bf1d5b0fff633699e94f7ece35a5fe56c76f1401947f773ab35314e6ef47fff88a6cf4746f29f93811cb7fd763a20e2464ae800f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xe, 0x1, "a421919bbc7522ed47fe"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x1c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "253ee3da489d2c450461f48ca06d3b21811fd94d567353202ca3100c211b516c5c1f6b29e2d798d5abb6838214b7f864e41d02d59686d2184cb9ddc68dcff5b9409b5393d5a02e5b7321dc02222ed419a8b2930322e651637370b4744b89d4c7f27869ed27ad6fac01374591e9d710f13d905c75d757c69238735e2d0e9233f4d8e20134aee27a4d7aca72c7a27deccc4a6bd82c3a4abd6fafd5dc29c8d0987a60a7e8b089064f55624ba7d7fb3cd81b1568440ce9b51ec88f1400cb70f0fb81e9e6f045dd5a34c53e69d035dcf162525087604b265996a32bff431c91e5a9"}, @NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}]}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:41:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000002080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:41:18 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x300000000000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:41:18 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 52) 01:41:18 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80ffff) 01:41:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xfffbffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:41:18 executing program 6: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x4000010, r0, 0x8000000) 01:41:18 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0xb29, 0x1, 0x7}) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 2870.726316] FAULT_INJECTION: forcing a failure. [ 2870.726316] name failslab, interval 1, probability 0, space 0, times 0 [ 2870.727883] CPU: 0 PID: 18956 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2870.728813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2870.729929] Call Trace: [ 2870.730290] dump_stack+0x107/0x167 [ 2870.730782] should_fail.cold+0x5/0xa [ 2870.731302] ? create_object.isra.0+0x3a/0xa20 [ 2870.731918] should_failslab+0x5/0x20 [ 2870.732431] kmem_cache_alloc+0x5b/0x310 [ 2870.732979] ? mark_held_locks+0x9e/0xe0 [ 2870.733530] create_object.isra.0+0x3a/0xa20 [ 2870.734119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2870.734807] kmem_cache_alloc+0x159/0x310 [ 2870.735382] xas_alloc+0x336/0x440 [ 2870.735863] xas_create+0x34a/0x10d0 [ 2870.736372] ? kernel_text_address+0xf2/0x120 [ 2870.736981] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2870.737694] xas_store+0x8c/0x1c40 [ 2870.738191] __xa_store+0x164/0x2d0 [ 2870.738684] ? xa_delete_node+0x280/0x280 [ 2870.739255] ? trace_hardirqs_on+0x5b/0x180 [ 2870.739853] xa_store+0x31/0x50 [ 2870.740305] __io_uring_add_tctx_node+0x1cf/0x520 [ 2870.740960] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2870.741663] ? alloc_fd+0x2e7/0x670 [ 2870.742162] io_uring_setup+0x1fbb/0x2980 [ 2870.742725] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2870.743426] ? wait_for_completion_io+0x270/0x270 [ 2870.744081] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2870.744794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2870.745490] do_syscall_64+0x33/0x40 [ 2870.745988] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2870.746671] RIP: 0033:0x7fa936a9db19 [ 2870.747174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2870.749647] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2870.750667] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2870.751636] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2870.752590] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2870.753547] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2870.754498] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2870.769179] loop5: detected capacity change from 0 to 135266304 01:41:18 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x3770, &(0x7f0000000000)={0x0, 0xa880, 0x4, 0x1, 0x207, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x2, 0x8, 0x0, 0x101, 0x1, 0x1, {0x0, r2}}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2870.786015] loop4: detected capacity change from 0 to 16776704 [ 2870.792214] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2870.793980] EXT4-fs (loop4): inodes count not valid: 536870944 vs 32 [ 2870.822850] loop5: detected capacity change from 0 to 135266304 01:41:18 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 53) [ 2870.830248] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:41:18 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x1000000) [ 2870.857476] FAULT_INJECTION: forcing a failure. [ 2870.857476] name failslab, interval 1, probability 0, space 0, times 0 [ 2870.859049] CPU: 0 PID: 19053 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2870.859966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2870.861048] Call Trace: [ 2870.861394] dump_stack+0x107/0x167 [ 2870.861862] should_fail.cold+0x5/0xa [ 2870.862357] ? create_object.isra.0+0x3a/0xa20 [ 2870.862958] should_failslab+0x5/0x20 [ 2870.863469] kmem_cache_alloc+0x5b/0x310 [ 2870.863998] ? mark_held_locks+0x9e/0xe0 [ 2870.864528] create_object.isra.0+0x3a/0xa20 [ 2870.865091] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2870.865755] kmem_cache_alloc+0x159/0x310 [ 2870.866294] xas_alloc+0x336/0x440 [ 2870.866757] xas_create+0x34a/0x10d0 [ 2870.867248] ? kernel_text_address+0xf2/0x120 [ 2870.867822] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2870.868495] xas_store+0x8c/0x1c40 [ 2870.868961] __xa_store+0x164/0x2d0 [ 2870.869436] ? xa_delete_node+0x280/0x280 [ 2870.869982] ? trace_hardirqs_on+0x5b/0x180 [ 2870.870539] xa_store+0x31/0x50 [ 2870.870972] __io_uring_add_tctx_node+0x1cf/0x520 [ 2870.871594] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2870.872276] ? alloc_fd+0x2e7/0x670 [ 2870.872764] io_uring_setup+0x1fbb/0x2980 [ 2870.873299] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2870.873954] ? wait_for_completion_io+0x270/0x270 [ 2870.874610] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2870.875303] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2870.875979] do_syscall_64+0x33/0x40 [ 2870.876472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2870.877134] RIP: 0033:0x7fa936a9db19 [ 2870.877620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2870.879813] loop4: detected capacity change from 0 to 16776704 [ 2870.879982] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2870.882316] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2870.883246] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2870.884154] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2870.885053] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2870.885958] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2870.889182] EXT4-fs (loop4): inodes count not valid: 536870944 vs 32 01:41:18 executing program 7: accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000200)=""/108, &(0x7f00000000c0)=0x6c) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 01:41:18 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 54) 01:41:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xffffff7f00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:41:18 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x1d8, 0x100, 0x12345}, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2870.954092] FAULT_INJECTION: forcing a failure. [ 2870.954092] name failslab, interval 1, probability 0, space 0, times 0 [ 2870.956746] CPU: 1 PID: 19089 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2870.958309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2870.960188] Call Trace: [ 2870.960787] dump_stack+0x107/0x167 [ 2870.961611] should_fail.cold+0x5/0xa [ 2870.962472] ? create_object.isra.0+0x3a/0xa20 [ 2870.963514] should_failslab+0x5/0x20 01:41:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2870.964368] kmem_cache_alloc+0x5b/0x310 [ 2870.965399] ? mark_held_locks+0x9e/0xe0 [ 2870.966323] create_object.isra.0+0x3a/0xa20 [ 2870.967316] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2870.968461] kmem_cache_alloc+0x159/0x310 [ 2870.969399] xas_alloc+0x336/0x440 [ 2870.970200] xas_create+0x34a/0x10d0 [ 2870.971045] ? kernel_text_address+0xf2/0x120 [ 2870.972055] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2870.973225] xas_store+0x8c/0x1c40 [ 2870.974039] __xa_store+0x164/0x2d0 [ 2870.974858] ? xa_delete_node+0x280/0x280 [ 2870.975818] ? trace_hardirqs_on+0x5b/0x180 [ 2870.976787] xa_store+0x31/0x50 [ 2870.977533] __io_uring_add_tctx_node+0x1cf/0x520 [ 2870.978610] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2870.979795] ? alloc_fd+0x2e7/0x670 [ 2870.980623] io_uring_setup+0x1fbb/0x2980 [ 2870.981567] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2870.982695] ? wait_for_completion_io+0x270/0x270 [ 2870.983810] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2870.984979] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2870.986136] do_syscall_64+0x33/0x40 [ 2870.986975] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2870.988134] RIP: 0033:0x7fa936a9db19 [ 2870.988963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2870.993071] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2870.994763] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2870.996358] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2870.997944] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2870.999553] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2871.001155] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:41:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000003f80000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2871.046679] loop5: detected capacity change from 0 to 135266304 [ 2871.059256] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2871.096205] loop4: detected capacity change from 0 to 16776704 [ 2871.103454] loop5: detected capacity change from 0 to 135266304 [ 2871.110785] EXT4-fs (loop4): inodes count not valid: 1056964640 vs 32 [ 2871.119302] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2871.144818] loop4: detected capacity change from 0 to 16776704 [ 2871.164540] EXT4-fs (loop4): inodes count not valid: 1056964640 vs 32 01:41:33 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x2000000) 01:41:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000006980000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:41:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xffffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:41:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x8801) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe1, 0x0, 0x7f, 0x1, 0x0, 0x5, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x20, 0x9, 0x9, 0x1, 0x5, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:41:33 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x9, @mcast1, 0x6000000}, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00'}, 0xc74, [0x101, 0x3, 0x8, 0x8001, 0x10000, 0x8, 0xae9e, 0x2]}, 0x5c) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x13a4, &(0x7f0000000080)={0x0, 0x2, 0x8d78e9f6f348460a, 0x1, 0x23a, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x48100) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000300)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r4, 0x0, {0x0, r0}, 0xc2a, 0xb, 0x1, {0x0, r5, r6}}, 0x10001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 01:41:33 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x23d0, &(0x7f0000000000)={0x0, 0x9877, 0x1, 0x1, 0x14c}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r4 = dup(r0) r5 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3, 0x0, r4, 0x0, r5, 0x2, 0x0, 0x1}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0xc5c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:41:33 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 55) 01:41:33 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x400000000000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2886.200560] FAULT_INJECTION: forcing a failure. [ 2886.200560] name failslab, interval 1, probability 0, space 0, times 0 [ 2886.203167] CPU: 1 PID: 19226 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2886.204735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2886.206642] Call Trace: [ 2886.207236] dump_stack+0x107/0x167 [ 2886.208087] should_fail.cold+0x5/0xa [ 2886.208967] ? xas_alloc+0x336/0x440 [ 2886.209825] should_failslab+0x5/0x20 [ 2886.210700] kmem_cache_alloc+0x5b/0x310 [ 2886.211646] xas_alloc+0x336/0x440 [ 2886.212466] xas_create+0x34a/0x10d0 [ 2886.213328] ? kernel_text_address+0xf2/0x120 [ 2886.214359] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2886.215574] xas_store+0x8c/0x1c40 [ 2886.215822] loop5: detected capacity change from 0 to 135266304 [ 2886.216402] __xa_store+0x164/0x2d0 [ 2886.216428] ? xa_delete_node+0x280/0x280 [ 2886.219696] ? trace_hardirqs_on+0x5b/0x180 [ 2886.220690] xa_store+0x31/0x50 [ 2886.221446] __io_uring_add_tctx_node+0x1cf/0x520 [ 2886.222531] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2886.223708] ? alloc_fd+0x2e7/0x670 [ 2886.224533] io_uring_setup+0x1fbb/0x2980 [ 2886.225479] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2886.226618] ? wait_for_completion_io+0x270/0x270 [ 2886.227735] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2886.228903] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2886.230070] do_syscall_64+0x33/0x40 [ 2886.230902] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2886.232058] RIP: 0033:0x7fa936a9db19 [ 2886.232896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2886.237021] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2886.238729] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2886.239997] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2886.240338] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2886.240351] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2886.240373] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2886.246988] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2886.274579] loop4: detected capacity change from 0 to 16776704 01:41:34 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0xaa5, &(0x7f0000000000)={0x0, 0x567c, 0x4, 0x0, 0x347}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000240)={r4, r5+10000000}, 0x1, 0x1, 0x1}, 0x9) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 2886.313703] loop5: detected capacity change from 0 to 135266304 [ 2886.317146] EXT4-fs (loop4): inodes count not valid: 1761607712 vs 32 [ 2886.321873] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:41:34 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:41:34 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x3000000) [ 2886.375005] loop4: detected capacity change from 0 to 16776704 01:41:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2886.413928] EXT4-fs (loop4): inodes count not valid: 1761607712 vs 32 01:41:34 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 56) [ 2886.451924] loop5: detected capacity change from 0 to 135266304 [ 2886.463756] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2886.485859] loop5: detected capacity change from 0 to 135266304 [ 2886.518516] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2886.551907] FAULT_INJECTION: forcing a failure. [ 2886.551907] name failslab, interval 1, probability 0, space 0, times 0 [ 2886.554518] CPU: 1 PID: 19355 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2886.556093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2886.557938] Call Trace: [ 2886.558532] dump_stack+0x107/0x167 [ 2886.559352] should_fail.cold+0x5/0xa [ 2886.560203] ? xas_alloc+0x336/0x440 [ 2886.561036] should_failslab+0x5/0x20 [ 2886.561883] kmem_cache_alloc+0x5b/0x310 [ 2886.562795] xas_alloc+0x336/0x440 [ 2886.563599] xas_create+0x34a/0x10d0 [ 2886.564443] ? kernel_text_address+0xf2/0x120 [ 2886.565443] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2886.566614] xas_store+0x8c/0x1c40 [ 2886.567437] __xa_store+0x164/0x2d0 [ 2886.568255] ? xa_delete_node+0x280/0x280 [ 2886.569191] ? trace_hardirqs_on+0x5b/0x180 [ 2886.570162] xa_store+0x31/0x50 [ 2886.570904] __io_uring_add_tctx_node+0x1cf/0x520 [ 2886.571985] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2886.573165] ? alloc_fd+0x2e7/0x670 [ 2886.573992] io_uring_setup+0x1fbb/0x2980 [ 2886.574925] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2886.576063] ? wait_for_completion_io+0x270/0x270 [ 2886.577158] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2886.578331] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2886.579503] do_syscall_64+0x33/0x40 [ 2886.580343] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2886.581490] RIP: 0033:0x7fa936a9db19 [ 2886.582324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2886.586444] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2886.588165] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2886.589765] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2886.591370] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2886.592963] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2886.594559] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:41:47 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 57) 01:41:47 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5465, &(0x7f0000000000)={0x0, 0x8cfc, 0x0, 0x1, 0xa3, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0x7ff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0xffff) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000280)=""/185, &(0x7f0000000340)=0xb9) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r2, 0x0, &(0x7f0000000200)="ca204f178c62c7914bad8afa256ec1bfec465c09eeb9245d064bc687b21af891a946f0bcc4a20988cceb7e40ccbae2d30e1d94b6c934b10b5f1a1565", 0x3c, 0x2084, 0x0, {0x0, r3}}, 0x98ef) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2899.523143] FAULT_INJECTION: forcing a failure. [ 2899.523143] name failslab, interval 1, probability 0, space 0, times 0 [ 2899.524835] CPU: 1 PID: 19363 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2899.525829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2899.526991] Call Trace: [ 2899.527367] dump_stack+0x107/0x167 [ 2899.527889] should_fail.cold+0x5/0xa [ 2899.528430] ? xas_alloc+0x336/0x440 [ 2899.528962] should_failslab+0x5/0x20 [ 2899.529506] kmem_cache_alloc+0x5b/0x310 [ 2899.530080] xas_alloc+0x336/0x440 01:41:47 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000000) 01:41:47 executing program 2: sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x20000004) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1a3041, 0x108) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffb}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0xc4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2899.530601] xas_create+0x34a/0x10d0 [ 2899.531331] ? kernel_text_address+0xf2/0x120 [ 2899.532031] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2899.532886] xas_store+0x8c/0x1c40 [ 2899.533467] __xa_store+0x164/0x2d0 [ 2899.534052] ? xa_delete_node+0x280/0x280 [ 2899.534738] ? trace_hardirqs_on+0x5b/0x180 [ 2899.535441] xa_store+0x31/0x50 [ 2899.535989] __io_uring_add_tctx_node+0x1cf/0x520 [ 2899.536760] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2899.537599] ? alloc_fd+0x2e7/0x670 [ 2899.538191] io_uring_setup+0x1fbb/0x2980 [ 2899.538844] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2899.539668] ? wait_for_completion_io+0x270/0x270 [ 2899.540457] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2899.541298] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2899.542138] do_syscall_64+0x33/0x40 [ 2899.542734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2899.543583] RIP: 0033:0x7fa936a9db19 [ 2899.544196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2899.547153] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2899.548386] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2899.549550] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e 01:41:47 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x6) r8 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r8, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_enter(r8, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x100010, r8, 0x0) 01:41:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000048080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2899.550689] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2899.552058] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2899.553214] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:41:47 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x500000000000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:41:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2899.588694] loop4: detected capacity change from 0 to 16776704 01:41:47 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x5000000) [ 2899.612656] loop5: detected capacity change from 0 to 2048 [ 2899.619637] EXT4-fs (loop4): inodes count not valid: 2147745824 vs 32 [ 2899.624453] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:41:47 executing program 6: r0 = syz_io_uring_setup(0x6342, &(0x7f0000000000)={0x0, 0xe48f, 0x11, 0xfffffffc, 0x199}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0xaa1, 0x6411, 0x1, &(0x7f0000000080)={[0x9]}, 0x8) [ 2899.656895] loop5: detected capacity change from 0 to 2048 [ 2899.671867] loop4: detected capacity change from 0 to 16776704 [ 2899.678307] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2899.681467] EXT4-fs (loop4): inodes count not valid: 2147745824 vs 32 01:41:47 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6000000) 01:41:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000fdef80000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:41:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:41:47 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = fork() ptrace(0x10, r2) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup2(r3, r3) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xc1, 0x3f, 0x67, 0x0, 0x0, 0x8, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0x4}, 0x2400, 0xbc, 0x118, 0x8, 0xa9, 0x8, 0x200, 0x0, 0x400, 0x0, 0x10001}, r2, 0x10, r3, 0x9) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r1, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x80000000}, r0, 0x1, 0x0, 0x1}, 0x401) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) 01:41:47 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 58) 01:41:47 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:41:47 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = getuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '\x00'}}, {@access_client}, {@aname={'aname', 0x3d, '\x00'}}, {@cachetag={'cachetag', 0x3d, '}--'}}, {@version_L}], [{@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@uid_gt={'uid>', r1}}, {@euid_gt={'euid>', r2}}, {@fsname={'fsname', 0x3d, '\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}}) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000940)={0x1, 0x4, {0x10000, @struct={0x3, 0x8000}, 0x0, 0x9, 0x1, 0xb26, 0xffffffffffffffc0, 0x3, 0x1, @usage=0x9, 0x7, 0x9, [0x5, 0xffffffff, 0x81, 0x7, 0x1, 0x7]}, {0x4, @struct={0x200}, 0x0, 0x600, 0x9, 0x4, 0x800000000000, 0x4, 0x4a9, @struct={0x20000, 0x7}, 0x1, 0x2, [0x8, 0x6, 0xfffffffeffffffff, 0x3, 0xa99, 0xfffffffffffffff9]}, {0x20, @struct={0x8, 0x13}, 0x0, 0x8, 0x7acb, 0x2d4b, 0x3, 0x80000000, 0x10, @usage=0x7, 0x5, 0x3, [0x4, 0xbb85, 0x7fffffff, 0x3, 0x8, 0x2]}, {0x3, 0x5, 0xfffffffffffffffb}}) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x2ec5, 0x8214, 0x1, &(0x7f0000000000)={[0x6]}, 0x8) [ 2899.840088] loop5: detected capacity change from 0 to 2048 01:41:47 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x7000000) [ 2899.849591] loop4: detected capacity change from 0 to 16776704 [ 2899.853552] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2899.863267] EXT4-fs (loop4): inodes count not valid: 4026335264 vs 32 [ 2899.885932] FAULT_INJECTION: forcing a failure. [ 2899.885932] name failslab, interval 1, probability 0, space 0, times 0 [ 2899.887608] CPU: 1 PID: 19511 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2899.888590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2899.889772] Call Trace: [ 2899.890155] dump_stack+0x107/0x167 [ 2899.890672] should_fail.cold+0x5/0xa [ 2899.891214] ? create_object.isra.0+0x3a/0xa20 [ 2899.891874] should_failslab+0x5/0x20 [ 2899.892413] kmem_cache_alloc+0x5b/0x310 [ 2899.892988] ? mark_held_locks+0x9e/0xe0 [ 2899.893571] create_object.isra.0+0x3a/0xa20 [ 2899.894191] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2899.894925] kmem_cache_alloc+0x159/0x310 [ 2899.895533] xas_alloc+0x336/0x440 [ 2899.896040] xas_create+0x34a/0x10d0 [ 2899.896586] ? kernel_text_address+0xf2/0x120 [ 2899.897234] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2899.897973] xas_store+0x8c/0x1c40 [ 2899.898484] __xa_store+0x164/0x2d0 [ 2899.899009] ? xa_delete_node+0x280/0x280 [ 2899.899610] ? trace_hardirqs_on+0x5b/0x180 [ 2899.900225] xa_store+0x31/0x50 [ 2899.900698] __io_uring_add_tctx_node+0x1cf/0x520 [ 2899.901395] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2899.902138] ? alloc_fd+0x2e7/0x670 [ 2899.902668] io_uring_setup+0x1fbb/0x2980 [ 2899.903256] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2899.903976] ? wait_for_completion_io+0x270/0x270 [ 2899.904692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2899.905429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2899.906164] do_syscall_64+0x33/0x40 [ 2899.906694] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2899.907415] RIP: 0033:0x7fa936a9db19 [ 2899.907952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2899.910566] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2899.911641] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2899.912644] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2899.913659] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2899.914658] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2899.915673] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2899.919622] loop5: detected capacity change from 0 to 2048 [ 2899.939529] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2899.945425] loop4: detected capacity change from 0 to 16776704 01:41:47 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x600000000000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2899.964518] EXT4-fs (loop4): inodes count not valid: 4026335264 vs 32 01:41:47 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=0x80, &(0x7f0000000040)=@isdn, 0x0, 0x100000}, 0x76) 01:42:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:42:01 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 59) [ 2913.612012] FAULT_INJECTION: forcing a failure. [ 2913.612012] name failslab, interval 1, probability 0, space 0, times 0 [ 2913.614637] CPU: 1 PID: 19635 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2913.616217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2913.618084] Call Trace: [ 2913.618683] dump_stack+0x107/0x167 [ 2913.619506] should_fail.cold+0x5/0xa [ 2913.620356] ? xas_alloc+0x336/0x440 [ 2913.621197] should_failslab+0x5/0x20 01:42:01 executing program 7: ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0x40010, r0, 0x0) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000480)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x401, 0x1, &(0x7f0000000440)="6e5d6a817636190e18090ba3a64746173f3b6f7fc325fecb250551415bc5573391f5c0d2a3", 0x100, 0x0, 0x1, {0x2, r7}}, 0x317a) 01:42:01 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x700000000000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) [ 2913.622050] kmem_cache_alloc+0x5b/0x310 [ 2913.623135] xas_alloc+0x336/0x440 [ 2913.623959] xas_create+0x34a/0x10d0 [ 2913.624804] ? kernel_text_address+0xf2/0x120 [ 2913.625815] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2913.626998] xas_store+0x8c/0x1c40 [ 2913.627827] __xa_store+0x164/0x2d0 [ 2913.628652] ? xa_delete_node+0x280/0x280 [ 2913.629590] ? trace_hardirqs_on+0x5b/0x180 [ 2913.630562] xa_store+0x31/0x50 [ 2913.631312] __io_uring_add_tctx_node+0x1cf/0x520 [ 2913.632417] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2913.633590] ? alloc_fd+0x2e7/0x670 [ 2913.634432] io_uring_setup+0x1fbb/0x2980 [ 2913.635385] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2913.636531] ? wait_for_completion_io+0x270/0x270 [ 2913.637633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2913.638808] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2913.639980] do_syscall_64+0x33/0x40 [ 2913.640818] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2913.641960] RIP: 0033:0x7fa936a9db19 [ 2913.642795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2913.646930] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2913.648649] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2913.650255] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2913.651861] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2913.653464] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2913.655061] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:42:01 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x8000000) 01:42:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000effd80000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:42:01 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x90, 0xa, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x74, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x800}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup2(r2, r2) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x20008000) 01:42:01 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x13, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x450181, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000c, 0xa013, r1, 0x8000000) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) read(r2, &(0x7f0000000080)=""/75, 0x4b) [ 2913.687553] loop5: detected capacity change from 0 to 2048 [ 2913.701397] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2913.725998] loop4: detected capacity change from 0 to 16776704 [ 2913.750645] loop5: detected capacity change from 0 to 2048 [ 2913.761783] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2913.781627] EXT4-fs (loop4): inodes count not valid: 4260298784 vs 32 01:42:01 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 60) [ 2913.833674] loop4: detected capacity change from 0 to 16776704 01:42:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2913.869102] EXT4-fs (loop4): inodes count not valid: 4260298784 vs 32 01:42:01 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) read(r0, &(0x7f0000000000)=""/62, 0x3e) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2913.923774] FAULT_INJECTION: forcing a failure. [ 2913.923774] name failslab, interval 1, probability 0, space 0, times 0 01:42:01 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10000000) [ 2913.926480] CPU: 1 PID: 19760 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2913.928229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2913.930081] Call Trace: [ 2913.930677] dump_stack+0x107/0x167 [ 2913.931496] should_fail.cold+0x5/0xa [ 2913.932363] ? create_object.isra.0+0x3a/0xa20 [ 2913.933388] should_failslab+0x5/0x20 [ 2913.934243] kmem_cache_alloc+0x5b/0x310 [ 2913.935152] ? mark_held_locks+0x9e/0xe0 [ 2913.936072] create_object.isra.0+0x3a/0xa20 [ 2913.937057] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2913.938197] kmem_cache_alloc+0x159/0x310 [ 2913.939126] xas_alloc+0x336/0x440 [ 2913.939935] xas_create+0x34a/0x10d0 [ 2913.940775] ? kernel_text_address+0xf2/0x120 [ 2913.941774] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2913.942943] xas_store+0x8c/0x1c40 [ 2913.943761] __xa_store+0x164/0x2d0 [ 2913.944579] ? xa_delete_node+0x280/0x280 [ 2913.945508] ? trace_hardirqs_on+0x5b/0x180 [ 2913.946476] xa_store+0x31/0x50 [ 2913.947213] __io_uring_add_tctx_node+0x1cf/0x520 [ 2913.948300] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2913.949467] ? alloc_fd+0x2e7/0x670 [ 2913.950299] io_uring_setup+0x1fbb/0x2980 [ 2913.951232] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2913.952373] ? wait_for_completion_io+0x270/0x270 [ 2913.953475] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2913.954643] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2913.955806] do_syscall_64+0x33/0x40 [ 2913.956640] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2913.957786] RIP: 0033:0x7fa936a9db19 [ 2913.958618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2913.962739] RSP: 002b:00007fa934013108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2913.964458] RAX: ffffffffffffffda RBX: 00007fa936bb0f60 RCX: 00007fa936a9db19 [ 2913.966048] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2913.967654] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2913.969251] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 01:42:01 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x810, r1, 0x10000000) 01:42:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="200000007f000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2913.970835] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2913.985926] loop5: detected capacity change from 0 to 2048 [ 2914.014042] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2914.071670] loop5: detected capacity change from 0 to 2048 [ 2914.093938] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:42:17 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 61) [ 2929.314662] loop4: detected capacity change from 0 to 16776704 [ 2929.322944] EXT4-fs (loop4): inodes count not valid: 33554464 vs 32 [ 2929.336938] FAULT_INJECTION: forcing a failure. [ 2929.336938] name failslab, interval 1, probability 0, space 0, times 0 [ 2929.339228] loop4: detected capacity change from 0 to 16776704 [ 2929.339554] CPU: 1 PID: 19891 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2929.342011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2929.343899] Call Trace: [ 2929.344501] dump_stack+0x107/0x167 01:42:17 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x2, 0x10, 0x0, 0x326}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) signalfd4(r0, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8, 0x800) 01:42:17 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x900000000000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:42:17 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x40000000) 01:42:17 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x4010, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:42:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000280000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:42:17 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:42:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2929.345331] should_fail.cold+0x5/0xa [ 2929.346426] ? vm_area_dup+0x78/0x290 [ 2929.347331] should_failslab+0x5/0x20 [ 2929.348208] kmem_cache_alloc+0x5b/0x310 [ 2929.349133] vm_area_dup+0x78/0x290 [ 2929.349958] ? lock_release+0x680/0x680 [ 2929.350860] ? mark_lock+0xf5/0x2df0 [ 2929.351710] ? lock_chain_count+0x20/0x20 [ 2929.352658] ? mark_lock+0xf5/0x2df0 [ 2929.353508] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2929.354693] ? lock_chain_count+0x20/0x20 [ 2929.355627] ? mark_lock+0xf5/0x2df0 [ 2929.356485] ? vm_area_alloc+0x110/0x110 [ 2929.357413] ? __lock_acquire+0x1657/0x5b00 [ 2929.358417] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2929.359598] ? vmacache_find+0x55/0x2a0 [ 2929.360511] __split_vma+0xa8/0x4e0 [ 2929.361336] __do_munmap+0x365/0x1260 [ 2929.362197] ? arch_get_unmapped_area+0x450/0x450 [ 2929.363288] ? lock_release+0x680/0x680 [ 2929.364199] mmap_region+0x7c8/0x1500 [ 2929.365077] do_mmap+0xcdb/0x11e0 [ 2929.365869] vm_mmap_pgoff+0x198/0x1f0 [ 2929.366760] ? randomize_page+0xb0/0xb0 [ 2929.367674] ksys_mmap_pgoff+0x41c/0x560 [ 2929.368609] ? find_mergeable_anon_vma+0x250/0x250 [ 2929.369721] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2929.370901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2929.372073] do_syscall_64+0x33/0x40 [ 2929.372912] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2929.374071] RIP: 0033:0x7fa936a9db62 [ 2929.374921] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2929.379117] RSP: 002b:00007fa9340130f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2929.380842] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fa936a9db62 [ 2929.382449] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 01:42:17 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x53000fff) [ 2929.384214] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2929.385864] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2929.387469] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2929.399661] loop5: detected capacity change from 0 to 2048 [ 2929.406898] EXT4-fs (loop4): inodes count not valid: 33554464 vs 32 [ 2929.409535] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2929.434639] loop5: detected capacity change from 0 to 2048 [ 2929.447193] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 01:42:17 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x1010, r0, 0x0) 01:42:17 executing program 6: wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x620b, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x1a4e, &(0x7f0000000200)={0x0, 0x6453, 0x2, 0x2, 0x36d, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 01:42:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000380000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:42:17 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 62) 01:42:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2929.530552] loop5: detected capacity change from 0 to 2048 [ 2929.535004] EXT4-fs (loop5): Invalid log block size: 135266304 01:42:17 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fb4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 2929.564027] loop5: detected capacity change from 0 to 2048 [ 2929.599442] EXT4-fs (loop5): Invalid log block size: 135266304 [ 2929.637927] FAULT_INJECTION: forcing a failure. [ 2929.637927] name failslab, interval 1, probability 0, space 0, times 0 [ 2929.640734] CPU: 1 PID: 20032 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2929.642297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2929.644188] Call Trace: [ 2929.644795] dump_stack+0x107/0x167 [ 2929.645622] should_fail.cold+0x5/0xa [ 2929.646489] ? create_object.isra.0+0x3a/0xa20 [ 2929.647533] should_failslab+0x5/0x20 [ 2929.648403] kmem_cache_alloc+0x5b/0x310 [ 2929.649330] create_object.isra.0+0x3a/0xa20 [ 2929.650326] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2929.651482] kmem_cache_alloc+0x159/0x310 [ 2929.652431] vm_area_dup+0x78/0x290 [ 2929.653261] ? mark_lock+0xf5/0x2df0 [ 2929.654109] ? lock_chain_count+0x20/0x20 [ 2929.655043] ? mark_lock+0xf5/0x2df0 [ 2929.655901] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2929.657082] ? lock_chain_count+0x20/0x20 [ 2929.658012] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2929.659013] ? trace_hardirqs_on+0x5b/0x180 [ 2929.659995] ? mark_lock+0xf5/0x2df0 [ 2929.660837] ? vm_area_alloc+0x110/0x110 [ 2929.661753] ? __lock_acquire+0x1657/0x5b00 [ 2929.662746] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2929.663932] ? vmacache_find+0x55/0x2a0 [ 2929.664827] __split_vma+0xa8/0x4e0 [ 2929.665647] __do_munmap+0x365/0x1260 [ 2929.666507] ? arch_get_unmapped_area+0x450/0x450 [ 2929.667587] ? lock_release+0x680/0x680 [ 2929.668498] mmap_region+0x7c8/0x1500 [ 2929.669365] do_mmap+0xcdb/0x11e0 [ 2929.670156] vm_mmap_pgoff+0x198/0x1f0 [ 2929.671033] ? randomize_page+0xb0/0xb0 [ 2929.671943] ksys_mmap_pgoff+0x41c/0x560 [ 2929.672865] ? find_mergeable_anon_vma+0x250/0x250 [ 2929.673972] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2929.675152] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2929.676316] do_syscall_64+0x33/0x40 [ 2929.677156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2929.678303] RIP: 0033:0x7fa936a9db62 [ 2929.679134] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2929.683248] RSP: 002b:00007fa9340130f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2929.684962] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fa936a9db62 [ 2929.686555] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2929.688155] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2929.689752] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2929.691343] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2929.711797] loop4: detected capacity change from 0 to 16776704 [ 2929.730669] EXT4-fs (loop4): inodes count not valid: 50331680 vs 32 01:42:31 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 63) 01:42:31 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:42:31 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xf00000000000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:42:31 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x53003fff) 01:42:31 executing program 7: r0 = syz_io_uring_setup(0x2620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x21a}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x6167, 0x6956, 0x249159dc9c153b35, &(0x7f0000000040)={[0xda7]}, 0x8) 01:42:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:42:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000480000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:42:31 executing program 6: r0 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="725b3eda65478a096032a42f69569efad17133f0c2995523762c7a240f3e746aeab1c21b74b4432e82e9089bdd23157249f1198adbf50818a7", 0x39, 0x4}], 0x2000000, &(0x7f0000000200)={[{'\x00'}, {'\'/\\$/$['}, {'\x00'}, {'\'-'}, {'S\'].&'}, {'@@'}], [{@obj_type={'obj_type', 0x3d, ':$&{}.{.-'}}]}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x10, r0, 0x31be8000) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 2943.694642] loop4: detected capacity change from 0 to 16776704 [ 2943.699198] EXT4-fs (loop4): inodes count not valid: 67108896 vs 32 [ 2943.734726] FAULT_INJECTION: forcing a failure. [ 2943.734726] name failslab, interval 1, probability 0, space 0, times 0 [ 2943.735341] loop4: detected capacity change from 0 to 16776704 [ 2943.737639] CPU: 0 PID: 20154 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2943.740123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2943.742164] Call Trace: [ 2943.742815] dump_stack+0x107/0x167 [ 2943.743713] should_fail.cold+0x5/0xa [ 2943.744676] ? anon_vma_clone+0xdc/0x590 [ 2943.745676] should_failslab+0x5/0x20 [ 2943.746611] kmem_cache_alloc+0x5b/0x310 [ 2943.747614] anon_vma_clone+0xdc/0x590 [ 2943.748602] __split_vma+0x17c/0x4e0 [ 2943.749517] __do_munmap+0x365/0x1260 [ 2943.750454] ? arch_get_unmapped_area+0x450/0x450 [ 2943.751636] ? lock_release+0x680/0x680 [ 2943.752628] mmap_region+0x7c8/0x1500 01:42:31 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xfff) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r6, r7, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r10, r11, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000340)={0x77359400}, 0x1, 0x1, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r12, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x209f, &(0x7f0000000000)={0x0, 0x3108, 0x20, 0x0, 0x1fb}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r14 = timerfd_create(0x8, 0x80000) syz_io_uring_submit(r12, r13, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[r0, r0, r0, r14], 0x4, 0x0, 0x1}, 0x400) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2943.753572] do_mmap+0xcdb/0x11e0 [ 2943.754617] vm_mmap_pgoff+0x198/0x1f0 [ 2943.755572] ? randomize_page+0xb0/0xb0 [ 2943.756588] ksys_mmap_pgoff+0x41c/0x560 [ 2943.757580] ? find_mergeable_anon_vma+0x250/0x250 [ 2943.758782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2943.760086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2943.761340] do_syscall_64+0x33/0x40 [ 2943.762245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2943.763490] RIP: 0033:0x7fa936a9db62 [ 2943.764416] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2943.768905] RSP: 002b:00007fa9340130f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2943.770762] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fa936a9db62 [ 2943.772517] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2943.774247] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2943.776010] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2943.777754] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2943.787696] EXT4-fs (loop4): inodes count not valid: 67108896 vs 32 01:42:31 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0xac, 0x40, 0x6, 0x1f, 0x0, 0x6, 0xb0290, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x2, 0xffffff28, 0x2, 0xe5f0000000000000, 0x3f, 0x7, 0x0, 0x7, 0x0, 0xffffffffffff74d3}, r0, 0xc, r0, 0xb) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) ioctl$FITHAW(r2, 0xc0045878) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) 01:42:31 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x53203fff) [ 2943.824741] loop5: detected capacity change from 0 to 2048 01:42:31 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 64) [ 2943.853308] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 01:42:31 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x9effffff00000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:42:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000580000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2943.917652] loop5: detected capacity change from 0 to 2048 [ 2943.924646] FAULT_INJECTION: forcing a failure. [ 2943.924646] name failslab, interval 1, probability 0, space 0, times 0 [ 2943.926440] CPU: 1 PID: 20270 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2943.927448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2943.928654] Call Trace: [ 2943.929029] dump_stack+0x107/0x167 [ 2943.929556] should_fail.cold+0x5/0xa [ 2943.930107] ? ___slab_alloc+0x155/0x700 [ 2943.930693] ? create_object.isra.0+0x3a/0xa20 [ 2943.931351] should_failslab+0x5/0x20 [ 2943.931902] kmem_cache_alloc+0x5b/0x310 [ 2943.932500] create_object.isra.0+0x3a/0xa20 [ 2943.933132] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2943.933864] kmem_cache_alloc+0x159/0x310 [ 2943.934467] anon_vma_clone+0xdc/0x590 [ 2943.935033] __split_vma+0x17c/0x4e0 [ 2943.935572] __do_munmap+0x365/0x1260 [ 2943.936128] ? arch_get_unmapped_area+0x450/0x450 [ 2943.936821] ? lock_release+0x680/0x680 [ 2943.937395] mmap_region+0x7c8/0x1500 [ 2943.937950] do_mmap+0xcdb/0x11e0 [ 2943.938453] vm_mmap_pgoff+0x198/0x1f0 [ 2943.939014] ? randomize_page+0xb0/0xb0 [ 2943.939594] ksys_mmap_pgoff+0x41c/0x560 [ 2943.940184] ? find_mergeable_anon_vma+0x250/0x250 [ 2943.940893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2943.941648] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2943.942391] do_syscall_64+0x33/0x40 [ 2943.942928] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2943.943664] RIP: 0033:0x7fa936a9db62 [ 2943.944208] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2943.946858] RSP: 002b:00007fa9340130f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2943.947969] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fa936a9db62 [ 2943.949002] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2943.950028] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2943.951056] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2943.952062] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2943.970628] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 2943.988218] loop4: detected capacity change from 0 to 16776704 [ 2944.004040] EXT4-fs (loop4): inodes count not valid: 83886112 vs 32 01:42:31 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff0f0053) 01:42:31 executing program 7: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) syz_io_uring_submit(r2, r0, &(0x7f0000000540)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x8}, 0xfffffffe) execveat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='-.%[F:%\x00'], &(0x7f0000000240)=[&(0x7f0000000200)='\x00'], 0x1000) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0x6, 0x7f, 0x40, 0x3f}, {0x928, 0x1, 0x9, 0xfff}, {0x7ff, 0x0, 0x4d, 0x6}, {0x7, 0x6, 0x5f, 0x200}, {0x1f, 0x2, 0x0, 0x1}]}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x8, 0x8, 0x1ff, 0x9, 0x8, 0x2}, {0x2, 0x7ff, 0x3f, 0x200, 0x4, 0x8c}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000480)={'team_slave_0\x00', {0x2, 0x0, @loopback}}) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x4fa, 0x7, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x11010, 0x0, 0xfffffffb, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/if_inet6\x00') r5 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r5) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, r5) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x5, 0x1, 0xe1, 0x9, 0x0, 0x0, 0x2001, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xf568}, 0x1044, 0x7, 0x6, 0x6, 0x1bb, 0xa1, 0x400, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000001c0)=0x200000, 0xffff, 0x7) 01:42:31 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup2(r0, r0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x18c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1402}, @CTA_LABELS_MASK={0x24, 0x17, [0x1, 0x3, 0x5e, 0xfffffffb, 0x0, 0x401, 0x100, 0x531]}, @CTA_TUPLE_REPLY={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_NAT_DST={0x4c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}, @CTA_NAT_SRC={0x80, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}, @CTA_MARK={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20040081}, 0x20000840) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:42:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:42:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000680000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) [ 2944.088816] loop5: detected capacity change from 0 to 2048 01:42:31 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) fallocate(r2, 0x33, 0x7, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x10, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) ftruncate(r4, 0x1000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800001, 0x12, r3, 0x8000000) 01:42:31 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3f0053) [ 2944.107962] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 2944.147475] loop5: detected capacity change from 0 to 2048 [ 2944.160756] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 2944.170327] loop4: detected capacity change from 0 to 16776704 [ 2944.183636] EXT4-fs (loop4): inodes count not valid: 100663328 vs 32 [ 2944.212299] loop4: detected capacity change from 0 to 16776704 [ 2944.235591] EXT4-fs (loop4): inodes count not valid: 100663328 vs 32 01:42:45 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 65) 01:42:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000780000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:42:45 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3f2053) 01:42:45 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xd900000000000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:42:45 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x4095, &(0x7f0000000240)={0x0, 0x91b1, 0x0, 0x0, 0x25d, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 01:42:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:42:45 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB='\a\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00']) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x4, 0x0, 0x6, 0x7, 0x0, 0x100000000, 0x0, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext={0x0, 0x101}, 0x5c100, 0x6, 0x5, 0x3, 0xf4a4, 0x7, 0x6b, 0x0, 0x9175, 0x0, 0x7f}, r2, 0x2, 0xffffffffffffffff, 0x9) r3 = getpgrp(r2) r4 = dup(r1) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x7, 0x1, 0x81, 0x5, 0x0, 0xee34, 0x8640, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000080), 0x4}, 0x100, 0x10000, 0x0, 0x5, 0xfffffffffffffffe, 0x1ff, 0x7, 0x0, 0x6, 0x0, 0x6}, r3, 0xe, r4, 0x8) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x4, 0xf, 0x40, 0x0, 0x40}) 01:42:45 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) r1 = syz_io_uring_setup(0x8bd, &(0x7f0000000180)={0x0, 0x41da, 0x4, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 2957.853495] loop4: detected capacity change from 0 to 16776704 [ 2957.860466] FAULT_INJECTION: forcing a failure. [ 2957.860466] name failslab, interval 1, probability 0, space 0, times 0 [ 2957.862204] CPU: 1 PID: 20424 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2957.863172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2957.864338] Call Trace: [ 2957.864712] dump_stack+0x107/0x167 [ 2957.865223] should_fail.cold+0x5/0xa [ 2957.865756] ? vm_area_alloc+0x1c/0x110 [ 2957.866325] should_failslab+0x5/0x20 [ 2957.866855] kmem_cache_alloc+0x5b/0x310 [ 2957.867444] vm_area_alloc+0x1c/0x110 [ 2957.867975] mmap_region+0x97e/0x1500 [ 2957.868525] do_mmap+0xcdb/0x11e0 [ 2957.869039] vm_mmap_pgoff+0x198/0x1f0 [ 2957.869588] ? randomize_page+0xb0/0xb0 [ 2957.870165] ksys_mmap_pgoff+0x41c/0x560 [ 2957.870737] ? find_mergeable_anon_vma+0x250/0x250 01:42:45 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7ad6, &(0x7f0000000000)={0x0, 0x5e65, 0x1, 0x0, 0x1c1, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 01:42:45 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xffff8000) [ 2957.871440] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2957.872408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2957.873130] do_syscall_64+0x33/0x40 [ 2957.873651] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2957.874365] RIP: 0033:0x7fa936a9db62 [ 2957.874890] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2957.877465] RSP: 002b:00007fa9340130f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2957.878525] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fa936a9db62 [ 2957.879521] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2957.880523] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2957.881519] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2957.882534] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2957.889252] EXT4-fs (loop4): inodes count not valid: 117440544 vs 32 [ 2957.908729] loop5: detected capacity change from 0 to 2048 [ 2957.913727] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 2957.921014] loop4: detected capacity change from 0 to 16776704 [ 2957.945575] loop5: detected capacity change from 0 to 2048 [ 2957.952801] EXT4-fs (loop4): inodes count not valid: 117440544 vs 32 [ 2957.959107] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 01:42:45 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x800000000) 01:42:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:42:45 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 66) 01:42:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000880000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:42:45 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x1000000000) 01:42:45 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000000)={0x0, 0x20000, 0x2, 0x0, 0x1b3, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) pread64(r3, &(0x7f0000000200)=""/237, 0xed, 0x5) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x30, r2, 0x8000000) syz_io_uring_setup(0x57ff, &(0x7f00000000c0)={0x0, 0x98a6, 0x10, 0x3, 0x185, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 2958.131937] loop5: detected capacity change from 0 to 2048 [ 2958.136261] FAULT_INJECTION: forcing a failure. [ 2958.136261] name failslab, interval 1, probability 0, space 0, times 0 [ 2958.137910] CPU: 1 PID: 20555 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2958.138876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2958.140035] Call Trace: [ 2958.140417] dump_stack+0x107/0x167 [ 2958.140930] should_fail.cold+0x5/0xa [ 2958.141470] ? create_object.isra.0+0x3a/0xa20 [ 2958.142110] should_failslab+0x5/0x20 [ 2958.142650] kmem_cache_alloc+0x5b/0x310 [ 2958.143222] create_object.isra.0+0x3a/0xa20 [ 2958.143836] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2958.144558] kmem_cache_alloc+0x159/0x310 [ 2958.145141] vm_area_alloc+0x1c/0x110 [ 2958.145670] mmap_region+0x97e/0x1500 [ 2958.146214] do_mmap+0xcdb/0x11e0 [ 2958.146727] vm_mmap_pgoff+0x198/0x1f0 [ 2958.147285] ? randomize_page+0xb0/0xb0 [ 2958.147853] ksys_mmap_pgoff+0x41c/0x560 [ 2958.148445] ? find_mergeable_anon_vma+0x250/0x250 [ 2958.149132] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2958.149862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2958.150584] do_syscall_64+0x33/0x40 [ 2958.151104] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2958.151704] RIP: 0033:0x7fa936a9db62 [ 2958.152140] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2958.154248] RSP: 002b:00007fa9340130f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2958.155130] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fa936a9db62 [ 2958.155948] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2958.156779] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2958.157593] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2958.158411] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2958.169915] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 01:42:58 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 67) 01:42:58 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x16f9, &(0x7f0000000000)={0x0, 0x3ab0, 0x0, 0x0, 0x179}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x7e09, &(0x7f0000000100)=[r0], 0x1}, 0x5) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:42:58 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0xf0ffffff00000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 01:42:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x14, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 01:42:58 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r3 = syz_io_uring_setup(0x3, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r7 = fcntl$dupfd(r0, 0x0, r0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd=r7, 0x6, &(0x7f0000000200)="58c4b9dbe3fd280352b1ea394b5bb236b7eb564626e2088f6500eab0141064fb6a2c441824c040e6a809e26425ee53af57a586161bd38c1cb025a0622edfbc2b4da25a81f0d1fad49b56cef28880d9180d2796eba73e531cb7d226c859612a736e960ff37954e017da4b5fb172ea8c70049884528d", 0x75, 0xc, 0x1, {0x0, r8}}, 0xb1) io_uring_enter(r3, 0x5c33, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) r10 = accept4$bt_l2cap(r2, &(0x7f0000000300)={0x1f, 0x0, @none}, &(0x7f0000000340)=0xe, 0xc0800) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000380)={{r10}, 0xfff, 0x4, 0x7}) read(r9, &(0x7f0000000100)=""/120, 0x78) ftruncate(r2, 0x0) r11 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r11, 0x0) 01:42:58 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10000000000) 01:42:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000b80000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@noquota}, {@norecovery}]}) 01:42:58 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = syz_io_uring_setup(0x3e6b, &(0x7f0000000240)={0x0, 0xdce6, 0x20, 0x2, 0x2b, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0x7ff) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x8) syz_io_uring_setup(0x880, &(0x7f0000000540)={0x0, 0xe0a, 0x2, 0x1, 0x22f, 0x0, r2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0xffff) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r4}}, 0x3) readv(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/131, 0x83}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000000480)=""/143, 0x8f}], 0x4) [ 2971.190317] FAULT_INJECTION: forcing a failure. [ 2971.190317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2971.193101] CPU: 1 PID: 20574 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2971.194670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2971.196547] Call Trace: [ 2971.197149] dump_stack+0x107/0x167 [ 2971.197976] should_fail.cold+0x5/0xa [ 2971.198848] __alloc_pages_nodemask+0x182/0x600 [ 2971.199904] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2971.201284] ? walk_mem_res+0x170/0x170 [ 2971.202198] alloc_pages_current+0x187/0x280 [ 2971.203198] pte_alloc_one+0x16/0x1a0 [ 2971.204070] __pte_alloc+0x1d/0x330 [ 2971.204906] remap_pfn_range_internal+0x9a3/0xf60 [ 2971.206004] ? lookup_memtype+0x5b/0x200 [ 2971.206943] ? apply_to_existing_page_range+0x40/0x40 [ 2971.208121] remap_pfn_range+0xcd/0x160 [ 2971.209029] ? remap_pfn_range_notrack+0x70/0x70 [ 2971.210111] io_uring_mmap+0x398/0x530 [ 2971.210991] mmap_file+0x5e/0xe0 [ 2971.211754] mmap_region+0xc49/0x1500 [ 2971.212638] do_mmap+0xcdb/0x11e0 [ 2971.213431] vm_mmap_pgoff+0x198/0x1f0 [ 2971.214315] ? randomize_page+0xb0/0xb0 [ 2971.215226] ksys_mmap_pgoff+0x41c/0x560 [ 2971.216152] ? find_mergeable_anon_vma+0x250/0x250 [ 2971.217285] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2971.218475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2971.219651] do_syscall_64+0x33/0x40 [ 2971.220503] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2971.221667] RIP: 0033:0x7fa936a9db62 [ 2971.222510] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2971.226680] RSP: 002b:00007fa9340130f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2971.228419] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fa936a9db62 [ 2971.230031] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2971.231630] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2971.233244] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2971.234852] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:42:59 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xffffffffffffb) [ 2971.244838] loop4: detected capacity change from 0 to 16776704 [ 2971.253782] ------------[ cut here ]------------ [ 2971.254862] WARNING: CPU: 0 PID: 20574 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 2971.256077] Modules linked in: [ 2971.256552] CPU: 0 PID: 20574 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2971.257502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2971.258662] RIP: 0010:get_pat_info+0x216/0x270 [ 2971.259274] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 51 89 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 3a 89 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 65 8f 5a 00 e9 [ 2971.261745] RSP: 0018:ffff888052b4f898 EFLAGS: 00010212 [ 2971.262499] RAX: 0000000000012e0f RBX: ffff888048039b00 RCX: ffffc900007eb000 [ 2971.263470] RDX: 0000000000040000 RSI: ffffffff81124696 RDI: 0000000000000007 [ 2971.264457] RBP: ffff888052b4f950 R08: 0000000000000000 R09: ffff888052b4f820 [ 2971.265434] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 2971.266415] R13: 1ffff1100a569f13 R14: 0000000000000000 R15: ffff888048039b50 [ 2971.267399] FS: 00007fa934013700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2971.268509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2971.269283] CR2: 00007f1302a183a4 CR3: 000000004e73e000 CR4: 0000000000350ef0 [ 2971.270263] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000100000000 [ 2971.271236] DR3: 0000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000011dd06aa [ 2971.273427] Call Trace: [ 2971.274326] ? pgprot_writethrough+0xc0/0xc0 [ 2971.276587] ? finish_task_switch+0x126/0x5d0 [ 2971.278479] ? finish_task_switch+0xef/0x5d0 [ 2971.280130] untrack_pfn+0xdc/0x240 [ 2971.280655] ? track_pfn_insert+0x150/0x150 [ 2971.281233] ? lock_downgrade+0x6d0/0x6d0 [ 2971.281799] ? uprobe_munmap+0x1c/0x560 [ 2971.282362] unmap_single_vma+0x1bc/0x300 [ 2971.282916] zap_page_range_single+0x2ce/0x450 [ 2971.283542] ? unmap_single_vma+0x300/0x300 [ 2971.284122] ? remap_pfn_range_internal+0xc56/0xf60 [ 2971.284815] ? lookup_memtype+0x5b/0x200 [ 2971.285382] ? apply_to_existing_page_range+0x40/0x40 [ 2971.286077] remap_pfn_range+0x139/0x160 [ 2971.286637] ? remap_pfn_range_notrack+0x70/0x70 [ 2971.287264] io_uring_mmap+0x398/0x530 [ 2971.287809] mmap_file+0x5e/0xe0 [ 2971.288304] mmap_region+0xc49/0x1500 [ 2971.288840] do_mmap+0xcdb/0x11e0 [ 2971.289311] vm_mmap_pgoff+0x198/0x1f0 [ 2971.289853] ? randomize_page+0xb0/0xb0 [ 2971.290409] ksys_mmap_pgoff+0x41c/0x560 [ 2971.290951] ? find_mergeable_anon_vma+0x250/0x250 [ 2971.291645] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2971.292387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2971.293070] do_syscall_64+0x33/0x40 [ 2971.293592] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2971.294275] RIP: 0033:0x7fa936a9db62 [ 2971.294793] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2971.297290] RSP: 002b:00007fa9340130f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2971.298353] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fa936a9db62 [ 2971.299297] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2971.300282] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2971.301260] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2971.302234] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2971.303232] irq event stamp: 1333 [ 2971.303712] hardirqs last enabled at (1343): [] console_unlock+0x92d/0xb40 [ 2971.304885] hardirqs last disabled at (1352): [] console_unlock+0x839/0xb40 [ 2971.306035] softirqs last enabled at (798): [] asm_call_irq_on_stack+0x12/0x20 [ 2971.307242] softirqs last disabled at (455): [] asm_call_irq_on_stack+0x12/0x20 [ 2971.308438] ---[ end trace f604667978709a81 ]--- [ 2971.309278] loop5: detected capacity change from 0 to 2048 [ 2971.323415] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 2971.325218] EXT4-fs (loop4): inodes count not valid: 184549408 vs 32 [ 2971.345627] loop5: detected capacity change from 0 to 2048 [ 2971.348722] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 01:42:59 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000024c0), &(0x7f0000002500)=0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) clone3(&(0x7f00000008c0)={0x1362100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x50, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 01:42:59 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x14}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2971.392962] loop4: detected capacity change from 0 to 16776704 01:42:59 executing program 3: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x40000000000000) [ 2971.401254] EXT4-fs (loop4): inodes count not valid: 184549408 vs 32 01:42:59 executing program 1: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 68) 01:42:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2e, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001e00d2c9446c7b1b22a8a53", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2971.456937] FAULT_INJECTION: forcing a failure. [ 2971.456937] name failslab, interval 1, probability 0, space 0, times 0 [ 2971.458394] CPU: 0 PID: 20760 Comm: syz-executor.1 Tainted: G W 5.10.238 #1 [ 2971.459398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2971.460412] Call Trace: [ 2971.460739] dump_stack+0x107/0x167 [ 2971.461181] should_fail.cold+0x5/0xa [ 2971.461646] ? ptlock_alloc+0x1d/0x70 [ 2971.462110] should_failslab+0x5/0x20 [ 2971.462570] kmem_cache_alloc+0x5b/0x310 [ 2971.463076] ptlock_alloc+0x1d/0x70 [ 2971.463527] pte_alloc_one+0x68/0x1a0 [ 2971.463993] __pte_alloc+0x1d/0x330 [ 2971.464453] remap_pfn_range_internal+0x9a3/0xf60 [ 2971.465046] ? lookup_memtype+0x5b/0x200 [ 2971.465547] ? apply_to_existing_page_range+0x40/0x40 [ 2971.466178] remap_pfn_range+0xcd/0x160 [ 2971.466660] ? remap_pfn_range_notrack+0x70/0x70 [ 2971.467244] io_uring_mmap+0x398/0x530 [ 2971.467719] mmap_file+0x5e/0xe0 [ 2971.468130] mmap_region+0xc49/0x1500 [ 2971.468607] do_mmap+0xcdb/0x11e0 [ 2971.469032] vm_mmap_pgoff+0x198/0x1f0 [ 2971.469505] ? randomize_page+0xb0/0xb0 [ 2971.469996] ksys_mmap_pgoff+0x41c/0x560 [ 2971.470486] ? find_mergeable_anon_vma+0x250/0x250 [ 2971.471088] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2971.471723] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2971.472356] do_syscall_64+0x33/0x40 [ 2971.472808] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2971.473432] RIP: 0033:0x7fa936a9db62 [ 2971.473882] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2971.476097] RSP: 002b:00007fa9340130f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2971.477029] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fa936a9db62 [ 2971.477893] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2971.478751] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2971.479614] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2971.480478] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2971.489210] loop5: detected capacity change from 0 to 2048 [ 2971.497699] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 2971.515519] loop5: detected capacity change from 0 to 2048 [ 2971.521937] EXT4-fs (loop5): VFS: Can't find ext4 filesystem VM DIAGNOSIS: 01:42:59 Registers: info registers vcpu 0 RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e1721 RDI=ffffffff879f5140 RBP=ffffffff879f5100 RSP=ffff888052b4f238 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000078 R13=0000000000000078 R14=ffffffff879f5100 R15=dffffc0000000000 RIP=ffffffff822e1778 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa934013700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1302a183a4 CR3=000000004e73e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000100000000 DR3=0000000100000000 DR6=00000000ffff0ff0 DR7=0000000011dd06aa EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fa936b847c000007fa936b847c8 XMM02=00007fa936b847e000007fa936b847c0 XMM03=00007fa936b847c800007fa936b847c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000006f82 RDX=dffffc0000000000 RSI=0000000000006f82 RDI=ffffffff85d8ad18 RBP=ffff88801581f1a5 RSP=ffff88801581f098 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000032042 R11=1ffff11002b03e1b R12=ffff88801581f1b8 R13=ffff88801581f170 R14=1ffff11002b03e1b R15=ffffffff816f82e9 RIP=ffffffff811084c5 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd2485c0900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd2479e2fa0 CR3=000000000ed4e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=b141e023f6c0935a00000000007ecf38 XMM05=d3fdd5f48436fbd700000000000aeab0 XMM06=3237088fb7d27b4f00000000000ae968 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000