, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x70) listen(r2, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:26:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ff0200000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x88, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x32}}}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="d81559c4c0b1"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x2, 0x6, 0x0, {0x80, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0xe0000000, 0x3}}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x0, 0x5, 0x0, {0xec24, 0xb19, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x0, 0xfb}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x4, {0x5, 0x7ff, 0x24, 0x4}}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000380)=@default_ap_ssid, 0x6, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=0xe, 0x800) 01:26:11 executing program 1: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) fchdir(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) rmdir(&(0x7f0000000000)='./file0\x00') sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r3}, 0x14}}, 0x0) write$binfmt_elf64(r1, &(0x7f00000008c0)=ANY=[], 0x629) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 379.247914] loop1: detected capacity change from 0 to 262144 01:26:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:26:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="be000000", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:26:11 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r1, r0) 01:26:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x3f, 0x4, 0xfc, 0x5, 0x0, 0x0, 0xa25d, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xbd, 0x2, @perf_bp={&(0x7f0000000540)}, 0x4800, 0x80000001, 0x6, 0x2, 0x8, 0x20, 0x81, 0x0, 0x5, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 379.278184] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 379.285010] loop0: detected capacity change from 0 to 41948160 [ 379.298642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.300313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.303323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:26:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0xaaaaaaaaaaaac5e, &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@fat=@nocase}]}) 01:26:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x3f, 0x4, 0xfc, 0x5, 0x0, 0x0, 0xa25d, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xbd, 0x2, @perf_bp={&(0x7f0000000540)}, 0x4800, 0x80000001, 0x6, 0x2, 0x8, 0x20, 0x81, 0x0, 0x5, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x70) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:26:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:26:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000480)='./file0/file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x130000, 0x0) 01:26:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x3f, 0x4, 0xfc, 0x5, 0x0, 0x0, 0xa25d, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xbd, 0x2, @perf_bp={&(0x7f0000000540)}, 0x4800, 0x80000001, 0x6, 0x2, 0x8, 0x20, 0x81, 0x0, 0x5, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) [ 380.162898] loop0: detected capacity change from 0 to 41948160 01:26:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x70) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:26:27 executing program 6: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x3f, 0x4, 0xfc, 0x5, 0x0, 0x0, 0xa25d, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xbd, 0x2, @perf_bp={&(0x7f0000000540)}, 0x4800, 0x80000001, 0x6, 0x2, 0x8, 0x20, 0x81, 0x0, 0x5, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x70) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:26:27 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:26:27 executing program 1: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:27 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="be000000", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:26:27 executing program 2: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="17f112e47e86", @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @multicast1, @link_local, @private}}}}, 0x0) [ 395.307131] loop0: detected capacity change from 0 to 41948160 01:26:27 executing program 6: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 395.322634] loop1: detected capacity change from 0 to 262144 [ 395.337063] loop4: detected capacity change from 0 to 262144 [ 395.344237] loop5: detected capacity change from 0 to 41948160 01:26:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000380)={0x0, 0x0, 0x1a, 0x7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000300), 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast1}}) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0xf6, r3, 0x1, 0x4, 0x6, @remote}, 0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@loopback, @private2, @mcast1, 0xeaa, 0x73d, 0x3, 0x100, 0x3ff, 0x80, r3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r2, 0x0) getsockname(r2, &(0x7f0000000940)=@ax25={{0x3, @null}, [@bcast, @null, @bcast, @null, @default, @netrom, @default]}, &(0x7f0000000080)=0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x7d54c3, 0x5) copy_file_range(r4, &(0x7f0000000180)=0x8, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) lseek(r0, 0x1, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'xfrm0\x00'}) sendmmsg$inet6(r5, &(0x7f0000000900)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xffffffff}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000400)="d80869ecaecc60e5c0f8098a103e602cf7f3fe1cd0540bb8f0a95d2d25ece8c79eb2365bbab4089c94b8f5a007459934bc79d548c925cce613f950f3cb60da92ce7acb2a01bd3ea0a97edfe41851fa0540712ac47e89501605542dd57e5e58d8ff1ef1235a0920934ca7b86fd777c8", 0x6f}, {&(0x7f0000000480)="149db4bc54d4ddc6b17563ef47d306008157cdd2085c07d05a8d809776c6e3e26764c3ff100009bd762ad5a8e60c96c453b61830c796c55a99dd1b3290795b37b8b3ed6e436c8d7fc7c375a987b668c2e97fb88a2c93387662d44be3529c92142c34604a7164d58505d81379b82820f1c0469c97", 0x74}, {&(0x7f0000000500)="856b3f255ae214175cd810c1c3f71c212bed3240c42bd81c20d9e07d5f05e0d45f66a4bf6b4121f4d62d40328a5bfc5e08a33a1a972a2beaf227", 0x3a}, {&(0x7f0000000540)="9042799dd6b6289816fd60dc617fd982b59b7547ef82e54fb53ea211e38a930c0afd275f9ad0f5b9aac0c1804442482f2996efbd12830252dbe5f9c58369fe856623f4ee73323720919316c69d1eeab5a8547e22bf81492fd9d248824c2929f49dbcdf0588858038c54d94476914f444511d672686e8fb40df2190b1c5f4a215cd99845c4e29e4423e3d60e40c68959ddb51ad09b50d2055ba8d16", 0x9b}, {&(0x7f0000000600)="7f6dce787c808adb4b5d162a0a52a070b66d589cbc3badbbd452c5a0a4074525f2488fe1da5e5e9e422481ce7fca1fb4e7f71cfc15e96f4b09db71794ac1f3a8418a4b49f319c5265cdf88d8e7a689734e9984add0edddfde8cfa23cde087eaeb8fa6abdd11502a1b34fa0661add80f4b10c83d13fdc80d0d26cc14d167f1f5c83ed9e3121ec6f97bdce46e1201b9f2b45eb05f38d1e4b0e1a2f2982c92b6cf30ea815ea8ff84822c1637ed2d8f7e153bd0a3e56cc521c991e1fe730464d2157d3f3513c0c73c3c6c6e363954c1ecb154ff5dbb1b62ff853e55aca94c760716ad133e5fb9b460b9f3af6452093bb75447df32cd2", 0xf4}, {&(0x7f0000000700)="cd883c1b3e5c51086772b63128f866788c85e952f1022b6f43b1d441ab3f2df6eeca93311c2a8baa6d42bfc95f6c16c92e", 0x31}], 0x6, &(0x7f00000007c0)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x67, 0x5, '\x00', [@pad1, @generic={0x1, 0x29, "311793d38138e4ae8de156afc78b7e9a54cdb00374e01684f7d9c8bbdd3bd0e396f19ad12642fd7a2d"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x5c, 0x6, 0x2, 0x5, 0x0, [@remote, @loopback, @remote]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x6, 0xe, 0x2, 0x2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, @mcast1, @private2, @remote]}}}], 0x130}}], 0x1, 0x8000) [ 395.411575] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 395.415414] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:26:27 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:26:27 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:26:27 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:27 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:27 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x70) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:26:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x70) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 395.723082] loop4: detected capacity change from 0 to 262144 01:26:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000280), 0x24, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) [ 395.745143] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 395.750958] loop0: detected capacity change from 0 to 41948160 [ 395.834391] loop5: detected capacity change from 0 to 41948160 01:26:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:41 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000003d40)=0xfffe, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:26:41 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x11, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_io_uring_setup(0x3687, &(0x7f0000000400)={0x0, 0x89cc, 0x0, 0x2, 0x2e9}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pread64(r0, &(0x7f0000000380)=""/116, 0x74, 0xd349578) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/meminfo\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x879, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x4}}, 0x0) io_uring_enter(r4, 0x76d2, 0x0, 0x0, 0x0, 0x0) r8 = fsmount(r3, 0x0, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r9, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="00022bbdb0c77000fedbdf25670000000800", @ANYRES32=r10, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x44000) poll(&(0x7f0000000780)=[{r2, 0x44}, {0xffffffffffffffff, 0x7b77614481698642}, {0xffffffffffffffff, 0x8588}], 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) 01:26:41 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:26:41 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="be000000", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:26:41 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000ffffffff00"/20], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) dup2(r2, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:26:41 executing program 1: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:41 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:26:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 409.962654] loop0: detected capacity change from 0 to 41948160 [ 409.983420] loop1: detected capacity change from 0 to 262144 [ 409.999202] loop4: detected capacity change from 0 to 262144 [ 410.055183] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:26:42 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 410.059291] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 410.086209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 01:26:42 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:26:42 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:42 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000340)=0xff, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000100000000000000000007000000c4048f010000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x7, &(0x7f00000001c0)=[{0x7, 0x2, 0xff, 0x6}, {0x3, 0x1, 0x1}, {0x9, 0x3f, 0x20, 0x2}, {0x0, 0x1, 0x1, 0x7}, {0x3, 0x1, 0x1, 0x1f}, {0x9, 0x1, 0x1, 0xf5f}, {0x9, 0x20, 0xe6}]}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000000)=""/90, &(0x7f0000000180)=0x5a) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x4000000}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x10040, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0xc801}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) 01:26:42 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:26:42 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 01:26:42 executing program 1: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 410.397336] loop4: detected capacity change from 0 to 262144 [ 410.405201] loop1: detected capacity change from 0 to 262144 [ 410.427828] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 410.445492] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 01:26:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:56 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="be000000", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = socket$inet(0x2, 0x1, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:26:56 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 01:26:56 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:26:56 executing program 1: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x21c0, 0x0, 0x3, 0x0, 0x0) fallocate(r3, 0x0, 0x800, 0x30000000000000) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)={0x3fd, 0x9, 0x7}) syz_io_uring_complete(r1) socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8, 0x1}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x5) write$bt_hci(r6, &(0x7f0000000080)={0x1, @host_buffer_size={{0xc33, 0x7}, {0x5}}}, 0xb) 01:26:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000003d40)=0xfffe, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:26:56 executing program 2: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/4096) r0 = getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x1002, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/37) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000001c00)) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000001c0)=""/14) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)) setresuid(0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000014c0)=""/158) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000300)=""/197) msgctl$IPC_RMID(0x0, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000001480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgrp(0x0) sendmmsg$unix(r2, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001980)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001d00)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}}], 0x2, 0x0) getpgid(r0) [ 424.791682] loop1: detected capacity change from 0 to 262144 [ 424.831237] loop4: detected capacity change from 0 to 262144 [ 424.841964] loop0: detected capacity change from 0 to 41948160 01:26:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:56 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) [ 424.956825] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 424.959684] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:26:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000003d40)=0xfffe, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:26:57 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 01:26:57 executing program 1: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:57 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x1, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="115a59fdfb06a06e96f2e5e5f301c98ec929beced01651db362055ffa57355ce3de0640207a82abbfb6f97bf0840555dc5d75c1b2194a8ac490a029f9448141098a2482c728374395e0412f39e22df65de49eeaad309cb16e7de2f365ae2c3b1ff717ba5447cf7d06eb351d93d40afdb9819470ace18ffe5577c150a23e170db0ccb2f67bf856ccf8f7f1349bba78a2c7f7c4c345e7af8f046dbe23c327da48fb47215b894b50b26c2cf9fb56bf4380268888ef045598b1078b9bd9f5f659a77e700f254493f1b349cb8b2435288aa6f4df474804d94229b9c613ded3e91e7e15a160a96", 0xe4}], 0x0, &(0x7f0000002040)={[{@nodots}]}) 01:26:57 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) [ 425.121510] loop2: detected capacity change from 0 to 135266304 [ 425.315218] loop0: detected capacity change from 0 to 41948160 [ 425.318865] FAT-fs (loop5): bogus number of reserved sectors [ 425.320313] FAT-fs (loop5): Can't find a valid FAT filesystem [ 425.330345] loop4: detected capacity change from 0 to 262144 [ 425.407235] FAT-fs (loop5): bogus number of reserved sectors [ 425.408718] FAT-fs (loop5): Can't find a valid FAT filesystem [ 425.436916] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 425.451615] loop1: detected capacity change from 0 to 262144 [ 425.520347] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 425.807515] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 425.823060] ext4 filesystem being mounted at /syzkaller-testdir611976124/syzkaller.O0v9cY/40/file0 supports timestamps until 2038-01-19 (0x7fffffff) 01:26:57 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:26:57 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="be000000", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = socket$inet(0x2, 0x1, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:26:57 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:26:57 executing program 5: chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x202081, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140)={{r1, r2/1000+10000}}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000003c0)=""/233, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r5, 0x0, 0x80000001) 01:26:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x9, 0x80, 0x5, 0x40, 0x0, 0x1, 0x1000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x560, 0x6, 0x8001, 0x2, 0x7, 0xd5, 0x6, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xf, r4, 0x8) r5 = open(&(0x7f0000000240)='./file0\x00', 0x40, 0x154) setsockopt$inet6_int(r5, 0x29, 0x18, &(0x7f0000000280)=0x4, 0x4) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x60, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000014}, 0x814) 01:26:58 executing program 1: close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:26:58 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, 0x0, 0x0) 01:26:58 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:27:11 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, 0x0, 0x0) 01:27:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000003d40)=0xfffe, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:27:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x9, 0x80, 0x5, 0x40, 0x0, 0x1, 0x1000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x560, 0x6, 0x8001, 0x2, 0x7, 0xd5, 0x6, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xf, r4, 0x8) r5 = open(&(0x7f0000000240)='./file0\x00', 0x40, 0x154) setsockopt$inet6_int(r5, 0x29, 0x18, &(0x7f0000000280)=0x4, 0x4) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x60, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000014}, 0x814) 01:27:11 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:27:11 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:27:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="be000000", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = socket$inet(0x2, 0x1, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:27:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:27:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 439.698008] loop5: detected capacity change from 0 to 41948160 [ 439.732017] loop4: detected capacity change from 0 to 262144 [ 439.741826] loop0: detected capacity change from 0 to 41948160 01:27:11 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, 0x0, 0x0) 01:27:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:27:11 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) [ 439.806102] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:27:11 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:27:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:27:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:27:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:27:11 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:27:11 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) [ 440.014079] loop0: detected capacity change from 0 to 41948160 01:27:25 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="be000000", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = socket$inet(0x2, 0x1, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:27:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x9, 0x80, 0x5, 0x40, 0x0, 0x1, 0x1000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x560, 0x6, 0x8001, 0x2, 0x7, 0xd5, 0x6, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xf, r4, 0x8) r5 = open(&(0x7f0000000240)='./file0\x00', 0x40, 0x154) setsockopt$inet6_int(r5, 0x29, 0x18, &(0x7f0000000280)=0x4, 0x4) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x60, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000014}, 0x814) 01:27:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:27:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:27:25 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:27:25 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="be000000", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000600)=@chain) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) unshare(0x48020200) 01:27:25 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 453.969049] loop0: detected capacity change from 0 to 41948160 01:27:25 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:27:26 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:27:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 454.181009] loop4: detected capacity change from 0 to 262144 01:27:26 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:27:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:27:26 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) [ 454.331104] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:27:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:27:26 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 01:27:26 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:27:41 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="be000000", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = socket$inet(0x2, 0x1, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:27:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x9, 0x80, 0x5, 0x40, 0x0, 0x1, 0x1000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x560, 0x6, 0x8001, 0x2, 0x7, 0xd5, 0x6, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xf, r4, 0x8) r5 = open(&(0x7f0000000240)='./file0\x00', 0x40, 0x154) setsockopt$inet6_int(r5, 0x29, 0x18, &(0x7f0000000280)=0x4, 0x4) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x60, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000014}, 0x814) 01:27:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 01:27:41 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="be000000", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000600)=@chain) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) unshare(0x48020200) 01:27:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:27:41 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:27:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:27:41 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) [ 469.486000] loop4: detected capacity change from 0 to 262144 [ 469.613100] loop0: detected capacity change from 0 to 41948160 [ 469.654105] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:27:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 01:27:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:27:41 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:27:41 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:27:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x0, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:27:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, 0x0, 0x0) 01:27:41 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) [ 469.943037] loop4: detected capacity change from 0 to 262144 [ 469.960520] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 470.070636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5549 comm=syz-executor.6 01:27:56 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="be000000", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = socket$inet(0x2, 0x1, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:27:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x0, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:27:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 484.246260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5562 comm=syz-executor.6 [ 484.275989] loop4: detected capacity change from 0 to 262144 01:27:56 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="be000000", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000600)=@chain) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) unshare(0x48020200) 01:27:56 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:27:56 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = getpid() dup3(r0, r1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x28, 0x10, 0x409, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @pid=r2}]}]}, 0x28}}, 0x0) 01:27:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, 0x0, 0x0) 01:27:56 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:27:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, 0x0, 0x0) [ 484.311445] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 484.316969] loop0: detected capacity change from 0 to 41948160 01:28:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x0, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:28:09 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:28:09 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:09 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:28:09 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:28:09 executing program 5: r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x21c0, 0x0, 0x3, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0xd1) syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) r6 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r11 = fcntl$dupfd(r0, 0x406, r2) syz_io_uring_submit(r3, r8, &(0x7f0000000240)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r11}, 0x9) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffff31, 0x0, &(0x7f0000000080)=[r1, r2]}, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000001c0)={[{@fat=@dos1xfloppy}]}) [ 497.016671] loop0: detected capacity change from 0 to 41948160 01:28:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 497.062435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5607 comm=syz-executor.6 [ 497.076263] loop2: detected capacity change from 0 to 262144 01:28:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0x0, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 497.103841] loop4: detected capacity change from 0 to 262144 01:28:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:28:09 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) [ 497.136108] loop0: detected capacity change from 0 to 41948160 [ 497.137423] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 497.144089] FAT-fs (loop5): bogus number of reserved sectors [ 497.144818] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 497.145800] FAT-fs (loop5): Can't find a valid FAT filesystem [ 497.157233] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 497.220392] FAT-fs (loop5): bogus number of reserved sectors [ 497.221122] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 497.222092] FAT-fs (loop5): Can't find a valid FAT filesystem 01:28:22 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:28:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:28:22 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:22 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0x0, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:28:22 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:22 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:28:22 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 510.933740] loop0: detected capacity change from 0 to 41948160 [ 510.958118] loop2: detected capacity change from 0 to 262144 01:28:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 510.967947] loop4: detected capacity change from 0 to 262144 [ 510.975224] loop5: detected capacity change from 0 to 262144 01:28:22 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0x0, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:22 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) [ 511.020287] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 511.029194] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:28:23 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 511.097703] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 511.109872] loop2: detected capacity change from 0 to 262144 01:28:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 511.139933] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 01:28:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 01:28:23 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:28:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 511.362378] loop0: detected capacity change from 0 to 41948160 01:28:39 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:39 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:39 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:28:39 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:28:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 01:28:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:28:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:28:39 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) [ 527.634009] loop4: detected capacity change from 0 to 262144 [ 527.656921] loop0: detected capacity change from 0 to 41948160 [ 527.686110] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:28:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x0, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:39 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 527.748859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5724 comm=syz-executor.1 01:28:39 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:28:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x0, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:39 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:28:39 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) [ 527.961081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5733 comm=syz-executor.1 01:28:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:28:54 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:28:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:28:54 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:28:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:28:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x0, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:54 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) 01:28:54 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 542.841874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5747 comm=syz-executor.1 [ 542.846061] loop4: detected capacity change from 0 to 262144 [ 542.879038] loop5: detected capacity change from 0 to 41948160 01:28:54 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x4051) 01:28:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0x0, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 542.943325] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:28:55 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) [ 543.029088] loop0: detected capacity change from 0 to 41948160 01:28:55 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x4051) 01:28:55 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0x0, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:55 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) 01:28:55 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:28:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:28:55 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x4051) [ 543.361923] loop4: detected capacity change from 0 to 262144 [ 543.385129] loop0: detected capacity change from 0 to 41948160 [ 543.402006] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:29:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0x0, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:29:07 executing program 5: readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/61, 0x2d}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x2, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0xfffffffffffffd0d}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9, 0xb0, 0xff, 0x1, 0x0, 0x42a, 0x4, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x66}, 0x20, 0x2f59, 0x7, 0x7, 0x1, 0x8, 0x1ff, 0x0, 0x101, 0x0, 0x7fff}, r0, 0x10, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 01:29:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:29:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:29:07 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:29:07 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:29:07 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:29:07 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) [ 555.824979] loop4: detected capacity change from 0 to 262144 [ 555.845168] loop0: detected capacity change from 0 to 41948160 [ 555.874813] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:29:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:29:07 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:29:07 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048044}, 0x4051) 01:29:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:29:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:29:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:29:08 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x4051) 01:29:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}}, 0x0) 01:29:21 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:29:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:29:21 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:29:21 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:29:21 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:29:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:29:21 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c", 0x1}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) keyctl$set_timeout(0xf, r1, 0x0) setgid(0x0) keyctl$chown(0x4, r1, 0xee01, 0x0) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000280)="0b199c1237a875ce03b255ec78bdbc4be27baca3f0d9734c8335041d161eaa95104e", 0x22, 0xfffffffffffffffc) lstat(&(0x7f0000000140)='./file0\x00', 0x0) keyctl$revoke(0x3, 0x0) keyctl$chown(0x4, r2, 0xee01, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{0x0, 0x0, 0xfffffffffffffff8}, {&(0x7f0000010400)="020000000300001e", 0x8, 0x800}, {&(0x7f00000004c0)="66e20bea2b84671e381b5eb1104fd23e529e577cb92ee2a1567db864f738bc93c338ebfe994606e717ef044d405c79c2f61b4a365d465c72090b29473ea8ceb2519d3cd5c2386ce4b81764a4884acda10baa1ad33a1297d8c4eab98f4281186a66a27c34bc2487cee7f4f80d3c9052dbd2ac5545170512db", 0x78, 0xff}], 0x0, &(0x7f0000000100)=ANY=[]) [ 569.697710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 569.698213] loop4: detected capacity change from 0 to 262144 [ 569.722615] loop0: detected capacity change from 0 to 41948160 01:29:21 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:29:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 569.766310] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:29:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}}, 0x0) [ 569.811535] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 01:29:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}}, 0x0) 01:29:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) 01:29:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:29:21 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 569.919229] loop2: detected capacity change from 0 to 8388096 [ 569.928733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 569.975255] loop0: detected capacity change from 0 to 41948160 [ 582.409054] FAULT_INJECTION: forcing a failure. [ 582.409054] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 582.410496] CPU: 1 PID: 5911 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 582.411301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 582.412265] Call Trace: [ 582.412575] dump_stack+0x107/0x167 [ 582.412991] should_fail.cold+0x5/0xa [ 582.413430] _copy_from_user+0x2e/0x1b0 [ 582.413897] __copy_msghdr_from_user+0x91/0x4b0 [ 582.414430] ? __ia32_sys_shutdown+0x80/0x80 [ 582.414940] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 582.415547] ? __lock_acquire+0x1657/0x5b00 [ 582.416054] ? __lock_acquire+0xbb1/0x5b00 [ 582.416546] sendmsg_copy_msghdr+0xa1/0x160 [ 582.417041] ? do_recvmmsg+0x6d0/0x6d0 [ 582.417499] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 582.418117] ? lock_downgrade+0x6d0/0x6d0 [ 582.418609] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 582.419235] ___sys_sendmsg+0xc6/0x170 [ 582.419700] ? sendmsg_copy_msghdr+0x160/0x160 [ 582.420255] ? __fget_files+0x2cf/0x520 [ 582.420723] ? lock_downgrade+0x6d0/0x6d0 [ 582.421216] ? find_held_lock+0x2c/0x110 [ 582.421702] ? __fget_files+0x2f8/0x520 [ 582.422174] ? __fget_light+0xea/0x290 [ 582.422626] __sys_sendmsg+0xe5/0x1b0 [ 582.423064] ? __sys_sendmsg_sock+0x40/0x40 [ 582.423560] ? rcu_read_lock_any_held+0x75/0xa0 [ 582.424103] ? fput_many+0x2f/0x1a0 [ 582.424529] ? ksys_write+0x1a9/0x260 [ 582.424978] ? __ia32_sys_read+0xb0/0xb0 [ 582.425455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 582.426072] ? syscall_enter_from_user_mode+0x1d/0x50 [ 582.426676] ? trace_hardirqs_on+0x5b/0x180 [ 582.427189] do_syscall_64+0x33/0x40 [ 582.427636] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 582.428248] RIP: 0033:0x7f1c6bcedb19 [ 582.428685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 582.430859] RSP: 002b:00007f1c69263188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.431757] RAX: ffffffffffffffda RBX: 00007f1c6be00f60 RCX: 00007f1c6bcedb19 [ 582.432616] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 582.433461] RBP: 00007f1c692631d0 R08: 0000000000000000 R09: 0000000000000000 [ 582.434303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.435147] R13: 00007ffe8ffec8ef R14: 00007f1c69263300 R15: 0000000000022000 [ 582.445050] FAULT_INJECTION: forcing a failure. [ 582.445050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.447421] CPU: 0 PID: 5919 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 582.448769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 582.450388] Call Trace: [ 582.450905] dump_stack+0x107/0x167 [ 582.451613] should_fail.cold+0x5/0xa [ 582.452379] _copy_from_user+0x2e/0x1b0 [ 582.453159] io_uring_setup+0x9b/0x2980 [ 582.453937] ? __mutex_unlock_slowpath+0xe1/0x600 [ 582.454878] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 582.455874] ? wait_for_completion_io+0x270/0x270 [ 582.456813] ? rcu_read_lock_any_held+0x75/0xa0 [ 582.457729] ? vfs_write+0x354/0xb10 [ 582.458458] ? fput_many+0x2f/0x1a0 [ 582.459023] ? ksys_write+0x1a9/0x260 [ 582.459613] ? __ia32_sys_read+0xb0/0xb0 [ 582.460251] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 582.461064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 582.461858] do_syscall_64+0x33/0x40 [ 582.462431] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 582.463224] RIP: 0033:0x7febf2e1eb19 [ 582.463815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 582.466657] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 582.467836] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 582.468928] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 582.470063] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 582.471156] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 582.472272] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:29:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) 01:29:34 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:29:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:29:34 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 1) 01:29:34 executing program 2: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x500}, 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xf}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x100093b}, 0x0, 0x0, 0x800000, 0x5, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[@ANYRESHEX=r2, @ANYRESHEX, @ANYRESHEX=r2, @ANYRESDEC=r2, @ANYRES64]) r3 = timerfd_create(0x0, 0x80800) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000100)=""/250, 0xfa}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, 0x52, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) readv(r4, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/116, 0x74}], 0x1) r5 = dup3(r1, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) fcntl$setlease(r1, 0x400, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="05000000000000fbffffff696c650b12747689e2ae97000367bf01ed54b9c8"]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0xee, 0x1, 0x8, 0x5, 0x0, 0x6, 0x80200, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x5, 0x8}, 0x20000, 0x5, 0x0, 0x3, 0x100000000, 0x5, 0x2, 0x0, 0xf8f, 0x0, 0xfff}, 0x0, 0x1, 0xffffffffffffffff, 0x8) 01:29:34 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 1) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:29:34 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:29:34 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:29:34 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 2) [ 582.509756] loop0: detected capacity change from 0 to 41948160 [ 582.521808] loop4: detected capacity change from 0 to 262144 [ 582.534458] loop5: detected capacity change from 0 to 262144 [ 582.548992] FAULT_INJECTION: forcing a failure. [ 582.548992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.550394] CPU: 1 PID: 5930 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 582.551209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 582.552215] Call Trace: [ 582.552537] dump_stack+0x107/0x167 [ 582.552959] should_fail.cold+0x5/0xa [ 582.553399] _copy_from_user+0x2e/0x1b0 [ 582.553859] iovec_from_user+0x141/0x400 [ 582.554344] __import_iovec+0x67/0x590 [ 582.554819] ? __ia32_sys_shutdown+0x80/0x80 [ 582.555330] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 582.555940] import_iovec+0x83/0xb0 [ 582.556357] sendmsg_copy_msghdr+0x131/0x160 [ 582.556859] ? do_recvmmsg+0x6d0/0x6d0 [ 582.557303] ? lock_downgrade+0x6d0/0x6d0 [ 582.557783] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 582.558401] ___sys_sendmsg+0xc6/0x170 [ 582.558866] ? sendmsg_copy_msghdr+0x160/0x160 [ 582.559414] ? __fget_files+0x2cf/0x520 [ 582.559888] ? lock_downgrade+0x6d0/0x6d0 [ 582.560367] ? find_held_lock+0x2c/0x110 [ 582.560837] ? __fget_files+0x2f8/0x520 [ 582.561308] ? __fget_light+0xea/0x290 [ 582.561771] __sys_sendmsg+0xe5/0x1b0 [ 582.562224] ? __sys_sendmsg_sock+0x40/0x40 [ 582.562736] ? rcu_read_lock_any_held+0x75/0xa0 [ 582.563273] ? fput_many+0x2f/0x1a0 [ 582.563696] ? ksys_write+0x1a9/0x260 [ 582.564141] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 582.564744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 582.565323] ? trace_hardirqs_on+0x5b/0x180 [ 582.565816] do_syscall_64+0x33/0x40 [ 582.566237] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 582.566826] RIP: 0033:0x7f1c6bcedb19 [ 582.567252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 582.569366] RSP: 002b:00007f1c69263188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.570237] RAX: ffffffffffffffda RBX: 00007f1c6be00f60 RCX: 00007f1c6bcedb19 [ 582.571047] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 582.571868] RBP: 00007f1c692631d0 R08: 0000000000000000 R09: 0000000000000000 [ 582.572685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.573499] R13: 00007ffe8ffec8ef R14: 00007f1c69263300 R15: 0000000000022000 [ 582.615029] FAULT_INJECTION: forcing a failure. [ 582.615029] name failslab, interval 1, probability 0, space 0, times 1 [ 582.616405] CPU: 1 PID: 5936 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 582.617186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 582.618139] Call Trace: [ 582.618443] dump_stack+0x107/0x167 [ 582.618863] should_fail.cold+0x5/0xa [ 582.619297] ? __alloc_skb+0x6d/0x5b0 [ 582.619734] should_failslab+0x5/0x20 [ 582.620180] kmem_cache_alloc_node+0x55/0x330 [ 582.620695] __alloc_skb+0x6d/0x5b0 [ 582.621114] netlink_sendmsg+0x998/0xe00 01:29:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) 01:29:34 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 3) 01:29:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 582.621581] ? netlink_unicast+0xa00/0xa00 [ 582.622268] ? netlink_unicast+0xa00/0xa00 [ 582.622803] __sock_sendmsg+0x154/0x190 [ 582.623259] ____sys_sendmsg+0x70d/0x870 [ 582.623725] ? sock_write_iter+0x3d0/0x3d0 [ 582.624225] ? do_recvmmsg+0x6d0/0x6d0 [ 582.624672] ? lock_downgrade+0x6d0/0x6d0 [ 582.625147] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 582.625749] ___sys_sendmsg+0xf3/0x170 [ 582.626219] ? sendmsg_copy_msghdr+0x160/0x160 [ 582.626767] ? __fget_files+0x2cf/0x520 [ 582.627242] ? lock_downgrade+0x6d0/0x6d0 [ 582.627734] ? find_held_lock+0x2c/0x110 [ 582.628215] ? __fget_files+0x2f8/0x520 [ 582.628673] ? __fget_light+0xea/0x290 [ 582.629125] __sys_sendmsg+0xe5/0x1b0 [ 582.629560] ? __sys_sendmsg_sock+0x40/0x40 [ 582.630051] ? rcu_read_lock_any_held+0x75/0xa0 [ 582.630593] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 582.631189] ? syscall_enter_from_user_mode+0x1d/0x50 [ 582.631788] ? trace_hardirqs_on+0x5b/0x180 [ 582.632281] do_syscall_64+0x33/0x40 [ 582.632720] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 582.633327] RIP: 0033:0x7f1c6bcedb19 [ 582.633770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 582.635962] RSP: 002b:00007f1c69263188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.636860] RAX: ffffffffffffffda RBX: 00007f1c6be00f60 RCX: 00007f1c6bcedb19 [ 582.637703] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 582.638520] RBP: 00007f1c692631d0 R08: 0000000000000000 R09: 0000000000000000 [ 582.639334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.640156] R13: 00007ffe8ffec8ef R14: 00007f1c69263300 R15: 0000000000022000 01:29:34 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 2) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:29:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fchmod(r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:29:34 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 4) 01:29:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 582.678408] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 582.706033] FAULT_INJECTION: forcing a failure. [ 582.706033] name failslab, interval 1, probability 0, space 0, times 0 [ 582.707392] CPU: 1 PID: 5949 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 582.708200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 582.709172] Call Trace: [ 582.709485] dump_stack+0x107/0x167 [ 582.709913] should_fail.cold+0x5/0xa [ 582.710361] ? io_uring_setup+0x258/0x2980 [ 582.710852] should_failslab+0x5/0x20 [ 582.711293] kmem_cache_alloc_trace+0x55/0x320 [ 582.711832] io_uring_setup+0x258/0x2980 [ 582.712299] ? __mutex_unlock_slowpath+0xe1/0x600 [ 582.712853] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 582.713430] ? wait_for_completion_io+0x270/0x270 [ 582.713996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 582.714604] ? syscall_enter_from_user_mode+0x1d/0x50 [ 582.715217] do_syscall_64+0x33/0x40 [ 582.715645] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 582.716243] RIP: 0033:0x7febf2e1eb19 [ 582.716669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 582.718774] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 582.719661] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 582.720497] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 582.721345] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 582.722167] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 582.723009] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 582.727125] FAULT_INJECTION: forcing a failure. [ 582.727125] name failslab, interval 1, probability 0, space 0, times 0 [ 582.728475] CPU: 1 PID: 5943 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 582.729255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 582.730233] Call Trace: [ 582.730549] dump_stack+0x107/0x167 [ 582.730991] should_fail.cold+0x5/0xa [ 582.731430] ? create_object.isra.0+0x3a/0xa20 [ 582.731965] should_failslab+0x5/0x20 [ 582.732400] kmem_cache_alloc+0x5b/0x310 [ 582.732870] create_object.isra.0+0x3a/0xa20 [ 582.733366] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 582.733947] kmem_cache_alloc_node+0x169/0x330 [ 582.734493] __alloc_skb+0x6d/0x5b0 [ 582.734925] netlink_sendmsg+0x998/0xe00 [ 582.735414] ? netlink_unicast+0xa00/0xa00 [ 582.735961] ? netlink_unicast+0xa00/0xa00 [ 582.736462] __sock_sendmsg+0x154/0x190 [ 582.736939] ____sys_sendmsg+0x70d/0x870 [ 582.737418] ? sock_write_iter+0x3d0/0x3d0 [ 582.737928] ? do_recvmmsg+0x6d0/0x6d0 [ 582.738393] ? lock_downgrade+0x6d0/0x6d0 [ 582.738893] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 582.739501] ___sys_sendmsg+0xf3/0x170 [ 582.739959] ? sendmsg_copy_msghdr+0x160/0x160 [ 582.740500] ? __fget_files+0x2cf/0x520 [ 582.740985] ? lock_downgrade+0x6d0/0x6d0 [ 582.741482] ? find_held_lock+0x2c/0x110 [ 582.741972] ? __fget_files+0x2f8/0x520 [ 582.742468] ? __fget_light+0xea/0x290 [ 582.742925] __sys_sendmsg+0xe5/0x1b0 [ 582.743378] ? __sys_sendmsg_sock+0x40/0x40 [ 582.743904] ? rcu_read_lock_any_held+0x75/0xa0 [ 582.744444] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 582.745037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 582.745635] ? trace_hardirqs_on+0x5b/0x180 [ 582.746138] do_syscall_64+0x33/0x40 [ 582.746561] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 582.747152] RIP: 0033:0x7f1c6bcedb19 [ 582.747580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 582.749698] RSP: 002b:00007f1c69263188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.750572] RAX: ffffffffffffffda RBX: 00007f1c6be00f60 RCX: 00007f1c6bcedb19 [ 582.751400] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 582.752222] RBP: 00007f1c692631d0 R08: 0000000000000000 R09: 0000000000000000 [ 582.753034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.753847] R13: 00007ffe8ffec8ef R14: 00007f1c69263300 R15: 0000000000022000 [ 582.758531] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 582.770387] loop0: detected capacity change from 0 to 41948160 [ 583.271881] audit: type=1400 audit(1753925375.268:95): avc: denied { read } for pid=5914 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 01:29:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:29:47 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 5) 01:29:47 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:29:47 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:29:47 executing program 4: close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:29:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:29:47 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:29:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 595.945587] loop5: detected capacity change from 0 to 262144 [ 595.975530] FAULT_INJECTION: forcing a failure. [ 595.975530] name failslab, interval 1, probability 0, space 0, times 0 [ 595.978069] CPU: 0 PID: 5975 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 595.979537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 595.981299] Call Trace: [ 595.981863] dump_stack+0x107/0x167 [ 595.982632] should_fail.cold+0x5/0xa [ 595.983440] should_failslab+0x5/0x20 [ 595.984266] __kmalloc_node_track_caller+0x74/0x3b0 [ 595.985331] ? netlink_sendmsg+0x998/0xe00 [ 595.986246] __alloc_skb+0xb1/0x5b0 [ 595.987039] netlink_sendmsg+0x998/0xe00 [ 595.987916] ? netlink_unicast+0xa00/0xa00 [ 595.988851] ? netlink_unicast+0xa00/0xa00 [ 595.989764] __sock_sendmsg+0x154/0x190 [ 595.990616] ____sys_sendmsg+0x70d/0x870 [ 595.991471] ? sock_write_iter+0x3d0/0x3d0 [ 595.992374] ? do_recvmmsg+0x6d0/0x6d0 [ 595.993199] ? lock_downgrade+0x6d0/0x6d0 [ 595.994070] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 595.995179] ___sys_sendmsg+0xf3/0x170 [ 595.996006] ? sendmsg_copy_msghdr+0x160/0x160 [ 595.996971] ? __fget_files+0x2cf/0x520 01:29:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}}, 0x0) [ 595.997905] ? lock_downgrade+0x6d0/0x6d0 [ 595.998850] ? find_held_lock+0x2c/0x110 [ 595.999709] ? __fget_files+0x2f8/0x520 [ 596.000566] ? __fget_light+0xea/0x290 [ 596.001401] __sys_sendmsg+0xe5/0x1b0 [ 596.002217] ? __sys_sendmsg_sock+0x40/0x40 [ 596.003141] ? rcu_read_lock_any_held+0x75/0xa0 [ 596.004154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 596.005278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 596.006380] ? trace_hardirqs_on+0x5b/0x180 [ 596.006507] FAULT_INJECTION: forcing a failure. [ 596.006507] name failslab, interval 1, probability 0, space 0, times 0 [ 596.007291] do_syscall_64+0x33/0x40 [ 596.007311] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 596.007330] RIP: 0033:0x7f1c6bcedb19 [ 596.011428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 596.015280] RSP: 002b:00007f1c69263188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.016884] RAX: ffffffffffffffda RBX: 00007f1c6be00f60 RCX: 00007f1c6bcedb19 [ 596.018380] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 596.019879] RBP: 00007f1c692631d0 R08: 0000000000000000 R09: 0000000000000000 [ 596.021389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.022889] R13: 00007ffe8ffec8ef R14: 00007f1c69263300 R15: 0000000000022000 [ 596.024417] CPU: 1 PID: 5976 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 596.025363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 596.026512] Call Trace: [ 596.026868] dump_stack+0x107/0x167 [ 596.027342] should_fail.cold+0x5/0xa [ 596.027843] ? create_object.isra.0+0x3a/0xa20 [ 596.028152] loop0: detected capacity change from 0 to 41948160 [ 596.028462] should_failslab+0x5/0x20 [ 596.030193] kmem_cache_alloc+0x5b/0x310 [ 596.030724] create_object.isra.0+0x3a/0xa20 [ 596.031312] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 596.031989] kmem_cache_alloc_trace+0x151/0x320 [ 596.032600] io_uring_setup+0x258/0x2980 [ 596.033138] ? __mutex_unlock_slowpath+0xe1/0x600 [ 596.033779] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 596.034443] ? wait_for_completion_io+0x270/0x270 [ 596.035089] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 596.035780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 596.036464] do_syscall_64+0x33/0x40 [ 596.036969] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 596.037647] RIP: 0033:0x7febf2e1eb19 [ 596.038129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 596.040554] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 596.041546] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 596.042487] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 596.043414] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 596.044377] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 596.045321] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:29:48 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 6) [ 596.114071] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 596.115496] FAULT_INJECTION: forcing a failure. [ 596.115496] name failslab, interval 1, probability 0, space 0, times 0 [ 596.117809] CPU: 1 PID: 5991 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 596.118854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 596.119945] Call Trace: [ 596.120306] dump_stack+0x107/0x167 [ 596.120812] should_fail.cold+0x5/0xa [ 596.121307] ? create_object.isra.0+0x3a/0xa20 [ 596.121956] should_failslab+0x5/0x20 [ 596.122558] kmem_cache_alloc+0x5b/0x310 [ 596.123231] create_object.isra.0+0x3a/0xa20 [ 596.123962] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 596.124806] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 596.125592] ? netlink_sendmsg+0x998/0xe00 [ 596.126149] __alloc_skb+0xb1/0x5b0 [ 596.126686] netlink_sendmsg+0x998/0xe00 [ 596.127217] ? netlink_unicast+0xa00/0xa00 [ 596.127781] ? netlink_unicast+0xa00/0xa00 [ 596.128329] __sock_sendmsg+0x154/0x190 [ 596.128915] ____sys_sendmsg+0x70d/0x870 [ 596.129439] ? sock_write_iter+0x3d0/0x3d0 [ 596.129981] ? do_recvmmsg+0x6d0/0x6d0 [ 596.130508] ? lock_downgrade+0x6d0/0x6d0 [ 596.131040] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 596.131734] ___sys_sendmsg+0xf3/0x170 [ 596.132238] ? sendmsg_copy_msghdr+0x160/0x160 [ 596.132852] ? __fget_files+0x2cf/0x520 [ 596.133352] ? lock_downgrade+0x6d0/0x6d0 [ 596.133905] ? find_held_lock+0x2c/0x110 [ 596.134419] ? __fget_files+0x2f8/0x520 [ 596.134925] ? __fget_light+0xea/0x290 [ 596.135580] __sys_sendmsg+0xe5/0x1b0 [ 596.136232] ? __sys_sendmsg_sock+0x40/0x40 [ 596.136881] ? rcu_read_lock_any_held+0x75/0xa0 [ 596.137487] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 596.138143] ? syscall_enter_from_user_mode+0x1d/0x50 [ 596.138806] ? trace_hardirqs_on+0x5b/0x180 [ 596.139354] do_syscall_64+0x33/0x40 [ 596.139837] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 596.140533] RIP: 0033:0x7f1c6bcedb19 [ 596.141091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 596.144154] RSP: 002b:00007f1c69263188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.145454] RAX: ffffffffffffffda RBX: 00007f1c6be00f60 RCX: 00007f1c6bcedb19 [ 596.146644] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 596.147795] RBP: 00007f1c692631d0 R08: 0000000000000000 R09: 0000000000000000 [ 596.148968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.150119] R13: 00007ffe8ffec8ef R14: 00007f1c69263300 R15: 0000000000022000 [ 596.173399] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:29:48 executing program 4: close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:29:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}}, 0x0) 01:29:48 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 4) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 596.229555] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 596.231911] FAULT_INJECTION: forcing a failure. [ 596.231911] name failslab, interval 1, probability 0, space 0, times 0 [ 596.234323] CPU: 0 PID: 5995 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 596.235773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 596.237536] Call Trace: [ 596.238111] dump_stack+0x107/0x167 [ 596.238901] should_fail.cold+0x5/0xa [ 596.239720] ? io_uring_setup+0x33c/0x2980 [ 596.240634] should_failslab+0x5/0x20 [ 596.241452] __kmalloc+0x72/0x390 [ 596.242205] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 596.243306] io_uring_setup+0x33c/0x2980 [ 596.244178] ? __mutex_unlock_slowpath+0xe1/0x600 [ 596.245194] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 596.246245] ? wait_for_completion_io+0x270/0x270 [ 596.247283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 596.248395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 596.249486] do_syscall_64+0x33/0x40 [ 596.250266] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 596.251360] RIP: 0033:0x7febf2e1eb19 [ 596.252156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 596.256077] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 596.257682] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 596.259180] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 596.260701] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 596.262192] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 596.263687] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:29:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}}, 0x0) 01:29:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:29:48 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 7) 01:29:48 executing program 4: close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 596.304514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:29:48 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 5) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 596.320004] FAULT_INJECTION: forcing a failure. [ 596.320004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.322554] CPU: 0 PID: 6002 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 596.324019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 596.325766] Call Trace: [ 596.326339] dump_stack+0x107/0x167 [ 596.327112] should_fail.cold+0x5/0xa [ 596.327922] _copy_from_iter_full+0x201/0xa60 [ 596.328899] ? __virt_addr_valid+0x170/0x5d0 [ 596.329832] ? __check_object_size+0x319/0x440 [ 596.330815] netlink_sendmsg+0x879/0xe00 [ 596.331699] ? netlink_unicast+0xa00/0xa00 [ 596.332615] ? netlink_unicast+0xa00/0xa00 [ 596.333523] __sock_sendmsg+0x154/0x190 [ 596.334374] ____sys_sendmsg+0x70d/0x870 [ 596.335232] ? sock_write_iter+0x3d0/0x3d0 [ 596.336136] ? do_recvmmsg+0x6d0/0x6d0 [ 596.336959] ? lock_downgrade+0x6d0/0x6d0 [ 596.337837] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 596.338949] ___sys_sendmsg+0xf3/0x170 [ 596.339780] ? sendmsg_copy_msghdr+0x160/0x160 [ 596.340755] ? __fget_files+0x2cf/0x520 [ 596.341594] ? lock_downgrade+0x6d0/0x6d0 [ 596.342479] ? find_held_lock+0x2c/0x110 [ 596.343346] ? __fget_files+0x2f8/0x520 [ 596.344209] ? __fget_light+0xea/0x290 [ 596.345040] __sys_sendmsg+0xe5/0x1b0 [ 596.345864] ? __sys_sendmsg_sock+0x40/0x40 [ 596.346776] ? rcu_read_lock_any_held+0x75/0xa0 [ 596.347772] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 596.348887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 596.349981] ? trace_hardirqs_on+0x5b/0x180 [ 596.350894] do_syscall_64+0x33/0x40 [ 596.351689] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 596.352794] RIP: 0033:0x7f1c6bcedb19 [ 596.353598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 596.357515] RSP: 002b:00007f1c69263188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.359127] RAX: ffffffffffffffda RBX: 00007f1c6be00f60 RCX: 00007f1c6bcedb19 [ 596.360650] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 596.362188] RBP: 00007f1c692631d0 R08: 0000000000000000 R09: 0000000000000000 [ 596.363716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.365239] R13: 00007ffe8ffec8ef R14: 00007f1c69263300 R15: 0000000000022000 01:29:48 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 596.401919] FAULT_INJECTION: forcing a failure. [ 596.401919] name failslab, interval 1, probability 0, space 0, times 0 [ 596.403331] CPU: 1 PID: 6006 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 596.404160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 596.405143] Call Trace: [ 596.405455] dump_stack+0x107/0x167 [ 596.405885] should_fail.cold+0x5/0xa [ 596.406362] ? create_object.isra.0+0x3a/0xa20 [ 596.406917] should_failslab+0x5/0x20 [ 596.407371] kmem_cache_alloc+0x5b/0x310 [ 596.407877] create_object.isra.0+0x3a/0xa20 [ 596.408405] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 596.409025] __kmalloc+0x16e/0x390 [ 596.409477] io_uring_setup+0x33c/0x2980 [ 596.409986] ? __mutex_unlock_slowpath+0xe1/0x600 [ 596.410571] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 596.411178] ? wait_for_completion_io+0x270/0x270 [ 596.411802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 596.412441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 596.413054] do_syscall_64+0x33/0x40 [ 596.413484] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 596.414078] RIP: 0033:0x7febf2e1eb19 [ 596.414506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 596.416627] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 596.417513] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 596.418356] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 596.419193] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 596.420084] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 596.420903] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 596.442237] loop5: detected capacity change from 0 to 262144 [ 596.463331] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:30:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 8) 01:30:03 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:30:03 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 01:30:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:30:03 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 6) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:30:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000014c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:30:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000340)=0xff, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400520dd0a3f020358c894700000000f6ff0000000007000000c4048f01000000001c0000000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x7, &(0x7f00000001c0)=[{0x7, 0x2, 0xff, 0x6}, {0x3, 0x1, 0x1}, {0x9, 0x3f, 0x20, 0x2}, {0x0, 0x1, 0x1, 0x7}, {0x3, 0x1, 0x1, 0x1f}, {0x9, 0x1, 0x1, 0xf5f}, {0x9, 0x20, 0xe6}]}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000000)=""/90, &(0x7f0000000180)=0x5a) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x4000000}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x10040, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="110d0000000000000000700000000ca85873922b57ba470086d6995a47a85b02048ee9bc0b798494454ab56cbbcb14b2eabd3f3344317638e4c9eb62d783f70f802618a9ef43aa222dd01b5ab40c0caac357d95b7666bec1865cc14b0e0eb736612e07e6af4bf09ee7053f670cf28073a14c7dbabdaac0d086c6dbd7b987ebb6db098833a5332caac254602c14f5f9a9ec2ee8377eba4037035131044cdc088ad2c67fa95ff37c8053ef8f2ae52b53d8a3c6"], 0x20}, 0x1, 0x0, 0x0, 0xc801}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) [ 611.737537] loop4: detected capacity change from 0 to 262144 [ 611.761524] FAULT_INJECTION: forcing a failure. [ 611.761524] name failslab, interval 1, probability 0, space 0, times 0 [ 611.763915] CPU: 1 PID: 6029 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 611.764212] FAULT_INJECTION: forcing a failure. [ 611.764212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.765294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 611.765302] Call Trace: [ 611.765325] dump_stack+0x107/0x167 [ 611.765346] should_fail.cold+0x5/0xa [ 611.765366] ? io_uring_setup+0x40b/0x2980 [ 611.765390] should_failslab+0x5/0x20 [ 611.765409] kmem_cache_alloc_trace+0x55/0x320 [ 611.774108] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 611.775133] io_uring_setup+0x40b/0x2980 [ 611.775951] ? __mutex_unlock_slowpath+0xe1/0x600 [ 611.776934] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 611.777953] ? wait_for_completion_io+0x270/0x270 [ 611.778946] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 611.779999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 611.781065] do_syscall_64+0x33/0x40 [ 611.781818] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 611.782855] RIP: 0033:0x7febf2e1eb19 [ 611.783609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 611.787365] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 611.788917] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 611.790364] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 611.791817] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 611.793274] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 611.794718] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 611.796209] CPU: 0 PID: 6026 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 611.797674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 611.799437] Call Trace: [ 611.800001] dump_stack+0x107/0x167 [ 611.800776] should_fail.cold+0x5/0xa [ 611.801591] _copy_to_user+0x2e/0x180 [ 611.802406] simple_read_from_buffer+0xcc/0x160 [ 611.803399] proc_fail_nth_read+0x198/0x230 [ 611.804332] ? proc_sessionid_read+0x230/0x230 [ 611.805295] ? security_file_permission+0xb1/0xe0 [ 611.806318] ? proc_sessionid_read+0x230/0x230 [ 611.807285] vfs_read+0x228/0x620 [ 611.808028] ksys_read+0x12d/0x260 [ 611.808790] ? vfs_write+0xb10/0xb10 [ 611.809583] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 611.810699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 611.811794] do_syscall_64+0x33/0x40 [ 611.812594] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 611.813689] RIP: 0033:0x7f1c6bca069c 01:30:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 1) [ 611.814474] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 611.818592] RSP: 002b:00007f1c69263170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 611.820231] RAX: ffffffffffffffda RBX: 0000000000000030 RCX: 00007f1c6bca069c [ 611.821685] RDX: 000000000000000f RSI: 00007f1c692631e0 RDI: 0000000000000005 [ 611.823165] RBP: 00007f1c692631d0 R08: 0000000000000000 R09: 0000000000000000 [ 611.824653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.826121] R13: 00007ffe8ffec8ef R14: 00007f1c69263300 R15: 0000000000022000 [ 611.833719] FAULT_INJECTION: forcing a failure. [ 611.833719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.836125] CPU: 0 PID: 6037 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 611.837535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 611.839228] Call Trace: [ 611.839767] dump_stack+0x107/0x167 [ 611.840544] should_fail.cold+0x5/0xa [ 611.841339] _copy_from_user+0x2e/0x1b0 [ 611.842179] __copy_msghdr_from_user+0x91/0x4b0 [ 611.843156] ? __ia32_sys_shutdown+0x80/0x80 [ 611.844082] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 611.845191] ? __lock_acquire+0x1657/0x5b00 [ 611.846097] ? __lock_acquire+0xbb1/0x5b00 [ 611.846995] sendmsg_copy_msghdr+0xa1/0x160 [ 611.847906] ? do_recvmmsg+0x6d0/0x6d0 [ 611.848730] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 611.849833] ? lock_downgrade+0x6d0/0x6d0 [ 611.850703] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 611.851798] ___sys_sendmsg+0xc6/0x170 [ 611.852634] ? sendmsg_copy_msghdr+0x160/0x160 [ 611.853590] ? __fget_files+0x2cf/0x520 [ 611.854423] ? lock_downgrade+0x6d0/0x6d0 [ 611.855288] ? find_held_lock+0x2c/0x110 [ 611.856151] ? __fget_files+0x2f8/0x520 [ 611.856993] ? __fget_light+0xea/0x290 [ 611.857810] __sys_sendmsg+0xe5/0x1b0 [ 611.858613] ? __sys_sendmsg_sock+0x40/0x40 [ 611.859516] ? rcu_read_lock_any_held+0x75/0xa0 [ 611.860495] ? fput_many+0x2f/0x1a0 [ 611.861261] ? ksys_write+0x1a9/0x260 01:30:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 611.862055] ? __ia32_sys_read+0xb0/0xb0 [ 611.863050] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 611.864171] ? syscall_enter_from_user_mode+0x1d/0x50 [ 611.865242] ? trace_hardirqs_on+0x5b/0x180 [ 611.866147] do_syscall_64+0x33/0x40 [ 611.866919] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 611.867992] RIP: 0033:0x7fd4c67bbb19 [ 611.868774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 611.872629] RSP: 002b:00007fd4c3d31188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.874227] RAX: ffffffffffffffda RBX: 00007fd4c68cef60 RCX: 00007fd4c67bbb19 [ 611.875760] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 611.877285] RBP: 00007fd4c3d311d0 R08: 0000000000000000 R09: 0000000000000000 [ 611.878778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.880279] R13: 00007ffc5e340a4f R14: 00007fd4c3d31300 R15: 0000000000022000 [ 611.904984] loop5: detected capacity change from 0 to 262144 [ 611.908887] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 611.910921] loop0: detected capacity change from 0 to 41948160 01:30:03 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 7) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:30:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 611.972807] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 611.988319] FAULT_INJECTION: forcing a failure. [ 611.988319] name failslab, interval 1, probability 0, space 0, times 0 [ 611.990755] CPU: 1 PID: 6054 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 611.992136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 611.993760] Call Trace: [ 611.994300] dump_stack+0x107/0x167 [ 611.995039] should_fail.cold+0x5/0xa [ 611.995803] ? create_object.isra.0+0x3a/0xa20 [ 611.996720] should_failslab+0x5/0x20 [ 611.997498] kmem_cache_alloc+0x5b/0x310 [ 611.998339] create_object.isra.0+0x3a/0xa20 [ 611.999218] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 612.000273] kmem_cache_alloc_trace+0x151/0x320 [ 612.001226] io_uring_setup+0x40b/0x2980 [ 612.002047] ? __mutex_unlock_slowpath+0xe1/0x600 [ 612.003028] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 612.004057] ? wait_for_completion_io+0x270/0x270 [ 612.005051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 612.006084] ? syscall_enter_from_user_mode+0x1d/0x50 [ 612.007109] do_syscall_64+0x33/0x40 [ 612.007855] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 612.008878] RIP: 0033:0x7febf2e1eb19 [ 612.009608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 612.013271] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 612.014784] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 612.016205] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 612.017651] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 612.019103] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 612.020570] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:30:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 2) 01:30:04 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 612.224056] loop4: detected capacity change from 0 to 262144 [ 612.259191] FAULT_INJECTION: forcing a failure. [ 612.259191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.261744] CPU: 1 PID: 6066 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 612.263137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.264847] Call Trace: [ 612.265393] dump_stack+0x107/0x167 [ 612.266145] should_fail.cold+0x5/0xa [ 612.266930] _copy_from_user+0x2e/0x1b0 [ 612.267751] iovec_from_user+0x141/0x400 [ 612.268600] __import_iovec+0x67/0x590 [ 612.269403] ? __ia32_sys_shutdown+0x80/0x80 [ 612.270303] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 612.271385] import_iovec+0x83/0xb0 [ 612.272141] sendmsg_copy_msghdr+0x131/0x160 [ 612.273042] ? do_recvmmsg+0x6d0/0x6d0 [ 612.273851] ? lock_downgrade+0x6d0/0x6d0 [ 612.274709] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 612.275799] ___sys_sendmsg+0xc6/0x170 [ 612.276612] ? sendmsg_copy_msghdr+0x160/0x160 [ 612.277557] ? __fget_files+0x2cf/0x520 [ 612.278377] ? lock_downgrade+0x6d0/0x6d0 [ 612.279225] ? find_held_lock+0x2c/0x110 [ 612.280071] ? __fget_files+0x2f8/0x520 [ 612.280907] ? __fget_light+0xea/0x290 [ 612.281714] __sys_sendmsg+0xe5/0x1b0 [ 612.282501] ? __sys_sendmsg_sock+0x40/0x40 [ 612.283390] ? rcu_read_lock_any_held+0x75/0xa0 [ 612.284353] ? fput_many+0x2f/0x1a0 [ 612.285103] ? ksys_write+0x1a9/0x260 [ 612.285893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 612.286970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 612.288026] ? trace_hardirqs_on+0x5b/0x180 [ 612.288930] do_syscall_64+0x33/0x40 [ 612.289695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 612.290741] RIP: 0033:0x7fd4c67bbb19 [ 612.291503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 612.295303] RSP: 002b:00007fd4c3d31188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.296878] RAX: ffffffffffffffda RBX: 00007fd4c68cef60 RCX: 00007fd4c67bbb19 [ 612.298337] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 612.299778] RBP: 00007fd4c3d311d0 R08: 0000000000000000 R09: 0000000000000000 [ 612.300221] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 612.301232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.301243] R13: 00007ffc5e340a4f R14: 00007fd4c3d31300 R15: 0000000000022000 01:30:04 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:30:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 3) 01:30:04 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 8) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 612.444517] FAULT_INJECTION: forcing a failure. [ 612.444517] name failslab, interval 1, probability 0, space 0, times 0 [ 612.446808] CPU: 1 PID: 6073 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 612.448157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.449769] Call Trace: [ 612.450286] dump_stack+0x107/0x167 [ 612.451000] should_fail.cold+0x5/0xa [ 612.451751] ? __alloc_skb+0x6d/0x5b0 [ 612.452507] should_failslab+0x5/0x20 [ 612.453265] kmem_cache_alloc_node+0x55/0x330 [ 612.454154] __alloc_skb+0x6d/0x5b0 [ 612.454878] netlink_sendmsg+0x998/0xe00 [ 612.455694] ? netlink_unicast+0xa00/0xa00 [ 612.456541] ? netlink_unicast+0xa00/0xa00 [ 612.457375] __sock_sendmsg+0x154/0x190 [ 612.458156] ____sys_sendmsg+0x70d/0x870 [ 612.458954] ? sock_write_iter+0x3d0/0x3d0 [ 612.459783] ? do_recvmmsg+0x6d0/0x6d0 [ 612.460569] ? lock_downgrade+0x6d0/0x6d0 [ 612.461386] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 612.462435] ___sys_sendmsg+0xf3/0x170 [ 612.463202] ? sendmsg_copy_msghdr+0x160/0x160 [ 612.464099] ? __fget_files+0x2cf/0x520 [ 612.464885] ? lock_downgrade+0x6d0/0x6d0 [ 612.465700] ? find_held_lock+0x2c/0x110 [ 612.466507] ? __fget_files+0x2f8/0x520 [ 612.467294] ? __fget_light+0xea/0x290 [ 612.468062] __sys_sendmsg+0xe5/0x1b0 [ 612.468819] ? __sys_sendmsg_sock+0x40/0x40 [ 612.469675] ? rcu_read_lock_any_held+0x75/0xa0 [ 612.470607] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 612.471656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 612.472695] ? trace_hardirqs_on+0x5b/0x180 [ 612.473551] do_syscall_64+0x33/0x40 [ 612.474292] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 612.475308] RIP: 0033:0x7fd4c67bbb19 [ 612.476035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 612.479648] RSP: 002b:00007fd4c3d31188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.481143] RAX: ffffffffffffffda RBX: 00007fd4c68cef60 RCX: 00007fd4c67bbb19 [ 612.482532] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 612.483932] RBP: 00007fd4c3d311d0 R08: 0000000000000000 R09: 0000000000000000 [ 612.485330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.486737] R13: 00007ffc5e340a4f R14: 00007fd4c3d31300 R15: 0000000000022000 [ 612.554949] FAULT_INJECTION: forcing a failure. [ 612.554949] name failslab, interval 1, probability 0, space 0, times 0 [ 612.557479] CPU: 0 PID: 6078 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 612.558967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.560773] Call Trace: [ 612.561337] dump_stack+0x107/0x167 [ 612.562120] should_fail.cold+0x5/0xa [ 612.562947] ? create_object.isra.0+0x3a/0xa20 [ 612.563931] should_failslab+0x5/0x20 [ 612.564762] kmem_cache_alloc+0x5b/0x310 [ 612.565634] create_object.isra.0+0x3a/0xa20 [ 612.566588] kmemleak_alloc_percpu+0xa0/0x100 [ 612.567555] pcpu_alloc+0x4e2/0x1240 [ 612.568370] ? io_tctx_exit_cb+0xf0/0xf0 [ 612.569242] percpu_ref_init+0x31/0x3d0 [ 612.570106] io_uring_setup+0x47a/0x2980 [ 612.570979] ? __mutex_unlock_slowpath+0xe1/0x600 [ 612.572010] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 612.573102] ? wait_for_completion_io+0x270/0x270 [ 612.574147] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 612.575275] ? syscall_enter_from_user_mode+0x1d/0x50 [ 612.576392] do_syscall_64+0x33/0x40 [ 612.577206] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 612.578313] RIP: 0033:0x7febf2e1eb19 [ 612.579117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 612.583095] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 612.584758] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 612.586289] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 612.587829] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 612.589368] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 612.590899] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:30:16 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 01:30:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:30:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:30:16 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:30:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 4) 01:30:16 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 9) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:30:16 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:30:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000ff00000000"], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r7) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000540)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r8, 0xb1575afecd8b75a9, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x10c, r8, 0x200, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xff}, {0x8, 0x13, 0x8001}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x144}, {0x8, 0x13, 0x200}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r3, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x7, 0x7, 0x6, 0x5, 0x9, 0x20, 0x2, 0x401]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xf2, 0xac, "9c53219d97bfc3ebf63c018c1914fe56b4e73993c0b43dc5faa17fc86c200670236fd0c5f70f937a7cc57b4200f7be93f37405c661e03d1cb940331cf9e1cc2f03b7a96eb42996cd11de98a3dea18ba77b643730e8642db04cae4e21d20c4c6c53b8de7255742c83a64238c94c4e94515a602f16a3df864cbe4849116e9e3dee7eba5a3d3144f65a434962ef49a0041726705ac14e898cf14e3e9e7b70b33022442dea7ee4c5f3afc960f449d2c28aeaf614600a9620b6b5fd23f7da287a13857937a6470b20f6943b5334b6f52fa35aa09757ad705d3d195e25ab58a8cec7f5086b4f355d2b5165d248ac117ecf"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6a}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)="eff4d32620278c3fcb3f6f9c2f2177e8a35addfad1d7da4c04167abdd95b7454e3bd03ec9120776c2e1deeae5659f083c0e9f611cadd8a6f5de7079672b172a3c7cfbf4b", 0x44}], 0x1}, 0x10044001) dup2(r0, r1) [ 624.983497] loop0: detected capacity change from 0 to 41948160 [ 625.031336] FAULT_INJECTION: forcing a failure. [ 625.031336] name failslab, interval 1, probability 0, space 0, times 0 [ 625.034379] CPU: 0 PID: 6097 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 625.036166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 625.038351] Call Trace: [ 625.039046] dump_stack+0x107/0x167 [ 625.039998] should_fail.cold+0x5/0xa [ 625.041005] ? create_object.isra.0+0x3a/0xa20 [ 625.042199] should_failslab+0x5/0x20 [ 625.043180] kmem_cache_alloc+0x5b/0x310 [ 625.044246] create_object.isra.0+0x3a/0xa20 [ 625.045285] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 625.046374] kmem_cache_alloc_node+0x169/0x330 [ 625.047370] __alloc_skb+0x6d/0x5b0 [ 625.048153] netlink_sendmsg+0x998/0xe00 [ 625.049042] ? netlink_unicast+0xa00/0xa00 [ 625.049969] ? netlink_unicast+0xa00/0xa00 [ 625.050886] __sock_sendmsg+0x154/0x190 [ 625.051750] ____sys_sendmsg+0x70d/0x870 [ 625.052646] ? sock_write_iter+0x3d0/0x3d0 [ 625.053545] ? do_recvmmsg+0x6d0/0x6d0 [ 625.054395] ? lock_downgrade+0x6d0/0x6d0 [ 625.055292] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 625.056439] ___sys_sendmsg+0xf3/0x170 [ 625.057290] ? sendmsg_copy_msghdr+0x160/0x160 [ 625.058261] ? __fget_files+0x2cf/0x520 [ 625.059109] ? lock_downgrade+0x6d0/0x6d0 [ 625.060003] ? find_held_lock+0x2c/0x110 [ 625.060899] ? __fget_files+0x2f8/0x520 [ 625.061776] ? __fget_light+0xea/0x290 [ 625.062633] __sys_sendmsg+0xe5/0x1b0 [ 625.063454] ? __sys_sendmsg_sock+0x40/0x40 [ 625.064396] ? rcu_read_lock_any_held+0x75/0xa0 [ 625.065428] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 625.066571] ? syscall_enter_from_user_mode+0x1d/0x50 [ 625.067680] ? trace_hardirqs_on+0x5b/0x180 [ 625.068632] do_syscall_64+0x33/0x40 [ 625.069437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 625.070540] RIP: 0033:0x7fd4c67bbb19 [ 625.071344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 625.075314] RSP: 002b:00007fd4c3d31188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.076977] RAX: ffffffffffffffda RBX: 00007fd4c68cef60 RCX: 00007fd4c67bbb19 [ 625.078524] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 625.080064] RBP: 00007fd4c3d311d0 R08: 0000000000000000 R09: 0000000000000000 [ 625.081617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.083157] R13: 00007ffc5e340a4f R14: 00007fd4c3d31300 R15: 0000000000022000 [ 625.098080] loop5: detected capacity change from 0 to 262144 [ 625.106790] loop4: detected capacity change from 0 to 262144 [ 625.110061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6092 comm=syz-executor.2 [ 625.111553] FAULT_INJECTION: forcing a failure. [ 625.111553] name failslab, interval 1, probability 0, space 0, times 0 [ 625.113959] CPU: 1 PID: 6107 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 625.114743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 625.115700] Call Trace: [ 625.116008] dump_stack+0x107/0x167 [ 625.116434] should_fail.cold+0x5/0xa [ 625.116874] ? create_object.isra.0+0x3a/0xa20 [ 625.117397] should_failslab+0x5/0x20 [ 625.117834] kmem_cache_alloc+0x5b/0x310 [ 625.118299] create_object.isra.0+0x3a/0xa20 [ 625.118811] kmemleak_alloc_percpu+0xa0/0x100 [ 625.119325] pcpu_alloc+0x4e2/0x1240 [ 625.119757] ? io_tctx_exit_cb+0xf0/0xf0 [ 625.120220] percpu_ref_init+0x31/0x3d0 [ 625.120689] io_uring_setup+0x47a/0x2980 [ 625.121149] ? __mutex_unlock_slowpath+0xe1/0x600 [ 625.121702] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 625.122273] ? wait_for_completion_io+0x270/0x270 [ 625.122834] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 625.123428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 625.124016] do_syscall_64+0x33/0x40 [ 625.124447] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 625.125032] RIP: 0033:0x7febf2e1eb19 [ 625.125458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 625.127565] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 625.128449] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 625.129265] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 625.130078] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 625.130895] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 625.131712] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:30:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:30:17 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 10) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 625.176992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6110 comm=syz-executor.2 [ 625.181293] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:30:17 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 625.224816] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:30:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:30:17 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 625.319180] FAULT_INJECTION: forcing a failure. [ 625.319180] name failslab, interval 1, probability 0, space 0, times 0 [ 625.321710] CPU: 0 PID: 6122 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 625.323142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 625.324890] Call Trace: [ 625.325449] dump_stack+0x107/0x167 [ 625.326223] should_fail.cold+0x5/0xa [ 625.327026] ? percpu_ref_init+0xd8/0x3d0 [ 625.327895] should_failslab+0x5/0x20 [ 625.328705] kmem_cache_alloc_trace+0x55/0x320 [ 625.329666] ? io_tctx_exit_cb+0xf0/0xf0 [ 625.330529] percpu_ref_init+0xd8/0x3d0 [ 625.331370] io_uring_setup+0x47a/0x2980 [ 625.332223] ? __mutex_unlock_slowpath+0xe1/0x600 [ 625.333248] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 625.334305] ? wait_for_completion_io+0x270/0x270 [ 625.335352] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 625.336483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 625.337587] do_syscall_64+0x33/0x40 [ 625.338370] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 625.339457] RIP: 0033:0x7febf2e1eb19 [ 625.340238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 625.344124] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 625.345759] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 625.347497] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 625.349040] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 625.350543] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 625.352050] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:30:17 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) tee(0xffffffffffffffff, r0, 0x1, 0x6) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd02010000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffffffffffff00000500"/256]) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @empty}, &(0x7f0000000200)=0xc) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000038c0), 0x0) fsync(r2) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x541b, 0x0) close_range(r4, r5, 0x2) fallocate(r3, 0x0, 0x0, 0x1000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f00000001c0)) r7 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x2) sendfile(r6, r7, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) 01:30:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:30:33 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:30:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 5) 01:30:33 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:30:33 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 11) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:30:33 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:30:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:30:33 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) [ 641.273492] loop0: detected capacity change from 0 to 41948160 [ 641.292251] FAULT_INJECTION: forcing a failure. [ 641.292251] name failslab, interval 1, probability 0, space 0, times 0 [ 641.294718] CPU: 1 PID: 6145 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 641.296167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 641.297940] Call Trace: [ 641.298503] dump_stack+0x107/0x167 [ 641.299273] should_fail.cold+0x5/0xa [ 641.300078] should_failslab+0x5/0x20 [ 641.300882] __kmalloc_node_track_caller+0x74/0x3b0 [ 641.301923] ? netlink_sendmsg+0x998/0xe00 [ 641.302808] __alloc_skb+0xb1/0x5b0 [ 641.303568] netlink_sendmsg+0x998/0xe00 [ 641.304420] ? netlink_unicast+0xa00/0xa00 [ 641.305320] ? netlink_unicast+0xa00/0xa00 [ 641.306206] __sock_sendmsg+0x154/0x190 [ 641.307038] ____sys_sendmsg+0x70d/0x870 [ 641.307888] ? sock_write_iter+0x3d0/0x3d0 [ 641.308782] ? do_recvmmsg+0x6d0/0x6d0 [ 641.309605] ? lock_downgrade+0x6d0/0x6d0 01:30:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 641.310483] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 641.311747] ___sys_sendmsg+0xf3/0x170 [ 641.312584] ? sendmsg_copy_msghdr+0x160/0x160 [ 641.313554] ? __fget_files+0x2cf/0x520 [ 641.314382] ? lock_downgrade+0x6d0/0x6d0 [ 641.315250] ? find_held_lock+0x2c/0x110 [ 641.316117] ? __fget_files+0x2f8/0x520 [ 641.316962] ? __fget_light+0xea/0x290 [ 641.317778] __sys_sendmsg+0xe5/0x1b0 [ 641.318573] ? __sys_sendmsg_sock+0x40/0x40 [ 641.319484] ? rcu_read_lock_any_held+0x75/0xa0 [ 641.320480] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 641.321579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 641.322664] ? trace_hardirqs_on+0x5b/0x180 [ 641.323576] do_syscall_64+0x33/0x40 [ 641.324364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 641.325474] RIP: 0033:0x7fd4c67bbb19 [ 641.326251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 641.330130] RSP: 002b:00007fd4c3d31188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.331727] RAX: ffffffffffffffda RBX: 00007fd4c68cef60 RCX: 00007fd4c67bbb19 [ 641.333236] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 641.334744] RBP: 00007fd4c3d311d0 R08: 0000000000000000 R09: 0000000000000000 [ 641.336251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.337766] R13: 00007ffc5e340a4f R14: 00007fd4c3d31300 R15: 0000000000022000 [ 641.358934] loop4: detected capacity change from 0 to 262144 [ 641.366223] FAULT_INJECTION: forcing a failure. [ 641.366223] name failslab, interval 1, probability 0, space 0, times 0 [ 641.367625] CPU: 0 PID: 6156 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 641.368465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 641.369464] Call Trace: [ 641.369803] dump_stack+0x107/0x167 [ 641.370256] should_fail.cold+0x5/0xa [ 641.370736] ? create_object.isra.0+0x3a/0xa20 [ 641.371291] should_failslab+0x5/0x20 [ 641.371762] kmem_cache_alloc+0x5b/0x310 [ 641.372276] create_object.isra.0+0x3a/0xa20 [ 641.372840] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 641.373471] kmem_cache_alloc_trace+0x151/0x320 [ 641.374038] ? io_tctx_exit_cb+0xf0/0xf0 [ 641.374510] percpu_ref_init+0xd8/0x3d0 [ 641.374976] io_uring_setup+0x47a/0x2980 [ 641.375451] ? __mutex_unlock_slowpath+0xe1/0x600 [ 641.376016] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 641.376617] ? wait_for_completion_io+0x270/0x270 [ 641.377200] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 641.377816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 641.378418] do_syscall_64+0x33/0x40 [ 641.378856] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 641.379455] RIP: 0033:0x7febf2e1eb19 [ 641.379896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 641.382042] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 641.382931] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 641.383758] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 641.384597] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 641.385431] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 641.386267] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:30:33 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:30:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 6) [ 641.406976] loop2: detected capacity change from 0 to 262144 [ 641.426610] loop5: detected capacity change from 0 to 262144 [ 641.435814] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 641.453943] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 641.474259] FAULT_INJECTION: forcing a failure. [ 641.474259] name failslab, interval 1, probability 0, space 0, times 0 [ 641.475613] CPU: 0 PID: 6175 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 641.476388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 641.477341] Call Trace: [ 641.477644] dump_stack+0x107/0x167 [ 641.478060] should_fail.cold+0x5/0xa [ 641.478494] ? create_object.isra.0+0x3a/0xa20 [ 641.479005] should_failslab+0x5/0x20 [ 641.479436] kmem_cache_alloc+0x5b/0x310 [ 641.479903] create_object.isra.0+0x3a/0xa20 [ 641.480538] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 641.481261] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 641.481983] ? netlink_sendmsg+0x998/0xe00 [ 641.482589] __alloc_skb+0xb1/0x5b0 [ 641.483105] netlink_sendmsg+0x998/0xe00 [ 641.483680] ? netlink_unicast+0xa00/0xa00 [ 641.484283] ? netlink_unicast+0xa00/0xa00 [ 641.484892] __sock_sendmsg+0x154/0x190 [ 641.485448] ____sys_sendmsg+0x70d/0x870 [ 641.486030] ? sock_write_iter+0x3d0/0x3d0 [ 641.486630] ? do_recvmmsg+0x6d0/0x6d0 [ 641.487188] ? lock_downgrade+0x6d0/0x6d0 [ 641.487780] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 641.488527] ___sys_sendmsg+0xf3/0x170 [ 641.489075] ? sendmsg_copy_msghdr+0x160/0x160 [ 641.489724] ? __fget_files+0x2cf/0x520 [ 641.490292] ? lock_downgrade+0x6d0/0x6d0 [ 641.490876] ? find_held_lock+0x2c/0x110 [ 641.491452] ? __fget_files+0x2f8/0x520 [ 641.492023] ? __fget_light+0xea/0x290 [ 641.492580] __sys_sendmsg+0xe5/0x1b0 [ 641.493121] ? __sys_sendmsg_sock+0x40/0x40 [ 641.493733] ? rcu_read_lock_any_held+0x75/0xa0 [ 641.494399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 641.495145] ? syscall_enter_from_user_mode+0x1d/0x50 [ 641.495871] ? trace_hardirqs_on+0x5b/0x180 [ 641.496495] do_syscall_64+0x33/0x40 [ 641.497017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 641.497736] RIP: 0033:0x7fd4c67bbb19 [ 641.498266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 641.500865] RSP: 002b:00007fd4c3d31188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.501941] RAX: ffffffffffffffda RBX: 00007fd4c68cef60 RCX: 00007fd4c67bbb19 [ 641.502715] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 641.503709] RBP: 00007fd4c3d311d0 R08: 0000000000000000 R09: 0000000000000000 [ 641.504713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.505707] R13: 00007ffc5e340a4f R14: 00007fd4c3d31300 R15: 0000000000022000 01:30:33 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:30:33 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:30:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:30:50 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:30:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:30:50 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:30:50 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 658.139327] FAULT_INJECTION: forcing a failure. [ 658.139327] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 658.143093] CPU: 1 PID: 6201 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 658.144496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 658.146247] Call Trace: [ 658.146810] dump_stack+0x107/0x167 [ 658.147585] should_fail.cold+0x5/0xa [ 658.148401] __alloc_pages_nodemask+0x182/0x600 [ 658.149396] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 658.150668] ? cap_capable+0x1cd/0x230 [ 658.151496] alloc_pages_current+0x187/0x280 [ 658.152426] __get_free_pages+0xc/0xa0 [ 658.153247] io_uring_setup+0xe27/0x2980 [ 658.154101] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 658.155157] ? wait_for_completion_io+0x270/0x270 [ 658.156182] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 658.157289] ? syscall_enter_from_user_mode+0x1d/0x50 [ 658.158368] do_syscall_64+0x33/0x40 [ 658.159138] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 658.160198] RIP: 0033:0x7febf2e1eb19 [ 658.160978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 658.164777] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 01:30:50 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 12) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:30:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:30:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 7) 01:30:50 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 658.166343] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 658.168065] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 658.169469] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 658.169780] FAULT_INJECTION: forcing a failure. [ 658.169780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.170847] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 658.170858] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 658.171413] loop0: detected capacity change from 0 to 41948160 [ 658.173542] CPU: 0 PID: 6207 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 658.179404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 658.181308] Call Trace: [ 658.181915] dump_stack+0x107/0x167 [ 658.182756] should_fail.cold+0x5/0xa [ 658.183619] _copy_from_iter_full+0x201/0xa60 [ 658.184625] ? __virt_addr_valid+0x170/0x5d0 [ 658.185648] ? __check_object_size+0x319/0x440 [ 658.186699] netlink_sendmsg+0x879/0xe00 [ 658.187602] ? netlink_unicast+0xa00/0xa00 [ 658.188575] ? netlink_unicast+0xa00/0xa00 [ 658.189542] __sock_sendmsg+0x154/0x190 [ 658.190468] ____sys_sendmsg+0x70d/0x870 [ 658.191375] ? sock_write_iter+0x3d0/0x3d0 [ 658.192365] ? do_recvmmsg+0x6d0/0x6d0 [ 658.193266] ? lock_downgrade+0x6d0/0x6d0 [ 658.194225] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 658.195410] ___sys_sendmsg+0xf3/0x170 [ 658.196298] ? sendmsg_copy_msghdr+0x160/0x160 [ 658.197336] ? __fget_files+0x2cf/0x520 [ 658.198238] ? lock_downgrade+0x6d0/0x6d0 [ 658.199174] ? find_held_lock+0x2c/0x110 [ 658.200101] ? __fget_files+0x2f8/0x520 [ 658.201011] ? __fget_light+0xea/0x290 [ 658.201922] __sys_sendmsg+0xe5/0x1b0 [ 658.202771] ? __sys_sendmsg_sock+0x40/0x40 [ 658.203732] ? rcu_read_lock_any_held+0x75/0xa0 [ 658.204830] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 658.206020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 658.207193] ? trace_hardirqs_on+0x5b/0x180 [ 658.208157] do_syscall_64+0x33/0x40 [ 658.209001] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 658.210157] RIP: 0033:0x7fd4c67bbb19 [ 658.210992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 658.215193] RSP: 002b:00007fd4c3d31188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.216943] RAX: ffffffffffffffda RBX: 00007fd4c68cef60 RCX: 00007fd4c67bbb19 [ 658.218589] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 658.220204] RBP: 00007fd4c3d311d0 R08: 0000000000000000 R09: 0000000000000000 [ 658.221824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.223459] R13: 00007ffc5e340a4f R14: 00007fd4c3d31300 R15: 0000000000022000 01:30:50 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 658.276741] loop5: detected capacity change from 0 to 262144 01:30:50 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 13) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 658.304561] loop2: detected capacity change from 0 to 262144 [ 658.311042] loop4: detected capacity change from 0 to 262144 01:30:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) (fail_nth: 8) [ 658.373726] FAULT_INJECTION: forcing a failure. [ 658.373726] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 658.376551] CPU: 0 PID: 6227 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 658.378083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 658.379923] Call Trace: [ 658.380518] dump_stack+0x107/0x167 [ 658.381349] should_fail.cold+0x5/0xa [ 658.382216] __alloc_pages_nodemask+0x182/0x600 [ 658.383259] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 658.384608] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 658.385834] ? cap_capable+0x1cd/0x230 [ 658.386727] alloc_pages_current+0x187/0x280 [ 658.387717] __get_free_pages+0xc/0xa0 [ 658.388588] io_uring_setup+0xf9a/0x2980 [ 658.389501] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 658.390616] ? wait_for_completion_io+0x270/0x270 [ 658.391707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 658.392877] ? syscall_enter_from_user_mode+0x1d/0x50 [ 658.394014] do_syscall_64+0x33/0x40 [ 658.394841] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 658.395977] RIP: 0033:0x7febf2e1eb19 [ 658.396805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 658.400886] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 658.402570] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 658.404158] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 658.405743] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 658.407442] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 658.409160] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 658.415380] FAULT_INJECTION: forcing a failure. [ 658.415380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.418228] CPU: 0 PID: 6226 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 658.419867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 658.421857] Call Trace: [ 658.422489] dump_stack+0x107/0x167 [ 658.423365] should_fail.cold+0x5/0xa [ 658.424279] _copy_to_user+0x2e/0x180 [ 658.425213] simple_read_from_buffer+0xcc/0x160 [ 658.426331] proc_fail_nth_read+0x198/0x230 [ 658.427363] ? proc_sessionid_read+0x230/0x230 [ 658.428461] ? security_file_permission+0xb1/0xe0 [ 658.429623] ? proc_sessionid_read+0x230/0x230 [ 658.430717] vfs_read+0x228/0x620 [ 658.431553] ksys_read+0x12d/0x260 [ 658.432405] ? vfs_write+0xb10/0xb10 [ 658.433312] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 658.434556] ? syscall_enter_from_user_mode+0x1d/0x50 [ 658.435787] do_syscall_64+0x33/0x40 [ 658.436690] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 658.437905] RIP: 0033:0x7fd4c676e69c [ 658.438795] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 658.443158] RSP: 002b:00007fd4c3d31170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 658.444996] RAX: ffffffffffffffda RBX: 0000000000000030 RCX: 00007fd4c676e69c [ 658.446694] RDX: 000000000000000f RSI: 00007fd4c3d311e0 RDI: 0000000000000005 [ 658.448379] RBP: 00007fd4c3d311d0 R08: 0000000000000000 R09: 0000000000000000 [ 658.450073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.451767] R13: 00007ffc5e340a4f R14: 00007fd4c3d31300 R15: 0000000000022000 [ 658.481523] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 658.483987] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:30:50 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:30:50 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', 0x0, 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:30:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:30:50 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 14) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 658.561329] loop4: detected capacity change from 0 to 262144 01:30:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:30:50 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 658.674529] FAULT_INJECTION: forcing a failure. [ 658.674529] name failslab, interval 1, probability 0, space 0, times 0 [ 658.676254] CPU: 1 PID: 6238 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 658.677271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 658.678491] Call Trace: [ 658.678885] dump_stack+0x107/0x167 [ 658.679421] should_fail.cold+0x5/0xa [ 658.679980] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 658.680803] should_failslab+0x5/0x20 [ 658.681363] kmem_cache_alloc_trace+0x55/0x320 [ 658.682041] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 658.682837] io_uring_setup+0x14f6/0x2980 [ 658.683457] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 658.684211] ? wait_for_completion_io+0x270/0x270 [ 658.684936] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 658.685701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 658.686451] do_syscall_64+0x33/0x40 [ 658.686994] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 658.687743] RIP: 0033:0x7febf2e1eb19 [ 658.688288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 658.690969] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 658.692090] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 658.693143] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 658.694181] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 658.695214] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 658.696247] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 658.750089] loop5: detected capacity change from 0 to 262144 [ 658.817583] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 674.347465] FAULT_INJECTION: forcing a failure. [ 674.347465] name failslab, interval 1, probability 0, space 0, times 0 [ 674.350380] CPU: 0 PID: 6260 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 674.352118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 674.354238] Call Trace: [ 674.354906] dump_stack+0x107/0x167 [ 674.355828] should_fail.cold+0x5/0xa [ 674.356810] ? create_object.isra.0+0x3a/0xa20 [ 674.357974] should_failslab+0x5/0x20 [ 674.358929] kmem_cache_alloc+0x5b/0x310 [ 674.359967] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 674.361497] create_object.isra.0+0x3a/0xa20 [ 674.362593] loop0: detected capacity change from 0 to 41948160 [ 674.364085] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 674.365398] kmem_cache_alloc_trace+0x151/0x320 [ 674.366430] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 674.367567] io_uring_setup+0x14f6/0x2980 [ 674.368438] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 674.369519] ? wait_for_completion_io+0x270/0x270 [ 674.370548] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 674.371646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 674.372730] do_syscall_64+0x33/0x40 [ 674.373520] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 674.374592] RIP: 0033:0x7febf2e1eb19 [ 674.375379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 674.379240] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 674.380910] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 674.382419] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 674.383918] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 674.385418] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 674.386901] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:31:06 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 15) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:31:06 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:31:06 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:31:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xec, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:31:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:31:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:31:06 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', 0x0, 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:31:06 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:31:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 674.400559] loop5: detected capacity change from 0 to 262144 [ 674.410350] loop4: detected capacity change from 0 to 262144 01:31:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:31:06 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 16) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:31:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 674.644196] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:31:06 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:31:06 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', 0x0, 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 674.704205] FAULT_INJECTION: forcing a failure. [ 674.704205] name failslab, interval 1, probability 0, space 0, times 0 [ 674.706671] CPU: 0 PID: 6297 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 674.708117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 674.709879] Call Trace: [ 674.710448] dump_stack+0x107/0x167 [ 674.711232] should_fail.cold+0x5/0xa [ 674.712056] ? create_object.isra.0+0x3a/0xa20 [ 674.713034] should_failslab+0x5/0x20 [ 674.713853] kmem_cache_alloc+0x5b/0x310 [ 674.714740] create_object.isra.0+0x3a/0xa20 [ 674.715698] kmemleak_alloc_percpu+0xa0/0x100 [ 674.716663] pcpu_alloc+0x4e2/0x1240 [ 674.717466] ? io_async_queue_proc+0x80/0x80 [ 674.718386] percpu_ref_init+0x31/0x3d0 [ 674.719218] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 674.720359] io_uring_setup+0x14f6/0x2980 [ 674.721242] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 674.722306] ? wait_for_completion_io+0x270/0x270 [ 674.723338] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 674.724437] ? syscall_enter_from_user_mode+0x1d/0x50 [ 674.725525] do_syscall_64+0x33/0x40 [ 674.726321] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 674.727395] RIP: 0033:0x7febf2e1eb19 [ 674.728183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 674.732051] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 674.733659] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 674.735151] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 674.736636] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 674.738129] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 674.739615] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:31:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:31:06 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) [ 674.795154] loop4: detected capacity change from 0 to 262144 [ 674.820140] loop5: detected capacity change from 0 to 262144 [ 674.905006] loop0: detected capacity change from 0 to 41948160 [ 674.915783] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:31:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:31:21 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:31:21 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 689.543918] FAULT_INJECTION: forcing a failure. [ 689.543918] name failslab, interval 1, probability 0, space 0, times 0 [ 689.545269] CPU: 0 PID: 6329 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 689.546054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 689.546998] Call Trace: [ 689.547307] dump_stack+0x107/0x167 [ 689.547729] should_fail.cold+0x5/0xa [ 689.548162] ? create_object.isra.0+0x3a/0xa20 [ 689.548686] should_failslab+0x5/0x20 [ 689.549136] kmem_cache_alloc+0x5b/0x310 [ 689.549600] create_object.isra.0+0x3a/0xa20 [ 689.550112] kmemleak_alloc_percpu+0xa0/0x100 [ 689.550621] pcpu_alloc+0x4e2/0x1240 [ 689.551058] ? io_async_queue_proc+0x80/0x80 [ 689.551565] percpu_ref_init+0x31/0x3d0 [ 689.552018] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 689.552652] io_uring_setup+0x14f6/0x2980 [ 689.553134] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 689.553721] ? wait_for_completion_io+0x270/0x270 [ 689.554280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 689.554887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 689.555489] do_syscall_64+0x33/0x40 01:31:21 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 17) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:31:21 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:31:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:31:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 689.555910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 689.556662] RIP: 0033:0x7febf2e1eb19 [ 689.557096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 689.559224] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 689.560095] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 689.560913] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 689.561743] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 689.562566] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 689.563370] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:31:21 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) [ 689.591189] loop2: detected capacity change from 0 to 262144 [ 689.603514] loop0: detected capacity change from 0 to 41948160 01:31:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x500, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:31:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 689.631657] loop5: detected capacity change from 0 to 262144 [ 689.636243] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 689.649067] loop4: detected capacity change from 0 to 16896 01:31:21 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 18) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 689.744823] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks) 01:31:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x600, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:31:21 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) [ 689.814106] FAULT_INJECTION: forcing a failure. [ 689.814106] name failslab, interval 1, probability 0, space 0, times 0 [ 689.816668] CPU: 1 PID: 6363 Comm: syz-executor.7 Not tainted 5.10.240 #1 01:31:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 689.818120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 689.820015] Call Trace: [ 689.820572] dump_stack+0x107/0x167 [ 689.821360] should_fail.cold+0x5/0xa [ 689.822169] ? percpu_ref_init+0xd8/0x3d0 [ 689.823035] should_failslab+0x5/0x20 [ 689.823833] kmem_cache_alloc_trace+0x55/0x320 [ 689.824793] ? io_async_queue_proc+0x80/0x80 [ 689.825727] percpu_ref_init+0xd8/0x3d0 [ 689.826146] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 689.826553] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 689.826584] io_uring_setup+0x14f6/0x2980 [ 689.830282] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 689.831346] ? wait_for_completion_io+0x270/0x270 [ 689.832381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 689.833490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 689.834572] do_syscall_64+0x33/0x40 [ 689.835353] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 689.836427] RIP: 0033:0x7febf2e1eb19 [ 689.837219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 689.841102] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 689.842713] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 689.844223] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 689.845735] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 689.847239] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 689.848745] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:31:21 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:31:21 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 690.005011] loop5: detected capacity change from 0 to 262144 01:31:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 690.017765] loop4: detected capacity change from 0 to 16896 [ 690.038190] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks) [ 690.043098] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:31:42 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:31:42 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 19) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:31:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:31:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:31:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:31:42 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x900, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:31:42 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:31:42 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) [ 710.926572] FAULT_INJECTION: forcing a failure. [ 710.926572] name failslab, interval 1, probability 0, space 0, times 0 [ 710.929367] CPU: 1 PID: 6401 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 710.930919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 710.932777] Call Trace: [ 710.933040] loop2: detected capacity change from 0 to 41948160 [ 710.933395] dump_stack+0x107/0x167 [ 710.935726] should_fail.cold+0x5/0xa [ 710.936586] ? create_object.isra.0+0x3a/0xa20 [ 710.937625] should_failslab+0x5/0x20 [ 710.938481] kmem_cache_alloc+0x5b/0x310 [ 710.939400] create_object.isra.0+0x3a/0xa20 [ 710.940387] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 710.941546] kmem_cache_alloc_trace+0x151/0x320 [ 710.942592] ? io_async_queue_proc+0x80/0x80 [ 710.943579] percpu_ref_init+0xd8/0x3d0 [ 710.944483] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 710.945715] io_uring_setup+0x14f6/0x2980 [ 710.946657] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 710.947797] ? wait_for_completion_io+0x270/0x270 [ 710.948898] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 710.950100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 710.951271] do_syscall_64+0x33/0x40 [ 710.952121] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 710.953287] RIP: 0033:0x7febf2e1eb19 [ 710.954129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 710.958258] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 710.959970] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 710.961582] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 710.963185] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 710.964785] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 710.966407] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:31:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 710.981067] loop5: detected capacity change from 0 to 262144 [ 710.997176] loop0: detected capacity change from 0 to 41948160 [ 711.000245] loop4: detected capacity change from 0 to 16896 [ 711.033212] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks) 01:31:43 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 20) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 711.063431] FAULT_INJECTION: forcing a failure. [ 711.063431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.066090] CPU: 0 PID: 6423 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 711.067559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.069336] Call Trace: [ 711.069899] dump_stack+0x107/0x167 [ 711.070669] should_fail.cold+0x5/0xa [ 711.071478] _copy_to_user+0x2e/0x180 [ 711.072296] io_uring_setup+0x11b5/0x2980 [ 711.073192] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 711.074286] ? wait_for_completion_io+0x270/0x270 [ 711.075344] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 711.076460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 711.077563] do_syscall_64+0x33/0x40 [ 711.078362] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 711.079449] RIP: 0033:0x7febf2e1eb19 [ 711.080237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 711.084132] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 711.085772] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 711.087301] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 711.088843] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 711.090393] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 711.091933] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 711.124552] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:31:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:31:43 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf00, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:31:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:31:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:31:43 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:31:43 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 21) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:31:43 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:31:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:31:43 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x8100, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 711.313077] loop0: detected capacity change from 0 to 41948160 [ 711.329992] loop2: detected capacity change from 0 to 41948160 [ 711.365056] FAULT_INJECTION: forcing a failure. [ 711.365056] name failslab, interval 1, probability 0, space 0, times 0 [ 711.367780] CPU: 1 PID: 6443 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 711.369357] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.371237] Call Trace: [ 711.371841] dump_stack+0x107/0x167 [ 711.372660] should_fail.cold+0x5/0xa [ 711.373531] ? __d_alloc+0x2a/0x990 [ 711.374352] should_failslab+0x5/0x20 [ 711.375208] kmem_cache_alloc+0x5b/0x310 [ 711.376138] __d_alloc+0x2a/0x990 [ 711.376935] ? find_held_lock+0x2c/0x110 [ 711.377884] d_alloc_pseudo+0x19/0x70 [ 711.378753] alloc_file_pseudo+0xce/0x250 [ 711.379703] ? trace_hardirqs_on+0x5b/0x180 [ 711.380685] ? alloc_file+0x5a0/0x5a0 [ 711.381588] anon_inode_getfile+0xc8/0x1f0 [ 711.382572] io_uring_setup+0x138b/0x2980 [ 711.383542] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 711.384713] ? wait_for_completion_io+0x270/0x270 [ 711.385850] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 711.387044] ? syscall_enter_from_user_mode+0x1d/0x50 [ 711.388233] do_syscall_64+0x33/0x40 [ 711.389083] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 711.390268] RIP: 0033:0x7febf2e1eb19 [ 711.391122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 711.395371] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 711.397121] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 711.398769] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 711.400396] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 711.402041] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 711.403672] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:31:43 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r2, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) unshare(0x48020200) [ 711.487819] loop5: detected capacity change from 0 to 262144 01:31:43 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xec00, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 711.532505] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:31:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xdc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:31:43 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 22) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 711.589118] FAULT_INJECTION: forcing a failure. [ 711.589118] name failslab, interval 1, probability 0, space 0, times 0 [ 711.591884] CPU: 1 PID: 6465 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 711.593464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.595343] Call Trace: [ 711.595948] dump_stack+0x107/0x167 [ 711.596782] should_fail.cold+0x5/0xa [ 711.597675] ? create_object.isra.0+0x3a/0xa20 [ 711.598737] should_failslab+0x5/0x20 [ 711.599605] kmem_cache_alloc+0x5b/0x310 [ 711.600544] create_object.isra.0+0x3a/0xa20 [ 711.601564] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 711.602724] kmem_cache_alloc+0x159/0x310 [ 711.603686] __d_alloc+0x2a/0x990 [ 711.604482] ? find_held_lock+0x2c/0x110 [ 711.605427] d_alloc_pseudo+0x19/0x70 [ 711.606308] alloc_file_pseudo+0xce/0x250 [ 711.607257] ? trace_hardirqs_on+0x5b/0x180 [ 711.608247] ? alloc_file+0x5a0/0x5a0 [ 711.609150] anon_inode_getfile+0xc8/0x1f0 [ 711.610131] io_uring_setup+0x138b/0x2980 [ 711.611084] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 711.612242] ? wait_for_completion_io+0x270/0x270 [ 711.613384] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 711.614574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 711.615765] do_syscall_64+0x33/0x40 [ 711.616620] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 711.617809] RIP: 0033:0x7febf2e1eb19 [ 711.618669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 711.622829] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 711.624544] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 711.626166] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 711.627805] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 711.629453] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 711.631134] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:31:43 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:31:43 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 23) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:31:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 711.781041] FAULT_INJECTION: forcing a failure. [ 711.781041] name failslab, interval 1, probability 0, space 0, times 0 [ 711.783584] CPU: 0 PID: 6476 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 711.785062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.786858] Call Trace: [ 711.787431] dump_stack+0x107/0x167 [ 711.788219] should_fail.cold+0x5/0xa [ 711.789042] ? __alloc_file+0x21/0x320 [ 711.789892] should_failslab+0x5/0x20 [ 711.790712] kmem_cache_alloc+0x5b/0x310 [ 711.791593] __alloc_file+0x21/0x320 [ 711.792399] alloc_empty_file+0x6d/0x170 [ 711.793294] alloc_file+0x5e/0x5a0 [ 711.794086] alloc_file_pseudo+0x16a/0x250 [ 711.795018] ? alloc_file+0x5a0/0x5a0 [ 711.795867] anon_inode_getfile+0xc8/0x1f0 [ 711.796798] io_uring_setup+0x138b/0x2980 [ 711.797715] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 711.798823] ? wait_for_completion_io+0x270/0x270 [ 711.799898] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 711.801046] ? syscall_enter_from_user_mode+0x1d/0x50 [ 711.802172] do_syscall_64+0x33/0x40 [ 711.802980] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 711.804089] RIP: 0033:0x7febf2e1eb19 [ 711.804894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 711.808827] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 711.810487] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 711.812047] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 711.813613] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 711.815173] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 711.816651] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:31:43 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:31:43 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r2, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) unshare(0x48020200) 01:32:00 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x80000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:00 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 24) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:32:00 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) close_range(r1, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r2, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) unshare(0x48020200) 01:32:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:00 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 728.439119] FAULT_INJECTION: forcing a failure. [ 728.439119] name failslab, interval 1, probability 0, space 0, times 0 [ 728.442304] CPU: 1 PID: 6500 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 728.444057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 728.446193] Call Trace: [ 728.446878] dump_stack+0x107/0x167 [ 728.447814] should_fail.cold+0x5/0xa [ 728.448791] ? create_object.isra.0+0x3a/0xa20 [ 728.449968] should_failslab+0x5/0x20 [ 728.450942] kmem_cache_alloc+0x5b/0x310 01:32:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:32:00 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 728.451987] create_object.isra.0+0x3a/0xa20 [ 728.453456] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 728.454850] kmem_cache_alloc+0x159/0x310 [ 728.455922] __alloc_file+0x21/0x320 [ 728.456881] alloc_empty_file+0x6d/0x170 [ 728.457940] alloc_file+0x5e/0x5a0 [ 728.458860] alloc_file_pseudo+0x16a/0x250 [ 728.460082] ? alloc_file+0x5a0/0x5a0 [ 728.461074] anon_inode_getfile+0xc8/0x1f0 [ 728.462200] io_uring_setup+0x138b/0x2980 [ 728.463279] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 728.464603] ? wait_for_completion_io+0x270/0x270 [ 728.465895] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 728.467258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 728.468592] do_syscall_64+0x33/0x40 [ 728.469597] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 728.470938] RIP: 0033:0x7febf2e1eb19 01:32:00 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 728.471900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 728.476929] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 728.478900] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 728.480775] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 728.482646] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 728.484488] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 728.486249] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 728.508063] loop2: detected capacity change from 0 to 262144 [ 728.516027] loop5: detected capacity change from 0 to 262144 [ 728.537313] loop0: detected capacity change from 0 to 41948160 [ 728.559404] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 728.563386] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:32:15 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:32:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) r1 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r2, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r1, 0x0, r2) unshare(0x48020200) 01:32:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:32:15 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:15 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:32:15 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x2, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:32:15 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 25) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:32:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x500, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 743.260256] loop5: detected capacity change from 0 to 262144 [ 743.275087] loop0: detected capacity change from 0 to 41948160 [ 743.284094] FAULT_INJECTION: forcing a failure. [ 743.284094] name failslab, interval 1, probability 0, space 0, times 0 [ 743.287103] CPU: 0 PID: 6544 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 743.288909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 743.291017] Call Trace: [ 743.291607] dump_stack+0x107/0x167 [ 743.292435] should_fail.cold+0x5/0xa [ 743.293297] ? create_object.isra.0+0x3a/0xa20 [ 743.294326] should_failslab+0x5/0x20 [ 743.295184] kmem_cache_alloc+0x5b/0x310 [ 743.296108] create_object.isra.0+0x3a/0xa20 [ 743.297084] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 743.298221] kmem_cache_alloc+0x159/0x310 [ 743.299125] __alloc_file+0x21/0x320 [ 743.299956] alloc_empty_file+0x6d/0x170 [ 743.300851] alloc_file+0x5e/0x5a0 [ 743.301617] alloc_file_pseudo+0x16a/0x250 [ 743.302550] ? alloc_file+0x5a0/0x5a0 [ 743.303399] anon_inode_getfile+0xc8/0x1f0 [ 743.304341] io_uring_setup+0x138b/0x2980 [ 743.305266] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 743.306383] ? wait_for_completion_io+0x270/0x270 [ 743.307454] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 743.308602] ? syscall_enter_from_user_mode+0x1d/0x50 [ 743.309740] do_syscall_64+0x33/0x40 [ 743.310552] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 743.311668] RIP: 0033:0x7febf2e1eb19 [ 743.312489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 743.316496] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 743.318166] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 743.319706] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 743.321270] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 743.322842] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 743.324392] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 743.332037] loop2: detected capacity change from 0 to 262144 [ 743.344697] loop4: detected capacity change from 0 to 262144 [ 743.359618] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 743.389259] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 743.396886] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 743.410849] EXT4-fs (loop4): get root inode failed [ 743.412077] EXT4-fs (loop4): mount failed 01:32:15 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x600, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:15 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:32:15 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:32:15 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 26) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 743.526624] FAULT_INJECTION: forcing a failure. [ 743.526624] name failslab, interval 1, probability 0, space 0, times 0 [ 743.529243] CPU: 1 PID: 6573 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 743.530743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 743.532574] Call Trace: [ 743.533149] dump_stack+0x107/0x167 [ 743.533948] should_fail.cold+0x5/0xa [ 743.534777] ? create_object.isra.0+0x3a/0xa20 [ 743.535772] should_failslab+0x5/0x20 [ 743.536594] kmem_cache_alloc+0x5b/0x310 [ 743.537473] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 743.538720] create_object.isra.0+0x3a/0xa20 [ 743.539740] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 743.540839] kmem_cache_alloc+0x159/0x310 [ 743.541765] security_file_alloc+0x34/0x170 [ 743.542711] __alloc_file+0xb7/0x320 [ 743.543571] alloc_empty_file+0x6d/0x170 [ 743.544457] alloc_file+0x5e/0x5a0 [ 743.545234] alloc_file_pseudo+0x16a/0x250 [ 743.546162] ? alloc_file+0x5a0/0x5a0 [ 743.546998] anon_inode_getfile+0xc8/0x1f0 [ 743.547924] io_uring_setup+0x138b/0x2980 [ 743.548847] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 743.549955] ? wait_for_completion_io+0x270/0x270 [ 743.551015] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 743.552163] ? syscall_enter_from_user_mode+0x1d/0x50 [ 743.553286] do_syscall_64+0x33/0x40 [ 743.554117] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 743.555242] RIP: 0033:0x7febf2e1eb19 [ 743.556056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 743.560060] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 743.561759] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 743.563302] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 743.564854] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 743.566417] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 743.567966] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:32:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 743.604334] loop2: detected capacity change from 0 to 262144 [ 743.614579] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 01:32:28 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:28 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:32:28 executing program 5: close(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:32:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 756.445066] loop2: detected capacity change from 0 to 262144 01:32:28 executing program 0: chdir(&(0x7f0000000040)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:32:28 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) r1 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r2, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r1, 0x0, r2) unshare(0x48020200) 01:32:28 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x2, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:32:28 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 27) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 756.475327] FAULT_INJECTION: forcing a failure. [ 756.475327] name failslab, interval 1, probability 0, space 0, times 0 [ 756.477776] CPU: 0 PID: 6606 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 756.479216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 756.480956] Call Trace: [ 756.481515] dump_stack+0x107/0x167 [ 756.482298] should_fail.cold+0x5/0xa [ 756.483109] ? io_uring_alloc_task_context+0x99/0x6a0 [ 756.484198] should_failslab+0x5/0x20 [ 756.484998] kmem_cache_alloc_trace+0x55/0x320 [ 756.485953] io_uring_alloc_task_context+0x99/0x6a0 [ 756.486980] ? io_import_iovec+0x1120/0x1120 [ 756.487884] ? lock_downgrade+0x6d0/0x6d0 [ 756.488735] ? do_raw_spin_lock+0x121/0x260 [ 756.489620] ? rwlock_bug.part.0+0x90/0x90 [ 756.490505] __io_uring_add_tctx_node+0x2c6/0x520 [ 756.491499] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 756.492568] ? alloc_fd+0x2e7/0x670 [ 756.493325] io_uring_setup+0x1fbb/0x2980 [ 756.494197] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 756.495254] ? wait_for_completion_io+0x270/0x270 [ 756.496280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 756.497367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 756.498448] do_syscall_64+0x33/0x40 [ 756.499223] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 756.500284] RIP: 0033:0x7febf2e1eb19 [ 756.501059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 756.504910] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 756.506491] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 756.507973] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 756.509455] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 756.510954] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 756.512435] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 756.515104] loop4: detected capacity change from 0 to 262144 [ 756.525905] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 01:32:28 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:32:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x900, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:28 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 756.594546] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 756.606517] EXT4-fs (loop4): get root inode failed [ 756.607761] EXT4-fs (loop4): mount failed 01:32:28 executing program 5: close(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:32:41 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') 01:32:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:41 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:32:41 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 28) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:32:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf00, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:41 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x2, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:32:41 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000740)='q\x1c\xf0\v\xae\xd8]\xd9\xb6Egv<2\x9b\xb6\xc3\b\xea\"\xf2l\xd1\x8ac\xa1\xd8\x964\xdbT/\xa1\'\x1a\x90\t>RS\xc5\'s\xb7Y\xe8\xed\xe8\xfa\xb5+\xdf\x13SB\x1d7O\xac\x04\xf2\x92\x86H\xc1\xb8\xd7\xdb\xc8\xa2)\x86\x04{IcI>\xe9\xb7D\xa5\xa3\xe4\x18\xbd\x8a\x9d#\xcbWM\xbb%G?n\x04\x9e\x00R\x97T\xce\x9b\x97m\xda\x95\x02h~\x7f\xe9C%\x9fn\"6\xdd;X\xcc\xb13\xe6|\xf7\x9a', &(0x7f0000000540)='syz', &(0x7f0000000580)='%!-/\x00', &(0x7f0000000800)='syz\xf69bi\xb4\x8dy=\xbe(\x115\xce>\xae\xc3\x8c\x9a\x9b\x10\x1cO\xca\x95\xfd3\\\t\x00\x00\x00\xcf(\\\xca\xac\xd8\xc5Y\xf1{\xc8\xdd\x8b\x01\xeen\xa1\x06\x97\xc3\xf6\xd9\xfdE;\xeeb\xe32r\x13@\xde\xb2\xb3\x1c\xa4\xf9b\'\x03\x00w!H\x1b%\xce\xd9\x91D\xea\x94\x93\xbd\x0e\x1b\xec\xdf\x96p\x00\xb5)\x81\xfb\x8ao\x86\x8fK\x8e\'o\xfb\xd0\xab\"7_\xbc\x1e1\xef\x1f\x00\xdb\xc1br\xabW0\x94:\xa3M\x80\x8e\xbdlq\xdd\x06^\x7f\xed\xb9\xfd\xca}X\xae\xe8\xa61\xf8\xa41\xc6\xe8\x1a\x7f\x19\x99j\x8f\x01\x02\x83$\x92\x95g\xd2$\xc7V\x9f\xa7\x7f\xd8\xc7E4E$\x97\xcf*\x01\x94b-\x00\x00\x00\x8b\xfe\x9a5\x92|hiI\xff+\xd6\x82R\xb0\f\xbfG\xf7\x16\xf281\x7f\xb2\x97\xa5\x01\x8d\xb0\xa4\x85*\x1b\xf3j\x8b\x99m|\xaeA\xf67\x05\xea\x8a\x00j\xb29A`\x01>(!p\xa8\xf2\x06\x8e\"\xefG(h}t$\xcc\xff\x1c\xd3\x8cbWI$\xc3\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)='&\'&)\x00'], &(0x7f0000000700)=[&(0x7f00000006c0)='-\x00'], 0x1000) r1 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r2, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r1, 0x0, r2) unshare(0x48020200) 01:32:41 executing program 5: close(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 769.251267] loop2: detected capacity change from 0 to 262144 [ 769.263542] FAULT_INJECTION: forcing a failure. [ 769.263542] name failslab, interval 1, probability 0, space 0, times 0 [ 769.266462] CPU: 0 PID: 6651 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 769.267665] loop4: detected capacity change from 0 to 262144 [ 769.268179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 769.268194] Call Trace: [ 769.271938] dump_stack+0x107/0x167 [ 769.272730] should_fail.cold+0x5/0xa [ 769.273524] ? create_object.isra.0+0x3a/0xa20 [ 769.274529] should_failslab+0x5/0x20 [ 769.275377] kmem_cache_alloc+0x5b/0x310 [ 769.276287] create_object.isra.0+0x3a/0xa20 [ 769.277276] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 769.278380] kmem_cache_alloc_trace+0x151/0x320 [ 769.279406] io_uring_alloc_task_context+0x99/0x6a0 [ 769.280478] ? io_import_iovec+0x1120/0x1120 [ 769.281428] ? lock_downgrade+0x6d0/0x6d0 [ 769.282319] ? do_raw_spin_lock+0x121/0x260 [ 769.283233] ? rwlock_bug.part.0+0x90/0x90 [ 769.284139] __io_uring_add_tctx_node+0x2c6/0x520 [ 769.285166] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 769.286312] ? alloc_fd+0x2e7/0x670 [ 769.287082] io_uring_setup+0x1fbb/0x2980 [ 769.287965] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 769.289016] ? wait_for_completion_io+0x270/0x270 [ 769.290057] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 769.291159] ? syscall_enter_from_user_mode+0x1d/0x50 [ 769.292248] do_syscall_64+0x33/0x40 [ 769.293037] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 769.294104] RIP: 0033:0x7febf2e1eb19 [ 769.294900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 769.298771] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 769.300381] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 769.301910] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 769.303416] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 769.304936] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 769.306466] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:32:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x8100, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xdc00, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 769.404175] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 769.407489] EXT4-fs (loop4): get root inode failed [ 769.408612] EXT4-fs (loop4): mount failed 01:32:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:41 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 29) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 769.461390] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 01:32:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:32:41 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') [ 769.538676] FAULT_INJECTION: forcing a failure. [ 769.538676] name failslab, interval 1, probability 0, space 0, times 0 [ 769.541250] CPU: 1 PID: 6679 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 769.542750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 769.544553] Call Trace: [ 769.545132] dump_stack+0x107/0x167 [ 769.545934] should_fail.cold+0x5/0xa [ 769.546799] ? create_object.isra.0+0x3a/0xa20 [ 769.547824] should_failslab+0x5/0x20 [ 769.548683] kmem_cache_alloc+0x5b/0x310 [ 769.549583] create_object.isra.0+0x3a/0xa20 [ 769.550554] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 769.551664] kmem_cache_alloc_trace+0x151/0x320 [ 769.552662] io_uring_alloc_task_context+0x99/0x6a0 [ 769.553736] ? io_import_iovec+0x1120/0x1120 [ 769.554684] ? lock_downgrade+0x6d0/0x6d0 [ 769.555572] ? do_raw_spin_lock+0x121/0x260 [ 769.556494] ? rwlock_bug.part.0+0x90/0x90 [ 769.557399] __io_uring_add_tctx_node+0x2c6/0x520 [ 769.558446] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 769.559595] ? alloc_fd+0x2e7/0x670 [ 769.560392] io_uring_setup+0x1fbb/0x2980 [ 769.561288] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 769.562378] ? wait_for_completion_io+0x270/0x270 [ 769.563429] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 769.564555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 769.565675] do_syscall_64+0x33/0x40 [ 769.566481] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 769.567579] RIP: 0033:0x7febf2e1eb19 [ 769.568375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 769.572337] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 769.573982] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 769.575513] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 769.577051] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 769.578591] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 769.580140] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 769.601321] loop5: detected capacity change from 0 to 262144 [ 769.619503] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:32:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:41 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:32:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:41 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:32:41 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 30) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 769.685191] loop2: detected capacity change from 0 to 262144 [ 769.746143] loop4: detected capacity change from 0 to 262144 [ 769.750302] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 769.776256] FAULT_INJECTION: forcing a failure. [ 769.776256] name failslab, interval 1, probability 0, space 0, times 0 [ 769.778744] CPU: 0 PID: 6704 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 769.780163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 769.781910] Call Trace: [ 769.782473] dump_stack+0x107/0x167 [ 769.783233] should_fail.cold+0x5/0xa [ 769.784027] ? create_object.isra.0+0x3a/0xa20 [ 769.784972] should_failslab+0x5/0x20 [ 769.785764] kmem_cache_alloc+0x5b/0x310 [ 769.786616] create_object.isra.0+0x3a/0xa20 [ 769.787531] kmemleak_alloc_percpu+0xa0/0x100 [ 769.788467] pcpu_alloc+0x4e2/0x1240 [ 769.789254] __percpu_counter_init+0x10d/0x2d0 [ 769.790237] io_uring_alloc_task_context+0xcc/0x6a0 [ 769.791282] ? io_import_iovec+0x1120/0x1120 [ 769.792205] ? lock_downgrade+0x6d0/0x6d0 [ 769.793072] ? do_raw_spin_lock+0x121/0x260 [ 769.793968] ? rwlock_bug.part.0+0x90/0x90 [ 769.794850] __io_uring_add_tctx_node+0x2c6/0x520 [ 769.795847] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 769.796941] ? alloc_fd+0x2e7/0x670 [ 769.797707] io_uring_setup+0x1fbb/0x2980 [ 769.798585] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 769.799643] ? wait_for_completion_io+0x270/0x270 [ 769.800671] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 769.801768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 769.802845] do_syscall_64+0x33/0x40 [ 769.803621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 769.804682] RIP: 0033:0x7febf2e1eb19 [ 769.805439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 769.809287] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 769.810873] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 769.812351] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 769.813828] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 769.815323] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 769.816804] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 769.885188] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 769.888989] EXT4-fs (loop4): get root inode failed [ 769.890071] EXT4-fs (loop4): mount failed 01:32:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:32:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x80000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:56 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:32:56 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:32:56 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:32:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x7000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:56 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 31) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:32:56 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') [ 784.635087] loop5: detected capacity change from 0 to 262144 [ 784.644310] FAULT_INJECTION: forcing a failure. [ 784.644310] name failslab, interval 1, probability 0, space 0, times 0 [ 784.646965] CPU: 1 PID: 6737 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 784.648412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 784.650171] Call Trace: [ 784.650739] dump_stack+0x107/0x167 [ 784.651511] should_fail.cold+0x5/0xa [ 784.652322] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 784.653423] should_failslab+0x5/0x20 [ 784.654240] kmem_cache_alloc_trace+0x55/0x320 [ 784.655205] io_uring_alloc_task_context+0x4a3/0x6a0 [ 784.656272] ? io_import_iovec+0x1120/0x1120 [ 784.657208] ? lock_downgrade+0x6d0/0x6d0 [ 784.658076] ? do_raw_spin_lock+0x121/0x260 [ 784.658992] ? rwlock_bug.part.0+0x90/0x90 [ 784.659892] __io_uring_add_tctx_node+0x2c6/0x520 [ 784.660913] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 784.662020] ? alloc_fd+0x2e7/0x670 [ 784.662811] io_uring_setup+0x1fbb/0x2980 [ 784.663705] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 784.664777] ? wait_for_completion_io+0x270/0x270 [ 784.665820] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 784.666954] ? syscall_enter_from_user_mode+0x1d/0x50 [ 784.668060] do_syscall_64+0x33/0x40 [ 784.668855] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 784.669951] RIP: 0033:0x7febf2e1eb19 [ 784.670752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 784.674666] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 784.676280] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 784.677805] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 784.679333] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 784.680847] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 784.682379] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:32:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:32:56 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 784.696893] loop2: detected capacity change from 0 to 262144 [ 784.708353] loop4: detected capacity change from 0 to 262144 01:32:56 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 32) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 784.770620] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated 01:32:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 784.788941] EXT4-fs (loop4): get root inode failed [ 784.790279] EXT4-fs (loop4): mount failed 01:32:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 784.838375] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 784.863834] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 784.867918] FAULT_INJECTION: forcing a failure. [ 784.867918] name failslab, interval 1, probability 0, space 0, times 0 [ 784.870842] CPU: 0 PID: 6763 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 784.872484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 784.874481] Call Trace: [ 784.875139] dump_stack+0x107/0x167 [ 784.876019] should_fail.cold+0x5/0xa [ 784.876935] ? create_object.isra.0+0x3a/0xa20 [ 784.878019] should_failslab+0x5/0x20 [ 784.878951] kmem_cache_alloc+0x5b/0x310 [ 784.879923] create_object.isra.0+0x3a/0xa20 [ 784.880963] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 784.882186] kmem_cache_alloc_trace+0x151/0x320 [ 784.883307] io_uring_alloc_task_context+0x4a3/0x6a0 [ 784.884512] ? io_import_iovec+0x1120/0x1120 [ 784.885559] ? lock_downgrade+0x6d0/0x6d0 [ 784.886687] ? do_raw_spin_lock+0x121/0x260 [ 784.887934] ? rwlock_bug.part.0+0x90/0x90 [ 784.889148] __io_uring_add_tctx_node+0x2c6/0x520 [ 784.890531] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 784.892006] ? alloc_fd+0x2e7/0x670 [ 784.892886] io_uring_setup+0x1fbb/0x2980 [ 784.893870] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 784.895069] ? wait_for_completion_io+0x270/0x270 [ 784.896234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 784.897466] ? syscall_enter_from_user_mode+0x1d/0x50 [ 784.898702] do_syscall_64+0x33/0x40 [ 784.899571] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 784.900793] RIP: 0033:0x7febf2e1eb19 [ 784.901681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 784.906014] RSP: 002b:00007febf0373108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 784.907808] RAX: ffffffffffffffda RBX: 00007febf2f32020 RCX: 00007febf2e1eb19 [ 784.909468] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 784.911170] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 784.912841] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 784.914519] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:32:56 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:32:56 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 785.066220] loop2: detected capacity change from 0 to 262144 [ 785.084286] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 01:33:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:33:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:33:09 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:33:09 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:33:09 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:33:09 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 33) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:33:09 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:33:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 798.012403] loop5: detected capacity change from 0 to 262144 [ 798.031907] FAULT_INJECTION: forcing a failure. [ 798.031907] name failslab, interval 1, probability 0, space 0, times 0 [ 798.034355] CPU: 1 PID: 6789 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 798.035812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 798.037577] Call Trace: [ 798.038138] dump_stack+0x107/0x167 [ 798.038936] should_fail.cold+0x5/0xa [ 798.039748] ? io_wq_create+0xeb/0xc00 [ 798.040572] should_failslab+0x5/0x20 [ 798.041380] __kmalloc+0x72/0x390 [ 798.042130] io_wq_create+0xeb/0xc00 [ 798.042960] io_uring_alloc_task_context+0x1f1/0x6a0 [ 798.044047] ? io_import_iovec+0x1120/0x1120 [ 798.044988] ? io_apoll_task_func+0x2d0/0x2d0 [ 798.045933] ? __io_req_find_next+0x300/0x300 [ 798.046922] ? do_raw_spin_lock+0x121/0x260 [ 798.047847] ? rwlock_bug.part.0+0x90/0x90 [ 798.048749] __io_uring_add_tctx_node+0x2c6/0x520 [ 798.049773] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 798.050927] ? alloc_fd+0x2e7/0x670 [ 798.051719] io_uring_setup+0x1fbb/0x2980 [ 798.052608] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 798.053679] ? wait_for_completion_io+0x270/0x270 [ 798.054759] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 798.055881] ? syscall_enter_from_user_mode+0x1d/0x50 [ 798.056975] do_syscall_64+0x33/0x40 [ 798.057762] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 798.058876] RIP: 0033:0x7febf2e1eb19 [ 798.059668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 798.063612] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 798.065248] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 798.066801] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 798.068335] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 798.069869] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 798.071419] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 798.094426] loop2: detected capacity change from 0 to 262144 [ 798.130823] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 798.130910] loop4: detected capacity change from 0 to 262144 [ 798.154717] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 798.162457] perf: interrupt took too long (3211 > 3188), lowering kernel.perf_event_max_sample_rate to 62000 [ 798.165414] perf: interrupt took too long (5120 > 5096), lowering kernel.perf_event_max_sample_rate to 39000 [ 798.167920] perf: interrupt took too long (6435 > 6400), lowering kernel.perf_event_max_sample_rate to 31000 [ 798.170886] perf: interrupt took too long (8095 > 8043), lowering kernel.perf_event_max_sample_rate to 24000 [ 798.176965] perf: interrupt took too long (10140 > 10118), lowering kernel.perf_event_max_sample_rate to 19000 [ 798.186146] perf: interrupt took too long (12686 > 12675), lowering kernel.perf_event_max_sample_rate to 15000 [ 798.228028] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated 01:33:10 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x81000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:33:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 798.242956] EXT4-fs (loop4): get root inode failed [ 798.244355] EXT4-fs (loop4): mount failed 01:33:10 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100), 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:33:10 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:33:10 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:33:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:33:10 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:33:10 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 34) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 798.456048] loop5: detected capacity change from 0 to 262144 01:33:10 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 798.468937] loop4: detected capacity change from 0 to 262144 01:33:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 798.515597] FAULT_INJECTION: forcing a failure. [ 798.515597] name failslab, interval 1, probability 0, space 0, times 0 [ 798.517949] CPU: 0 PID: 6841 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 798.519370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 798.521093] Call Trace: [ 798.521647] dump_stack+0x107/0x167 [ 798.522409] should_fail.cold+0x5/0xa [ 798.523191] ? create_object.isra.0+0x3a/0xa20 [ 798.524142] should_failslab+0x5/0x20 [ 798.524933] kmem_cache_alloc+0x5b/0x310 [ 798.525770] create_object.isra.0+0x3a/0xa20 [ 798.526682] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 798.527728] __kmalloc+0x16e/0x390 [ 798.528463] io_wq_create+0xeb/0xc00 [ 798.529234] io_uring_alloc_task_context+0x1f1/0x6a0 [ 798.530344] ? io_import_iovec+0x1120/0x1120 [ 798.531273] ? io_apoll_task_func+0x2d0/0x2d0 [ 798.532196] ? __io_req_find_next+0x300/0x300 [ 798.533114] ? do_raw_spin_lock+0x121/0x260 [ 798.533998] ? rwlock_bug.part.0+0x90/0x90 [ 798.534882] __io_uring_add_tctx_node+0x2c6/0x520 [ 798.535884] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 798.536953] ? alloc_fd+0x2e7/0x670 [ 798.537714] io_uring_setup+0x1fbb/0x2980 [ 798.537806] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 798.538587] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 798.538603] ? wait_for_completion_io+0x270/0x270 [ 798.538641] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 798.541879] EXT4-fs (loop4): get root inode failed [ 798.542500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 798.542523] do_syscall_64+0x33/0x40 [ 798.543577] EXT4-fs (loop4): mount failed [ 798.544582] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 798.544594] RIP: 0033:0x7febf2e1eb19 [ 798.544610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 798.544625] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 798.555551] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 798.557085] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 798.558606] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 798.560126] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 798.561625] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 798.571780] loop2: detected capacity change from 0 to 262144 01:33:10 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(0xffffffffffffffff, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r2, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r1, 0x0, r2) unshare(0x48020200) 01:33:10 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 798.623568] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 01:33:10 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xec000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:33:10 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 35) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:33:10 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100), 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:33:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 798.825451] loop4: detected capacity change from 0 to 262144 [ 798.826613] FAULT_INJECTION: forcing a failure. [ 798.826613] name failslab, interval 1, probability 0, space 0, times 0 [ 798.829373] CPU: 0 PID: 6862 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 798.830993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 798.832945] Call Trace: [ 798.833577] dump_stack+0x107/0x167 [ 798.834449] should_fail.cold+0x5/0xa [ 798.835348] ? io_wq_create+0x6ef/0xc00 [ 798.836283] should_failslab+0x5/0x20 [ 798.837193] kmem_cache_alloc_node_trace+0x59/0x340 [ 798.838426] io_wq_create+0x6ef/0xc00 [ 798.839346] io_uring_alloc_task_context+0x1f1/0x6a0 [ 798.840549] ? io_import_iovec+0x1120/0x1120 [ 798.841598] ? io_apoll_task_func+0x2d0/0x2d0 [ 798.842663] ? __io_req_find_next+0x300/0x300 [ 798.843723] ? do_raw_spin_lock+0x121/0x260 [ 798.844748] ? rwlock_bug.part.0+0x90/0x90 [ 798.845749] __io_uring_add_tctx_node+0x2c6/0x520 [ 798.846916] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 798.848160] ? alloc_fd+0x2e7/0x670 [ 798.849037] io_uring_setup+0x1fbb/0x2980 [ 798.850034] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 798.851215] ? wait_for_completion_io+0x270/0x270 [ 798.852377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 798.853616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 798.854834] do_syscall_64+0x33/0x40 [ 798.855709] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 798.856918] RIP: 0033:0x7febf2e1eb19 [ 798.857797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 798.862103] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 798.863896] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 798.865561] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 798.867236] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 798.868940] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 798.870683] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:33:10 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:33:10 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:33:10 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 798.887332] perf: interrupt took too long (15866 > 15857), lowering kernel.perf_event_max_sample_rate to 12000 [ 798.917302] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 798.921051] EXT4-fs (loop4): get root inode failed [ 798.922107] EXT4-fs (loop4): mount failed 01:33:10 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 36) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 798.969041] loop5: detected capacity change from 0 to 262144 [ 799.005995] loop2: detected capacity change from 0 to 262144 [ 799.033447] FAULT_INJECTION: forcing a failure. [ 799.033447] name failslab, interval 1, probability 0, space 0, times 0 [ 799.035406] CPU: 1 PID: 6881 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 799.036576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 799.038004] Call Trace: [ 799.038490] dump_stack+0x107/0x167 [ 799.039120] should_fail.cold+0x5/0xa [ 799.039774] ? create_object.isra.0+0x3a/0xa20 [ 799.040558] should_failslab+0x5/0x20 [ 799.041211] kmem_cache_alloc+0x5b/0x310 [ 799.041914] ? io_wq_create+0x114/0xc00 [ 799.042614] create_object.isra.0+0x3a/0xa20 [ 799.043360] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 799.044237] kmem_cache_alloc_node_trace+0x16d/0x340 [ 799.045103] io_wq_create+0x6ef/0xc00 [ 799.045756] io_uring_alloc_task_context+0x1f1/0x6a0 [ 799.046648] ? io_import_iovec+0x1120/0x1120 [ 799.047396] ? io_apoll_task_func+0x2d0/0x2d0 [ 799.048150] ? __io_req_find_next+0x300/0x300 [ 799.048911] ? do_raw_spin_lock+0x121/0x260 [ 799.049645] ? rwlock_bug.part.0+0x90/0x90 [ 799.050390] __io_uring_add_tctx_node+0x2c6/0x520 [ 799.051216] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 799.052117] ? alloc_fd+0x2e7/0x670 [ 799.052759] io_uring_setup+0x1fbb/0x2980 [ 799.053468] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 799.054348] ? wait_for_completion_io+0x270/0x270 [ 799.055206] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 799.056106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 799.056976] do_syscall_64+0x33/0x40 [ 799.057617] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 799.058511] RIP: 0033:0x7febf2e1eb19 [ 799.059145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 799.062226] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 799.063528] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 799.064716] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 799.065917] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 799.067144] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 799.068343] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 799.087572] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 01:33:24 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100), 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:33:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x7000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:33:24 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:33:24 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:33:24 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 37) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:33:24 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', 0x0, 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:33:24 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xfcffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:33:24 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(0xffffffffffffffff, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r2, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r1, 0x0, r2) unshare(0x48020200) 01:33:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 812.166332] FAULT_INJECTION: forcing a failure. [ 812.166332] name failslab, interval 1, probability 0, space 0, times 0 [ 812.168757] CPU: 0 PID: 6897 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 812.170209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 812.171979] Call Trace: [ 812.172548] dump_stack+0x107/0x167 [ 812.173325] should_fail.cold+0x5/0xa [ 812.174141] ? __io_uring_add_tctx_node+0x15c/0x520 [ 812.175210] should_failslab+0x5/0x20 [ 812.176013] kmem_cache_alloc_trace+0x55/0x320 [ 812.177002] __io_uring_add_tctx_node+0x15c/0x520 [ 812.178043] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 812.179157] ? alloc_fd+0x2e7/0x670 [ 812.179938] io_uring_setup+0x1fbb/0x2980 [ 812.180821] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 812.181891] ? wait_for_completion_io+0x270/0x270 [ 812.182927] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 812.184027] ? syscall_enter_from_user_mode+0x1d/0x50 [ 812.185114] do_syscall_64+0x33/0x40 [ 812.185893] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 812.186981] RIP: 0033:0x7febf2e1eb19 [ 812.187761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 812.191654] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 812.193253] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 812.194757] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 812.196269] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 812.197768] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 812.199269] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 812.215991] loop5: detected capacity change from 0 to 262144 [ 812.245164] loop2: detected capacity change from 0 to 262144 [ 812.250837] loop4: detected capacity change from 0 to 262144 01:33:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 812.281334] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 812.284486] EXT4-fs (loop4): get root inode failed [ 812.285606] EXT4-fs (loop4): mount failed 01:33:24 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:33:24 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 38) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 812.341104] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 01:33:24 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 812.409599] FAULT_INJECTION: forcing a failure. [ 812.409599] name failslab, interval 1, probability 0, space 0, times 0 [ 812.412038] CPU: 1 PID: 6928 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 812.413485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 812.415241] Call Trace: [ 812.415803] dump_stack+0x107/0x167 [ 812.416563] should_fail.cold+0x5/0xa [ 812.417370] ? create_object.isra.0+0x3a/0xa20 [ 812.418322] should_failslab+0x5/0x20 [ 812.419142] kmem_cache_alloc+0x5b/0x310 [ 812.419997] create_object.isra.0+0x3a/0xa20 [ 812.420922] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 812.422006] kmem_cache_alloc_trace+0x151/0x320 [ 812.423029] __io_uring_add_tctx_node+0x15c/0x520 [ 812.424043] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 812.425141] ? alloc_fd+0x2e7/0x670 [ 812.425917] io_uring_setup+0x1fbb/0x2980 [ 812.426807] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 812.427875] ? wait_for_completion_io+0x270/0x270 [ 812.428914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 812.430027] ? syscall_enter_from_user_mode+0x1d/0x50 [ 812.431134] do_syscall_64+0x33/0x40 [ 812.431921] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 812.433010] RIP: 0033:0x7febf2e1eb19 [ 812.433793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 812.437661] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 812.439273] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 812.440782] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 812.442281] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 812.443794] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 812.445302] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:33:36 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 39) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:33:36 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:33:36 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0", 0x11, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:33:36 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(0xffffffffffffffff, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r2, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r1, 0x0, r2) unshare(0x48020200) 01:33:36 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', 0x0, 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:33:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:33:36 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:33:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x81000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:33:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 824.924813] loop5: detected capacity change from 0 to 262144 [ 824.929224] FAULT_INJECTION: forcing a failure. [ 824.929224] name failslab, interval 1, probability 0, space 0, times 0 [ 824.931855] CPU: 0 PID: 6940 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 824.933284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 824.935037] Call Trace: [ 824.935593] dump_stack+0x107/0x167 [ 824.936359] should_fail.cold+0x5/0xa [ 824.937159] ? xas_alloc+0x336/0x440 [ 824.937937] should_failslab+0x5/0x20 [ 824.938755] kmem_cache_alloc+0x5b/0x310 [ 824.939616] ? stack_trace_consume_entry+0x160/0x160 [ 824.940685] xas_alloc+0x336/0x440 [ 824.941441] xas_create+0x34a/0x10d0 [ 824.942235] ? kernel_text_address+0xf2/0x120 [ 824.943191] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 824.944299] xas_store+0x8c/0x1c40 [ 824.945063] __xa_store+0x164/0x2d0 [ 824.945830] ? xa_delete_node+0x280/0x280 [ 824.946729] ? trace_hardirqs_on+0x5b/0x180 [ 824.947639] xa_store+0x31/0x50 [ 824.948336] __io_uring_add_tctx_node+0x1cf/0x520 [ 824.949359] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 824.950459] ? alloc_fd+0x2e7/0x670 [ 824.951238] io_uring_setup+0x1fbb/0x2980 [ 824.952124] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 824.953186] ? wait_for_completion_io+0x270/0x270 [ 824.954220] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 824.955322] ? syscall_enter_from_user_mode+0x1d/0x50 [ 824.956412] do_syscall_64+0x33/0x40 [ 824.957195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 824.958261] RIP: 0033:0x7febf2e1eb19 [ 824.959044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 824.962914] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 824.964507] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 824.966003] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 824.967507] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 824.969019] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 824.970511] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 824.981420] loop4: detected capacity change from 0 to 262144 01:33:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:33:37 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:33:37 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:33:37 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 40) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 825.090255] loop2: detected capacity change from 0 to 262144 [ 825.109748] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 825.111458] EXT4-fs (loop4): get root inode failed [ 825.112059] EXT4-fs (loop4): mount failed [ 825.136266] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 825.155923] FAULT_INJECTION: forcing a failure. [ 825.155923] name failslab, interval 1, probability 0, space 0, times 0 [ 825.157329] CPU: 1 PID: 6980 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 825.158126] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 825.159107] Call Trace: [ 825.159429] dump_stack+0x107/0x167 [ 825.159867] should_fail.cold+0x5/0xa [ 825.160323] ? create_object.isra.0+0x3a/0xa20 [ 825.160860] should_failslab+0x5/0x20 [ 825.161313] kmem_cache_alloc+0x5b/0x310 [ 825.161802] create_object.isra.0+0x3a/0xa20 [ 825.162320] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 825.162932] kmem_cache_alloc+0x159/0x310 [ 825.163433] xas_alloc+0x336/0x440 [ 825.163853] xas_create+0x34a/0x10d0 [ 825.164281] ? kernel_text_address+0xf2/0x120 [ 825.164798] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 825.165407] xas_store+0x8c/0x1c40 [ 825.165822] __xa_store+0x164/0x2d0 [ 825.166238] ? xa_delete_node+0x280/0x280 [ 825.166725] ? trace_hardirqs_on+0x5b/0x180 [ 825.167221] xa_store+0x31/0x50 [ 825.167598] __io_uring_add_tctx_node+0x1cf/0x520 [ 825.168154] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 825.168748] ? alloc_fd+0x2e7/0x670 [ 825.169170] io_uring_setup+0x1fbb/0x2980 [ 825.169644] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 825.170223] ? wait_for_completion_io+0x270/0x270 [ 825.170792] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 825.171386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 825.171972] do_syscall_64+0x33/0x40 [ 825.172398] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 825.172982] RIP: 0033:0x7febf2e1eb19 [ 825.173408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 825.175521] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 825.176393] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 825.177203] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 825.178012] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 825.178835] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 825.179643] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:33:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r2, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r1, 0x0, r2) unshare(0x48020200) 01:33:51 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 41) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:33:51 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:33:51 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:33:51 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', 0x0, 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:33:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xdc000000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:33:51 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xfffffffc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:33:51 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0", 0x11, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 839.861359] FAULT_INJECTION: forcing a failure. [ 839.861359] name failslab, interval 1, probability 0, space 0, times 0 [ 839.864133] CPU: 1 PID: 6997 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 839.865781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 839.867780] Call Trace: [ 839.868412] dump_stack+0x107/0x167 [ 839.869284] should_fail.cold+0x5/0xa [ 839.870210] ? create_object.isra.0+0x3a/0xa20 [ 839.871314] should_failslab+0x5/0x20 [ 839.872244] kmem_cache_alloc+0x5b/0x310 [ 839.873220] create_object.isra.0+0x3a/0xa20 [ 839.874270] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 839.875497] kmem_cache_alloc+0x159/0x310 [ 839.876496] xas_alloc+0x336/0x440 [ 839.877340] xas_create+0x34a/0x10d0 [ 839.878229] ? kernel_text_address+0xf2/0x120 [ 839.879316] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 839.880566] xas_store+0x8c/0x1c40 [ 839.881430] __xa_store+0x164/0x2d0 [ 839.882298] ? xa_delete_node+0x280/0x280 [ 839.883292] ? trace_hardirqs_on+0x5b/0x180 [ 839.884329] xa_store+0x31/0x50 [ 839.885117] __io_uring_add_tctx_node+0x1cf/0x520 [ 839.886264] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 839.887525] ? alloc_fd+0x2e7/0x670 [ 839.888399] io_uring_setup+0x1fbb/0x2980 [ 839.889404] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 839.890602] ? wait_for_completion_io+0x270/0x270 [ 839.891783] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 839.893030] ? syscall_enter_from_user_mode+0x1d/0x50 [ 839.894264] do_syscall_64+0x33/0x40 [ 839.895164] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 839.896386] RIP: 0033:0x7febf2e1eb19 [ 839.897275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 839.901644] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 839.903453] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 839.905131] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 839.906823] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 839.908526] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 839.910234] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 839.917955] loop4: detected capacity change from 0 to 262144 [ 839.921550] loop2: detected capacity change from 0 to 262144 [ 839.933290] loop5: detected capacity change from 0 to 262144 [ 839.961242] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 839.968380] EXT4-fs (loop4): get root inode failed [ 839.969782] EXT4-fs (loop4): mount failed [ 839.979922] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 01:34:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:34:08 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r2, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r1, 0x0, r2) unshare(0x48020200) 01:34:08 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:08 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:34:08 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 42) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:34:08 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0", 0x11, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 856.086655] loop2: detected capacity change from 0 to 262144 [ 856.127102] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 856.129961] loop4: detected capacity change from 0 to 262144 01:34:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 856.140054] loop5: detected capacity change from 0 to 16896 [ 856.144147] FAULT_INJECTION: forcing a failure. [ 856.144147] name failslab, interval 1, probability 0, space 0, times 0 [ 856.146506] CPU: 1 PID: 7044 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 856.147946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 856.149674] Call Trace: [ 856.150228] dump_stack+0x107/0x167 [ 856.151004] should_fail.cold+0x5/0xa [ 856.151801] ? create_object.isra.0+0x3a/0xa20 [ 856.152747] should_failslab+0x5/0x20 [ 856.153532] kmem_cache_alloc+0x5b/0x310 [ 856.154376] ? mark_held_locks+0x9e/0xe0 [ 856.155282] create_object.isra.0+0x3a/0xa20 [ 856.156196] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 856.157458] kmem_cache_alloc+0x159/0x310 [ 856.158550] xas_alloc+0x336/0x440 [ 856.159451] xas_create+0x34a/0x10d0 [ 856.160258] ? kernel_text_address+0xf2/0x120 [ 856.161219] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 856.162330] xas_store+0x8c/0x1c40 [ 856.163124] __xa_store+0x164/0x2d0 [ 856.163896] ? xa_delete_node+0x280/0x280 [ 856.164787] ? trace_hardirqs_on+0x5b/0x180 [ 856.165701] xa_store+0x31/0x50 [ 856.166389] __io_uring_add_tctx_node+0x1cf/0x520 [ 856.167498] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 856.168617] ? alloc_fd+0x2e7/0x670 [ 856.169386] io_uring_setup+0x1fbb/0x2980 [ 856.170272] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 856.171403] ? wait_for_completion_io+0x270/0x270 [ 856.172457] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 856.173560] ? syscall_enter_from_user_mode+0x1d/0x50 [ 856.174666] do_syscall_64+0x33/0x40 [ 856.175516] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 856.176622] RIP: 0033:0x7febf2e1eb19 [ 856.177405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 856.181402] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 856.183050] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 856.184572] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 856.186109] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 856.187714] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 856.189238] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 856.215387] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (8 blocks) 01:34:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xfcffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 856.229748] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 856.242809] EXT4-fs (loop4): get root inode failed [ 856.243984] EXT4-fs (loop4): mount failed 01:34:08 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:08 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000", 0x1a, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:08 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:34:08 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:34:08 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 43) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:34:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r2, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r1, 0x0, r2) unshare(0x48020200) [ 856.380220] loop5: detected capacity change from 0 to 16896 01:34:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 856.452118] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (8 blocks) [ 856.510176] loop4: detected capacity change from 0 to 262144 [ 856.513944] FAULT_INJECTION: forcing a failure. [ 856.513944] name failslab, interval 1, probability 0, space 0, times 0 [ 856.516487] CPU: 1 PID: 7079 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 856.518026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 856.519908] Call Trace: [ 856.520505] dump_stack+0x107/0x167 [ 856.521330] should_fail.cold+0x5/0xa [ 856.522191] ? xas_alloc+0x336/0x440 [ 856.523039] should_failslab+0x5/0x20 [ 856.523894] kmem_cache_alloc+0x5b/0x310 [ 856.524818] xas_alloc+0x336/0x440 [ 856.525632] xas_create+0x34a/0x10d0 [ 856.526486] ? kernel_text_address+0xf2/0x120 [ 856.527509] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 856.528678] xas_store+0x8c/0x1c40 [ 856.529502] __xa_store+0x164/0x2d0 [ 856.530352] ? xa_delete_node+0x280/0x280 [ 856.531325] ? trace_hardirqs_on+0x5b/0x180 [ 856.532325] xa_store+0x31/0x50 [ 856.533077] __io_uring_add_tctx_node+0x1cf/0x520 [ 856.534178] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 856.535385] ? alloc_fd+0x2e7/0x670 [ 856.536233] io_uring_setup+0x1fbb/0x2980 [ 856.537193] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 856.538351] ? wait_for_completion_io+0x270/0x270 [ 856.539411] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 856.540067] ? syscall_enter_from_user_mode+0x1d/0x50 [ 856.540704] do_syscall_64+0x33/0x40 [ 856.541163] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 856.541799] RIP: 0033:0x7febf2e1eb19 [ 856.542264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 856.544535] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 856.545480] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 856.546365] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 856.547248] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 856.548120] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 856.548995] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 856.559441] loop2: detected capacity change from 0 to 262144 [ 856.640332] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 856.655199] EXT4-fs (loop4): get root inode failed [ 856.656587] EXT4-fs (loop4): mount failed [ 856.672518] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 01:34:24 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1b, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:34:24 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:24 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:34:24 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000", 0x1a, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:34:24 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:34:24 executing program 2: close(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:24 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 44) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 872.299167] loop5: detected capacity change from 0 to 16896 [ 872.313379] FAULT_INJECTION: forcing a failure. [ 872.313379] name failslab, interval 1, probability 0, space 0, times 0 [ 872.315939] CPU: 1 PID: 7110 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 872.317398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 872.319160] Call Trace: [ 872.319730] dump_stack+0x107/0x167 [ 872.320510] should_fail.cold+0x5/0xa [ 872.321334] ? create_object.isra.0+0x3a/0xa20 [ 872.322307] should_failslab+0x5/0x20 [ 872.323115] kmem_cache_alloc+0x5b/0x310 [ 872.323985] ? mark_held_locks+0x9e/0xe0 [ 872.324831] create_object.isra.0+0x3a/0xa20 [ 872.325743] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 872.326808] kmem_cache_alloc+0x159/0x310 [ 872.327701] xas_alloc+0x336/0x440 [ 872.328447] xas_create+0x34a/0x10d0 [ 872.329242] ? kernel_text_address+0xf2/0x120 [ 872.330180] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 872.331308] xas_store+0x8c/0x1c40 [ 872.332062] __xa_store+0x164/0x2d0 [ 872.332822] ? xa_delete_node+0x280/0x280 [ 872.333717] ? trace_hardirqs_on+0x5b/0x180 [ 872.334627] xa_store+0x31/0x50 [ 872.335332] __io_uring_add_tctx_node+0x1cf/0x520 [ 872.336337] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 872.337431] ? alloc_fd+0x2e7/0x670 [ 872.338209] io_uring_setup+0x1fbb/0x2980 [ 872.339084] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 872.340164] ? wait_for_completion_io+0x270/0x270 [ 872.341186] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 872.342252] ? syscall_enter_from_user_mode+0x1d/0x50 [ 872.343306] do_syscall_64+0x33/0x40 [ 872.344074] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 872.345168] RIP: 0033:0x7febf2e1eb19 [ 872.345936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.349661] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 872.351229] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 872.352717] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 872.354169] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 872.355656] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 872.357148] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 872.359071] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (8 blocks) [ 872.379018] loop4: detected capacity change from 0 to 262144 [ 872.418509] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 872.421322] EXT4-fs (loop4): get root inode failed [ 872.422501] EXT4-fs (loop4): mount failed 01:34:24 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 45) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:34:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:34:24 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc0, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:34:24 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:24 executing program 2: close(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:24 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 872.532033] FAULT_INJECTION: forcing a failure. [ 872.532033] name failslab, interval 1, probability 0, space 0, times 0 [ 872.534518] CPU: 0 PID: 7126 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 872.535980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 872.537735] Call Trace: [ 872.538294] dump_stack+0x107/0x167 [ 872.539059] should_fail.cold+0x5/0xa [ 872.539885] ? xas_alloc+0x336/0x440 [ 872.540679] should_failslab+0x5/0x20 [ 872.541489] kmem_cache_alloc+0x5b/0x310 [ 872.542348] xas_alloc+0x336/0x440 [ 872.543100] xas_create+0x34a/0x10d0 [ 872.543908] ? kernel_text_address+0xf2/0x120 [ 872.544848] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 872.545959] xas_store+0x8c/0x1c40 [ 872.546715] __xa_store+0x164/0x2d0 [ 872.547496] ? xa_delete_node+0x280/0x280 [ 872.548376] ? trace_hardirqs_on+0x5b/0x180 [ 872.549292] xa_store+0x31/0x50 [ 872.549987] __io_uring_add_tctx_node+0x1cf/0x520 [ 872.551002] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 872.552117] ? alloc_fd+0x2e7/0x670 [ 872.552893] io_uring_setup+0x1fbb/0x2980 [ 872.553773] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 872.554836] ? wait_for_completion_io+0x270/0x270 [ 872.555877] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 872.556979] ? syscall_enter_from_user_mode+0x1d/0x50 [ 872.558076] do_syscall_64+0x33/0x40 [ 872.558864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 872.559949] RIP: 0033:0x7febf2e1eb19 [ 872.560727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.564603] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 872.566214] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 872.567718] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 872.569211] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 872.570712] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 872.572228] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:34:24 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000", 0x1a, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:24 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec0, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:34:24 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:24 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) [ 872.642325] loop4: detected capacity change from 0 to 262144 01:34:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 872.695466] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 872.700367] EXT4-fs (loop4): get root inode failed [ 872.701714] EXT4-fs (loop4): mount failed 01:34:39 executing program 2: close(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:39 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:34:39 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:34:39 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 46) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:34:39 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f00000800000004000455", 0x1e, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:39 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xfffffffc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:34:39 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x33fe0, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:34:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 887.624015] loop4: detected capacity change from 0 to 262144 [ 887.667121] FAULT_INJECTION: forcing a failure. [ 887.667121] name failslab, interval 1, probability 0, space 0, times 0 [ 887.668486] CPU: 0 PID: 7186 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 887.669290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 887.670247] Call Trace: [ 887.670562] dump_stack+0x107/0x167 [ 887.670996] should_fail.cold+0x5/0xa [ 887.671453] ? create_object.isra.0+0x3a/0xa20 [ 887.671993] should_failslab+0x5/0x20 [ 887.672443] kmem_cache_alloc+0x5b/0x310 [ 887.672924] ? mark_held_locks+0x9e/0xe0 [ 887.673404] create_object.isra.0+0x3a/0xa20 [ 887.673909] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 887.674485] kmem_cache_alloc+0x159/0x310 [ 887.674958] xas_alloc+0x336/0x440 [ 887.675376] xas_create+0x34a/0x10d0 [ 887.675808] ? kernel_text_address+0xf2/0x120 [ 887.676318] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 887.676919] xas_store+0x8c/0x1c40 [ 887.677331] __xa_store+0x164/0x2d0 [ 887.677750] ? xa_delete_node+0x280/0x280 [ 887.678227] ? trace_hardirqs_on+0x5b/0x180 [ 887.678722] xa_store+0x31/0x50 [ 887.679103] __io_uring_add_tctx_node+0x1cf/0x520 [ 887.679659] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 887.680253] ? alloc_fd+0x2e7/0x670 [ 887.680671] io_uring_setup+0x1fbb/0x2980 [ 887.681157] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 887.681732] ? wait_for_completion_io+0x270/0x270 [ 887.682292] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 887.682896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 887.683489] do_syscall_64+0x33/0x40 [ 887.683920] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 887.684501] RIP: 0033:0x7febf2e1eb19 [ 887.684923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 887.687021] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 887.687896] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 887.688704] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 887.689516] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 887.690328] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 887.691145] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 887.694000] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:34:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 887.743454] loop2: detected capacity change from 0 to 262144 01:34:39 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x200000f0, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:34:39 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f00000800000004000455", 0x1e, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:39 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x2, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 887.773230] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 01:34:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:34:39 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 887.829207] loop4: detected capacity change from 0 to 262144 [ 887.841201] loop5: detected capacity change from 0 to 262144 [ 887.858581] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 887.899823] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: special inode unallocated [ 887.917100] EXT4-fs (loop5): get root inode failed [ 887.918373] EXT4-fs (loop5): mount failed 01:34:54 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x2, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:54 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x7ffff000, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:34:54 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:34:54 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 47) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:34:54 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:34:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1b, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:34:54 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f00000800000004000455", 0x1e, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 902.772439] FAULT_INJECTION: forcing a failure. [ 902.772439] name failslab, interval 1, probability 0, space 0, times 0 [ 902.776325] CPU: 1 PID: 7230 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 902.777771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 902.779525] Call Trace: [ 902.780086] dump_stack+0x107/0x167 [ 902.780851] should_fail.cold+0x5/0xa [ 902.781651] ? xas_alloc+0x336/0x440 [ 902.782432] should_failslab+0x5/0x20 [ 902.783232] kmem_cache_alloc+0x5b/0x310 [ 902.784099] xas_alloc+0x336/0x440 [ 902.784846] xas_create+0x34a/0x10d0 [ 902.785642] ? kernel_text_address+0xf2/0x120 [ 902.786586] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 902.787692] xas_store+0x8c/0x1c40 [ 902.788459] __xa_store+0x164/0x2d0 [ 902.789231] ? xa_delete_node+0x280/0x280 [ 902.790109] ? trace_hardirqs_on+0x5b/0x180 [ 902.791032] xa_store+0x31/0x50 [ 902.791736] __io_uring_add_tctx_node+0x1cf/0x520 [ 902.792754] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 902.793854] ? alloc_fd+0x2e7/0x670 [ 902.794631] io_uring_setup+0x1fbb/0x2980 [ 902.795530] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 902.796595] ? wait_for_completion_io+0x270/0x270 [ 902.797630] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 902.798727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 902.799828] do_syscall_64+0x33/0x40 [ 902.800611] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 902.801673] RIP: 0033:0x7febf2e1eb19 [ 902.802452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 902.806325] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 902.807932] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 902.809423] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 902.810926] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 902.812443] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 902.813940] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:34:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 902.826180] loop5: detected capacity change from 0 to 262144 [ 902.831791] loop2: detected capacity change from 0 to 262144 [ 902.836955] loop4: detected capacity change from 0 to 262144 [ 902.848484] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: special inode unallocated 01:34:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc0, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 902.856637] EXT4-fs (loop5): get root inode failed [ 902.858032] EXT4-fs (loop5): mount failed [ 902.873609] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 902.881128] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 01:34:54 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:34:54 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfffffdef, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:34:54 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x2, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:34:54 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004553954", 0x20, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 903.000325] loop5: detected capacity change from 0 to 262144 01:34:55 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 48) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 903.037846] loop4: detected capacity change from 0 to 262144 [ 903.049625] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: special inode unallocated [ 903.052478] EXT4-fs (loop5): get root inode failed [ 903.053727] EXT4-fs (loop5): mount failed [ 903.078212] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 903.152762] FAULT_INJECTION: forcing a failure. [ 903.152762] name failslab, interval 1, probability 0, space 0, times 0 [ 903.155208] CPU: 1 PID: 7271 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 903.156669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 903.158422] Call Trace: [ 903.158982] dump_stack+0x107/0x167 [ 903.159770] should_fail.cold+0x5/0xa [ 903.160584] ? xas_alloc+0x336/0x440 [ 903.161369] should_failslab+0x5/0x20 [ 903.162182] kmem_cache_alloc+0x5b/0x310 [ 903.163049] xas_alloc+0x336/0x440 [ 903.163811] xas_create+0x34a/0x10d0 [ 903.164608] ? kernel_text_address+0xf2/0x120 [ 903.165560] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 903.166673] xas_store+0x8c/0x1c40 [ 903.167440] __xa_store+0x164/0x2d0 [ 903.168222] ? xa_delete_node+0x280/0x280 [ 903.169102] ? trace_hardirqs_on+0x5b/0x180 [ 903.170027] xa_store+0x31/0x50 [ 903.170734] __io_uring_add_tctx_node+0x1cf/0x520 [ 903.171771] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 903.172887] ? alloc_fd+0x2e7/0x670 [ 903.173671] io_uring_setup+0x1fbb/0x2980 [ 903.174556] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 903.175637] ? wait_for_completion_io+0x270/0x270 [ 903.176678] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 903.177799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.178891] do_syscall_64+0x33/0x40 [ 903.179691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 903.180769] RIP: 0033:0x7febf2e1eb19 [ 903.181563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.185480] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 903.187101] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 903.188623] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 903.190138] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 903.191660] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 903.193175] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:35:10 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 49) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:35:10 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:35:10 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:35:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:35:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec0, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:35:10 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0xf, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:35:10 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004553954", 0x20, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:35:10 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 918.513972] loop2: detected capacity change from 0 to 262144 [ 918.521074] FAULT_INJECTION: forcing a failure. [ 918.521074] name failslab, interval 1, probability 0, space 0, times 0 [ 918.523564] CPU: 0 PID: 7281 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 918.525078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 918.526878] Call Trace: [ 918.527446] dump_stack+0x107/0x167 [ 918.528260] should_fail.cold+0x5/0xa [ 918.529095] ? xas_alloc+0x336/0x440 [ 918.529915] should_failslab+0x5/0x20 [ 918.530748] kmem_cache_alloc+0x5b/0x310 [ 918.531642] xas_alloc+0x336/0x440 [ 918.532418] xas_create+0x34a/0x10d0 [ 918.533224] ? kernel_text_address+0xf2/0x120 [ 918.534191] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 918.535314] xas_store+0x8c/0x1c40 [ 918.536108] __xa_store+0x164/0x2d0 [ 918.536897] ? xa_delete_node+0x280/0x280 [ 918.537799] ? trace_hardirqs_on+0x5b/0x180 [ 918.538735] xa_store+0x31/0x50 [ 918.539453] __io_uring_add_tctx_node+0x1cf/0x520 [ 918.540505] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 918.541636] ? alloc_fd+0x2e7/0x670 [ 918.542428] io_uring_setup+0x1fbb/0x2980 [ 918.543332] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 918.544440] ? wait_for_completion_io+0x270/0x270 [ 918.545493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 918.546620] ? syscall_enter_from_user_mode+0x1d/0x50 [ 918.547743] do_syscall_64+0x33/0x40 [ 918.548553] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 918.549647] RIP: 0033:0x7febf2e1eb19 [ 918.550451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 918.554459] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 918.554719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=7293 comm=syz-executor.6 [ 918.556104] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 918.556147] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 918.561758] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 918.563288] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 918.564393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=7297 comm=syz-executor.6 [ 918.564833] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 918.573614] loop4: detected capacity change from 0 to 262144 [ 918.592201] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 918.601261] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 918.603362] loop5: detected capacity change from 0 to 262144 [ 918.644146] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: special inode unallocated [ 918.649293] EXT4-fs (loop5): get root inode failed [ 918.650385] EXT4-fs (loop5): mount failed 01:35:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x33fe0, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:35:10 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:35:10 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x10, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:35:10 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 50) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:35:10 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004553954", 0x20, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 918.735377] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. [ 918.753194] FAULT_INJECTION: forcing a failure. [ 918.753194] name failslab, interval 1, probability 0, space 0, times 0 [ 918.755780] CPU: 1 PID: 7318 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 918.757217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 918.758957] Call Trace: [ 918.759511] dump_stack+0x107/0x167 [ 918.760283] should_fail.cold+0x5/0xa [ 918.761075] ? create_object.isra.0+0x3a/0xa20 [ 918.762027] should_failslab+0x5/0x20 [ 918.762826] kmem_cache_alloc+0x5b/0x310 [ 918.763734] ? mark_held_locks+0x9e/0xe0 [ 918.764594] create_object.isra.0+0x3a/0xa20 [ 918.765504] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 918.766568] kmem_cache_alloc+0x159/0x310 [ 918.767435] xas_alloc+0x336/0x440 [ 918.768186] xas_create+0x34a/0x10d0 [ 918.768963] ? kernel_text_address+0xf2/0x120 [ 918.769895] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 918.770991] xas_store+0x8c/0x1c40 [ 918.771753] __xa_store+0x164/0x2d0 [ 918.772508] ? xa_delete_node+0x280/0x280 [ 918.773378] ? trace_hardirqs_on+0x5b/0x180 [ 918.774281] xa_store+0x31/0x50 [ 918.774969] __io_uring_add_tctx_node+0x1cf/0x520 [ 918.775980] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 918.777066] ? alloc_fd+0x2e7/0x670 [ 918.777838] io_uring_setup+0x1fbb/0x2980 [ 918.778708] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 918.779769] ? wait_for_completion_io+0x270/0x270 [ 918.780800] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 918.781890] ? syscall_enter_from_user_mode+0x1d/0x50 [ 918.782956] do_syscall_64+0x33/0x40 [ 918.783740] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 918.784811] RIP: 0033:0x7febf2e1eb19 [ 918.785584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 918.789400] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 918.790981] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 918.792481] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 918.793960] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 918.795441] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 918.796941] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 918.803076] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. [ 918.809045] loop4: detected capacity change from 0 to 262144 01:35:10 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 918.867334] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:35:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x200000f0, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:35:10 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x11, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:35:10 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 918.919048] loop2: detected capacity change from 0 to 262144 [ 918.934054] loop5: detected capacity change from 0 to 262144 [ 918.938090] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. [ 918.946449] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. [ 918.974808] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: special inode unallocated [ 918.977816] EXT4-fs (loop5): get root inode failed [ 918.978913] EXT4-fs (loop5): mount failed [ 931.682598] loop5: detected capacity change from 0 to 262144 [ 931.689643] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: special inode unallocated [ 931.691395] EXT4-fs (loop5): get root inode failed [ 931.692070] EXT4-fs (loop5): mount failed 01:35:23 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 51) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:35:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x7ffff000, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:35:23 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:35:23 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:35:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x12, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:35:23 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:35:23 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545c", 0x21, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:35:23 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 931.716548] FAULT_INJECTION: forcing a failure. [ 931.716548] name failslab, interval 1, probability 0, space 0, times 0 [ 931.719012] CPU: 0 PID: 7355 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 931.720449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 931.722174] Call Trace: [ 931.722724] dump_stack+0x107/0x167 [ 931.722896] loop2: detected capacity change from 0 to 262144 [ 931.723477] should_fail.cold+0x5/0xa [ 931.723498] ? xas_alloc+0x336/0x440 [ 931.725799] should_failslab+0x5/0x20 [ 931.726592] kmem_cache_alloc+0x5b/0x310 [ 931.727446] xas_alloc+0x336/0x440 [ 931.728197] xas_create+0x34a/0x10d0 [ 931.728985] ? kernel_text_address+0xf2/0x120 [ 931.729922] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 931.731013] xas_store+0x8c/0x1c40 [ 931.731765] __xa_store+0x164/0x2d0 [ 931.732534] ? xa_delete_node+0x280/0x280 [ 931.733403] ? trace_hardirqs_on+0x5b/0x180 [ 931.734311] xa_store+0x31/0x50 [ 931.735006] __io_uring_add_tctx_node+0x1cf/0x520 [ 931.736012] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 931.737098] ? alloc_fd+0x2e7/0x670 [ 931.737869] io_uring_setup+0x1fbb/0x2980 [ 931.738738] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 931.739791] ? wait_for_completion_io+0x270/0x270 [ 931.740829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 931.741920] ? syscall_enter_from_user_mode+0x1d/0x50 [ 931.742997] do_syscall_64+0x33/0x40 [ 931.743773] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 931.744854] RIP: 0033:0x7febf2e1eb19 [ 931.745622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 931.749438] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 931.751026] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 931.752514] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 931.753991] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 931.755469] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 931.756969] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:35:23 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100), 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 931.771375] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. [ 931.798025] loop5: detected capacity change from 0 to 262144 01:35:23 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 931.806791] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 01:35:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfffffdef, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:35:23 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 931.832843] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: special inode unallocated [ 931.835973] EXT4-fs (loop5): get root inode failed [ 931.836411] loop4: detected capacity change from 0 to 262144 [ 931.837097] EXT4-fs (loop5): mount failed 01:35:23 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 52) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:35:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x13, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 931.884942] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 931.887087] loop2: detected capacity change from 0 to 262144 [ 931.935468] FAULT_INJECTION: forcing a failure. [ 931.935468] name failslab, interval 1, probability 0, space 0, times 0 [ 931.936864] CPU: 1 PID: 7395 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 931.937675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 931.938651] Call Trace: [ 931.938969] dump_stack+0x107/0x167 [ 931.939402] should_fail.cold+0x5/0xa [ 931.939865] ? create_object.isra.0+0x3a/0xa20 [ 931.940405] should_failslab+0x5/0x20 [ 931.940857] kmem_cache_alloc+0x5b/0x310 [ 931.941335] ? mark_held_locks+0x9e/0xe0 [ 931.941816] create_object.isra.0+0x3a/0xa20 [ 931.942332] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 931.942931] kmem_cache_alloc+0x159/0x310 [ 931.943424] xas_alloc+0x336/0x440 [ 931.943854] xas_create+0x34a/0x10d0 [ 931.944297] ? kernel_text_address+0xf2/0x120 [ 931.944823] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 931.945438] xas_store+0x8c/0x1c40 [ 931.945862] __xa_store+0x164/0x2d0 [ 931.946291] ? xa_delete_node+0x280/0x280 [ 931.946784] ? trace_hardirqs_on+0x5b/0x180 [ 931.947295] xa_store+0x31/0x50 [ 931.947686] __io_uring_add_tctx_node+0x1cf/0x520 [ 931.948260] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 931.948875] ? alloc_fd+0x2e7/0x670 [ 931.949309] io_uring_setup+0x1fbb/0x2980 [ 931.949803] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 931.950397] ? wait_for_completion_io+0x270/0x270 [ 931.950975] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 931.951592] ? syscall_enter_from_user_mode+0x1d/0x50 [ 931.952249] do_syscall_64+0x33/0x40 [ 931.952686] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 931.953287] RIP: 0033:0x7febf2e1eb19 [ 931.953724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 931.955894] RSP: 002b:00007febf0373108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 931.956368] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. [ 931.956790] RAX: ffffffffffffffda RBX: 00007febf2f32020 RCX: 00007febf2e1eb19 [ 931.956797] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 931.956803] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 931.956809] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 931.956815] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 931.968076] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 01:35:35 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:35:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0xf, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:35:35 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 53) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:35:35 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100), 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:35:35 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545c", 0x21, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:35:35 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', 0x0, 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:35:35 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 943.968900] loop4: detected capacity change from 0 to 262144 01:35:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x14, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 943.978076] loop5: detected capacity change from 0 to 262144 [ 943.982759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.6'. [ 943.984425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=7418 comm=syz-executor.1 [ 943.985530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.6'. [ 943.989807] FAULT_INJECTION: forcing a failure. [ 943.989807] name failslab, interval 1, probability 0, space 0, times 0 [ 943.992164] CPU: 0 PID: 7421 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 943.993577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 943.995304] Call Trace: [ 943.995864] dump_stack+0x107/0x167 [ 943.996640] should_fail.cold+0x5/0xa [ 943.997430] ? xas_alloc+0x336/0x440 [ 943.998215] should_failslab+0x5/0x20 [ 943.999004] kmem_cache_alloc+0x5b/0x310 [ 943.999847] xas_alloc+0x336/0x440 [ 944.000597] xas_create+0x34a/0x10d0 [ 944.001382] ? kernel_text_address+0xf2/0x120 [ 944.002328] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 944.003408] xas_store+0x8c/0x1c40 [ 944.004173] __xa_store+0x164/0x2d0 [ 944.004934] ? xa_delete_node+0x280/0x280 [ 944.005798] ? trace_hardirqs_on+0x5b/0x180 [ 944.006693] xa_store+0x31/0x50 [ 944.007379] __io_uring_add_tctx_node+0x1cf/0x520 [ 944.008410] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 944.009509] ? alloc_fd+0x2e7/0x670 [ 944.010277] io_uring_setup+0x1fbb/0x2980 [ 944.011149] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 944.012215] ? wait_for_completion_io+0x270/0x270 [ 944.013234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 944.014325] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.015410] do_syscall_64+0x33/0x40 [ 944.016196] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 944.017256] RIP: 0033:0x7febf2e1eb19 [ 944.018028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.021856] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 944.023446] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 944.024963] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 944.026449] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 944.027926] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 944.029413] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 944.031292] loop2: detected capacity change from 0 to 262144 01:35:35 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:35:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x15, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 944.039271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=7427 comm=syz-executor.1 [ 944.053349] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: special inode unallocated [ 944.065849] EXT4-fs (loop5): get root inode failed [ 944.066542] EXT4-fs (loop5): mount failed 01:35:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x10, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 944.084398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.6'. [ 944.092292] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 944.095852] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 944.102232] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.6'. [ 944.105020] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:35:36 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100), 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:35:36 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545c", 0x21, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:35:36 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', 0x0, 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 944.177305] loop2: detected capacity change from 0 to 262144 01:35:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x11, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:35:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x16, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:35:36 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0", 0x11, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:35:36 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 54) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 944.235332] FAULT_INJECTION: forcing a failure. [ 944.235332] name failslab, interval 1, probability 0, space 0, times 0 [ 944.236672] CPU: 1 PID: 7451 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 944.237439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.238386] Call Trace: [ 944.238701] dump_stack+0x107/0x167 [ 944.239121] should_fail.cold+0x5/0xa [ 944.239563] ? create_object.isra.0+0x3a/0xa20 [ 944.240094] should_failslab+0x5/0x20 [ 944.240530] kmem_cache_alloc+0x5b/0x310 [ 944.240995] ? mark_held_locks+0x9e/0xe0 [ 944.241454] create_object.isra.0+0x3a/0xa20 [ 944.241955] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 944.242533] kmem_cache_alloc+0x159/0x310 [ 944.243011] xas_alloc+0x336/0x440 [ 944.243418] xas_create+0x34a/0x10d0 [ 944.243852] ? kernel_text_address+0xf2/0x120 [ 944.244381] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 944.244984] xas_store+0x8c/0x1c40 [ 944.245410] __xa_store+0x164/0x2d0 [ 944.245828] ? xa_delete_node+0x280/0x280 [ 944.246307] ? trace_hardirqs_on+0x5b/0x180 [ 944.246807] xa_store+0x31/0x50 [ 944.247186] __io_uring_add_tctx_node+0x1cf/0x520 [ 944.247734] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 944.248338] ? alloc_fd+0x2e7/0x670 [ 944.248767] io_uring_setup+0x1fbb/0x2980 [ 944.249246] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 944.249827] ? wait_for_completion_io+0x270/0x270 [ 944.250386] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 944.250984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.251574] do_syscall_64+0x33/0x40 [ 944.252014] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 944.252593] RIP: 0033:0x7febf2e1eb19 [ 944.253021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.255119] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 944.256003] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 944.256816] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 944.257630] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 944.258444] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 944.259257] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:35:36 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:35:36 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:35:36 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', 0x0, 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 944.284735] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.6'. [ 944.290633] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.6'. [ 944.292527] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 944.294932] loop2: detected capacity change from 0 to 262144 [ 944.341194] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 01:35:49 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:35:49 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:35:49 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:35:49 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0", 0x11, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:35:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x18, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:35:49 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) [ 957.425518] loop5: detected capacity change from 0 to 262144 01:35:49 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 55) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:35:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x12, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 957.459183] loop2: detected capacity change from 0 to 16896 [ 957.466788] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: special inode unallocated [ 957.469435] EXT4-fs (loop5): get root inode failed [ 957.470546] EXT4-fs (loop5): mount failed [ 957.472398] FAULT_INJECTION: forcing a failure. [ 957.472398] name failslab, interval 1, probability 0, space 0, times 0 [ 957.475196] CPU: 1 PID: 7486 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 957.476686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 957.478582] Call Trace: [ 957.479142] dump_stack+0x107/0x167 [ 957.479960] should_fail.cold+0x5/0xa [ 957.480875] ? xas_alloc+0x336/0x440 [ 957.481728] should_failslab+0x5/0x20 [ 957.482605] kmem_cache_alloc+0x5b/0x310 [ 957.483474] xas_alloc+0x336/0x440 [ 957.484238] xas_create+0x34a/0x10d0 [ 957.485032] ? kernel_text_address+0xf2/0x120 [ 957.485990] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 957.487107] xas_store+0x8c/0x1c40 [ 957.487887] __xa_store+0x164/0x2d0 [ 957.488673] ? xa_delete_node+0x280/0x280 [ 957.489558] ? trace_hardirqs_on+0x5b/0x180 [ 957.490477] xa_store+0x31/0x50 [ 957.491184] __io_uring_add_tctx_node+0x1cf/0x520 [ 957.492219] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 957.493328] ? alloc_fd+0x2e7/0x670 [ 957.494110] io_uring_setup+0x1fbb/0x2980 [ 957.494999] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 957.496076] ? wait_for_completion_io+0x270/0x270 [ 957.497156] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 957.498267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 957.499354] do_syscall_64+0x33/0x40 [ 957.500156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 957.501254] RIP: 0033:0x7febf2e1eb19 [ 957.502031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 957.505923] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 957.507539] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 957.509057] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 957.510552] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 957.512056] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 957.513561] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 957.515776] loop4: detected capacity change from 0 to 262144 [ 957.521559] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (8 blocks) [ 957.534618] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 01:35:49 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 957.566810] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 957.569410] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 01:35:49 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 957.600839] EXT4-fs (loop4): get root inode failed [ 957.602093] EXT4-fs (loop4): mount failed 01:35:49 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0", 0x11, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:35:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x19, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:35:49 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 56) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 957.703658] FAULT_INJECTION: forcing a failure. [ 957.703658] name failslab, interval 1, probability 0, space 0, times 0 [ 957.706211] CPU: 0 PID: 7505 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 957.707627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 957.709353] Call Trace: [ 957.709907] dump_stack+0x107/0x167 [ 957.710662] should_fail.cold+0x5/0xa [ 957.711461] ? create_object.isra.0+0x3a/0xa20 [ 957.712406] should_failslab+0x5/0x20 [ 957.713190] kmem_cache_alloc+0x5b/0x310 [ 957.714030] ? mark_held_locks+0x9e/0xe0 [ 957.714879] create_object.isra.0+0x3a/0xa20 [ 957.715793] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 957.716849] kmem_cache_alloc+0x159/0x310 [ 957.717707] xas_alloc+0x336/0x440 [ 957.718438] xas_create+0x34a/0x10d0 [ 957.719226] ? kernel_text_address+0xf2/0x120 [ 957.720172] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 957.721254] xas_store+0x8c/0x1c40 [ 957.722002] __xa_store+0x164/0x2d0 [ 957.722751] ? xa_delete_node+0x280/0x280 [ 957.723625] ? trace_hardirqs_on+0x5b/0x180 [ 957.724530] xa_store+0x31/0x50 [ 957.725220] __io_uring_add_tctx_node+0x1cf/0x520 [ 957.726211] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 957.727295] ? alloc_fd+0x2e7/0x670 [ 957.728060] io_uring_setup+0x1fbb/0x2980 [ 957.728945] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 957.729992] ? wait_for_completion_io+0x270/0x270 [ 957.731017] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 957.732117] ? syscall_enter_from_user_mode+0x1d/0x50 [ 957.733195] do_syscall_64+0x33/0x40 [ 957.733980] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 957.735048] RIP: 0033:0x7febf2e1eb19 [ 957.735824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 957.739618] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 957.741203] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 957.742690] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 957.744193] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 957.745668] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 957.747153] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 957.778317] loop5: detected capacity change from 0 to 262144 [ 957.789800] loop2: detected capacity change from 0 to 16896 [ 957.797819] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (8 blocks) [ 957.802802] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: special inode unallocated [ 957.806335] EXT4-fs (loop5): get root inode failed [ 957.807441] EXT4-fs (loop5): mount failed [ 971.206061] FAULT_INJECTION: forcing a failure. [ 971.206061] name failslab, interval 1, probability 0, space 0, times 0 [ 971.208837] CPU: 1 PID: 7525 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 971.210491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 971.212463] Call Trace: [ 971.213101] dump_stack+0x107/0x167 [ 971.213961] should_fail.cold+0x5/0xa [ 971.214870] ? xas_alloc+0x336/0x440 [ 971.216025] should_failslab+0x5/0x20 [ 971.216941] kmem_cache_alloc+0x5b/0x310 [ 971.217920] xas_alloc+0x336/0x440 01:36:03 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000", 0x1a, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:36:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x13, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:36:03 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 57) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:36:03 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:36:03 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:36:03 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:36:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:36:03 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 971.218909] xas_create+0x34a/0x10d0 [ 971.219934] ? kernel_text_address+0xf2/0x120 [ 971.220995] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 971.222249] xas_store+0x8c/0x1c40 [ 971.223106] __xa_store+0x164/0x2d0 [ 971.223965] ? xa_delete_node+0x280/0x280 [ 971.224949] ? trace_hardirqs_on+0x5b/0x180 [ 971.225973] xa_store+0x31/0x50 [ 971.226756] __io_uring_add_tctx_node+0x1cf/0x520 [ 971.227884] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 971.229119] ? alloc_fd+0x2e7/0x670 [ 971.229979] io_uring_setup+0x1fbb/0x2980 [ 971.230966] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 971.232158] ? wait_for_completion_io+0x270/0x270 [ 971.233333] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 971.234553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 971.235767] do_syscall_64+0x33/0x40 [ 971.236646] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 971.237846] RIP: 0033:0x7febf2e1eb19 [ 971.238711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 971.243053] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 971.244844] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 971.246535] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 971.248207] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 971.249881] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 01:36:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x73, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 971.251553] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 971.278266] loop2: detected capacity change from 0 to 16896 [ 971.290850] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 971.298741] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 971.314026] loop4: detected capacity change from 0 to 262144 [ 971.321134] loop5: detected capacity change from 0 to 262144 [ 971.329749] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (8 blocks) [ 971.370580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=7547 comm=syz-executor.6 01:36:03 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 58) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:36:03 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:36:03 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 971.403747] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: special inode unallocated [ 971.411750] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 971.419771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=7552 comm=syz-executor.6 [ 971.455586] EXT4-fs (loop4): get root inode failed [ 971.456743] EXT4-fs (loop4): mount failed [ 971.458086] EXT4-fs (loop5): get root inode failed [ 971.459262] EXT4-fs (loop5): mount failed 01:36:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x14, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 971.501563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 971.504474] FAULT_INJECTION: forcing a failure. [ 971.504474] name failslab, interval 1, probability 0, space 0, times 0 [ 971.507281] CPU: 1 PID: 7563 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 971.508918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 971.510857] Call Trace: [ 971.511477] dump_stack+0x107/0x167 [ 971.512336] should_fail.cold+0x5/0xa [ 971.513243] ? create_object.isra.0+0x3a/0xa20 [ 971.514310] should_failslab+0x5/0x20 [ 971.515210] kmem_cache_alloc+0x5b/0x310 [ 971.516160] ? mark_held_locks+0x9e/0xe0 [ 971.517116] create_object.isra.0+0x3a/0xa20 [ 971.518164] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 971.519361] kmem_cache_alloc+0x159/0x310 [ 971.520363] xas_alloc+0x336/0x440 [ 971.521202] xas_create+0x34a/0x10d0 [ 971.522076] ? kernel_text_address+0xf2/0x120 [ 971.523124] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 971.524359] xas_store+0x8c/0x1c40 [ 971.525194] __xa_store+0x164/0x2d0 [ 971.526035] ? xa_delete_node+0x280/0x280 [ 971.527006] ? trace_hardirqs_on+0x5b/0x180 [ 971.528016] xa_store+0x31/0x50 [ 971.528788] __io_uring_add_tctx_node+0x1cf/0x520 [ 971.529905] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 971.531117] ? alloc_fd+0x2e7/0x670 [ 971.531970] io_uring_setup+0x1fbb/0x2980 [ 971.532954] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 971.534127] ? wait_for_completion_io+0x270/0x270 [ 971.535263] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 971.536493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 971.537696] do_syscall_64+0x33/0x40 [ 971.538551] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 971.539733] RIP: 0033:0x7febf2e1eb19 [ 971.540608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 971.544844] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 971.546593] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 971.548225] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 971.549879] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 971.551516] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 971.553160] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:36:03 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 971.587943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:36:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:36:03 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:36:03 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:36:03 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000", 0x1a, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:36:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x15, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:36:03 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 971.765153] loop4: detected capacity change from 0 to 262144 01:36:03 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 971.795269] loop5: detected capacity change from 0 to 262144 [ 971.812811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 971.826091] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 971.835031] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:36:03 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 59) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:36:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x2, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 971.847489] EXT4-fs (loop4): get root inode failed [ 971.848804] EXT4-fs (loop4): mount failed [ 971.864230] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: special inode unallocated [ 971.906537] EXT4-fs (loop5): get root inode failed [ 971.907762] EXT4-fs (loop5): mount failed [ 971.926046] FAULT_INJECTION: forcing a failure. [ 971.926046] name failslab, interval 1, probability 0, space 0, times 0 [ 971.928814] CPU: 1 PID: 7593 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 971.930491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 971.932704] Call Trace: [ 971.933402] dump_stack+0x107/0x167 [ 971.934428] should_fail.cold+0x5/0xa [ 971.935334] ? xas_alloc+0x336/0x440 [ 971.936211] should_failslab+0x5/0x20 [ 971.937144] kmem_cache_alloc+0x5b/0x310 [ 971.938332] xas_alloc+0x336/0x440 [ 971.939198] xas_create+0x34a/0x10d0 [ 971.940099] ? kernel_text_address+0xf2/0x120 [ 971.941345] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 971.942649] xas_store+0x8c/0x1c40 [ 971.943508] __xa_store+0x164/0x2d0 [ 971.944381] ? xa_delete_node+0x280/0x280 [ 971.945394] ? trace_hardirqs_on+0x5b/0x180 [ 971.946578] xa_store+0x31/0x50 [ 971.947355] __io_uring_add_tctx_node+0x1cf/0x520 [ 971.948503] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 971.949924] ? alloc_fd+0x2e7/0x670 [ 971.950839] io_uring_setup+0x1fbb/0x2980 [ 971.951825] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 971.953031] ? wait_for_completion_io+0x270/0x270 [ 971.954186] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 971.955432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 971.956665] do_syscall_64+0x33/0x40 [ 971.957559] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 971.958780] RIP: 0033:0x7febf2e1eb19 [ 971.959649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 971.963847] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 971.965449] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 971.966944] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 971.968433] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 971.969915] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 971.971426] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:36:18 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 60) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:36:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x3, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:36:18 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x2, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:36:18 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:36:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x16, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:36:18 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x2, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:36:18 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000", 0x1a, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 986.957329] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:36:18 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) [ 986.962414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 986.964170] loop2: detected capacity change from 0 to 262144 01:36:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x18, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 986.989755] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 986.990519] FAULT_INJECTION: forcing a failure. [ 986.990519] name failslab, interval 1, probability 0, space 0, times 0 [ 986.991485] EXT4-fs (loop2): get root inode failed [ 986.993802] CPU: 0 PID: 7622 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 986.994368] EXT4-fs (loop2): mount failed [ 986.995808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 986.995814] Call Trace: [ 986.995844] dump_stack+0x107/0x167 [ 986.999367] should_fail.cold+0x5/0xa [ 987.000166] ? create_object.isra.0+0x3a/0xa20 [ 987.001135] should_failslab+0x5/0x20 [ 987.001930] kmem_cache_alloc+0x5b/0x310 [ 987.002780] ? mark_held_locks+0x9e/0xe0 [ 987.003630] create_object.isra.0+0x3a/0xa20 [ 987.004552] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 987.005620] kmem_cache_alloc+0x159/0x310 [ 987.006499] xas_alloc+0x336/0x440 [ 987.007250] xas_create+0x34a/0x10d0 [ 987.008036] ? kernel_text_address+0xf2/0x120 [ 987.008980] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 987.010075] xas_store+0x8c/0x1c40 [ 987.010839] __xa_store+0x164/0x2d0 [ 987.011605] ? xa_delete_node+0x280/0x280 [ 987.012487] ? trace_hardirqs_on+0x5b/0x180 [ 987.013396] xa_store+0x31/0x50 [ 987.014096] __io_uring_add_tctx_node+0x1cf/0x520 [ 987.015111] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 987.016211] ? alloc_fd+0x2e7/0x670 [ 987.016991] io_uring_setup+0x1fbb/0x2980 [ 987.017878] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 987.018938] ? wait_for_completion_io+0x270/0x270 [ 987.019966] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 987.021082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 987.022174] do_syscall_64+0x33/0x40 [ 987.022950] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 987.024026] RIP: 0033:0x7febf2e1eb19 [ 987.024808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 987.028686] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 987.030292] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 987.031791] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 987.033293] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 987.034779] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 987.036272] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 987.038255] loop5: detected capacity change from 0 to 262144 [ 987.044325] loop4: detected capacity change from 0 to 262144 [ 987.059601] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 987.061544] EXT4-fs (loop4): group descriptors corrupted! [ 987.077334] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: special inode unallocated [ 987.104747] EXT4-fs (loop5): get root inode failed [ 987.105855] EXT4-fs (loop5): mount failed 01:36:33 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f00000800000004000455", 0x1e, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:36:33 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:36:33 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 61) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:36:33 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:36:33 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x4, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:36:33 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x2, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:36:33 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x2, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 1001.166115] loop5: detected capacity change from 0 to 262144 [ 1001.175025] FAULT_INJECTION: forcing a failure. [ 1001.175025] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.176500] CPU: 1 PID: 7650 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1001.177387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1001.178467] Call Trace: [ 1001.178819] dump_stack+0x107/0x167 [ 1001.179295] should_fail.cold+0x5/0xa [ 1001.179776] ? xas_alloc+0x336/0x440 [ 1001.180251] should_failslab+0x5/0x20 [ 1001.180748] kmem_cache_alloc+0x5b/0x310 [ 1001.181266] xas_alloc+0x336/0x440 [ 1001.181721] xas_create+0x34a/0x10d0 [ 1001.182208] ? kernel_text_address+0xf2/0x120 [ 1001.182796] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1001.183462] xas_store+0x8c/0x1c40 [ 1001.183937] __xa_store+0x164/0x2d0 [ 1001.184396] ? xa_delete_node+0x280/0x280 [ 1001.184937] ? trace_hardirqs_on+0x5b/0x180 [ 1001.185487] xa_store+0x31/0x50 [ 1001.185908] __io_uring_add_tctx_node+0x1cf/0x520 [ 1001.186520] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1001.187177] ? alloc_fd+0x2e7/0x670 [ 1001.187644] io_uring_setup+0x1fbb/0x2980 [ 1001.188169] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1001.188816] ? wait_for_completion_io+0x270/0x270 [ 1001.189436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1001.190095] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1001.190749] do_syscall_64+0x33/0x40 [ 1001.191225] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1001.191870] RIP: 0033:0x7febf2e1eb19 [ 1001.192338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1001.194657] RSP: 002b:00007febf0394108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1001.195617] RAX: ffffffffffffffda RBX: 00007febf2f31f60 RCX: 00007febf2e1eb19 [ 1001.196518] RDX: 0000000020ffc000 RSI: 0000000020000240 RDI: 00000000000012a8 [ 1001.197431] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 1001.198338] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 1001.199233] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:36:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x19, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:36:33 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 1001.217255] loop4: detected capacity change from 0 to 262144 [ 1001.221097] loop2: detected capacity change from 0 to 262144 [ 1001.222618] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1001.237256] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1001.238430] EXT4-fs (loop4): group descriptors corrupted! 01:36:33 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f00000800000004000455", 0x1e, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 1001.253355] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1001.265845] EXT4-fs (loop2): get root inode failed [ 1001.266501] EXT4-fs (loop2): mount failed 01:36:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:36:33 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x5, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 1001.330200] loop5: detected capacity change from 0 to 262144 01:36:33 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x2, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:36:33 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x2, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 1001.449490] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1001.470807] loop4: detected capacity change from 0 to 262144 [ 1001.477096] loop2: detected capacity change from 0 to 262144 [ 1001.489075] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1001.490163] EXT4-fs (loop4): group descriptors corrupted! [ 1001.514898] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1001.516549] EXT4-fs (loop2): get root inode failed [ 1001.517180] EXT4-fs (loop2): mount failed 01:36:46 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 62) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:36:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x73, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:36:46 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:36:46 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:36:46 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x6, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:36:46 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:36:46 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f00000800000004000455", 0x1e, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:36:46 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 1014.359968] loop4: detected capacity change from 0 to 262144 [ 1014.368042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=7710 comm=syz-executor.1 01:36:46 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x7, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:36:46 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 1014.377332] loop5: detected capacity change from 0 to 262144 [ 1014.382068] loop2: detected capacity change from 0 to 262144 [ 1014.385808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=7717 comm=syz-executor.1 [ 1014.401759] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1014.403821] EXT4-fs (loop4): group descriptors corrupted! [ 1014.410969] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1014.412494] FAULT_INJECTION: forcing a failure. [ 1014.412494] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.414143] CPU: 0 PID: 7721 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1014.414279] EXT4-fs (loop2): get root inode failed [ 1014.415818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1014.415825] Call Trace: [ 1014.415852] dump_stack+0x107/0x167 [ 1014.415874] should_fail.cold+0x5/0xa [ 1014.415896] ? create_object.isra.0+0x3a/0xa20 [ 1014.415914] should_failslab+0x5/0x20 [ 1014.415933] kmem_cache_alloc+0x5b/0x310 [ 1014.415957] create_object.isra.0+0x3a/0xa20 [ 1014.416557] EXT4-fs (loop2): mount failed 01:36:46 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 1014.418432] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1014.418456] kmem_cache_alloc+0x159/0x310 [ 1014.427136] vm_area_dup+0x78/0x290 [ 1014.427939] ? lock_release+0x680/0x680 [ 1014.428825] ? mark_lock+0xf5/0x2df0 [ 1014.429653] ? lock_chain_count+0x20/0x20 [ 1014.430595] ? mark_lock+0xf5/0x2df0 [ 1014.431417] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1014.432555] ? lock_chain_count+0x20/0x20 [ 1014.433509] ? mark_lock+0xf5/0x2df0 [ 1014.434313] ? vm_area_alloc+0x110/0x110 [ 1014.435188] ? __lock_acquire+0x1657/0x5b00 [ 1014.436129] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1014.437292] ? vmacache_find+0x55/0x2a0 [ 1014.438179] __split_vma+0xa8/0x4e0 [ 1014.438962] __do_munmap+0x365/0x1260 [ 1014.439781] ? arch_get_unmapped_area+0x450/0x450 [ 1014.440858] ? lock_release+0x680/0x680 [ 1014.441730] mmap_region+0x7c8/0x1500 [ 1014.442555] do_mmap+0xcdb/0x11e0 [ 1014.443331] vm_mmap_pgoff+0x198/0x1f0 [ 1014.444210] ? randomize_page+0xb0/0xb0 [ 1014.445085] ksys_mmap_pgoff+0x41c/0x560 [ 1014.445952] ? find_mergeable_anon_vma+0x250/0x250 [ 1014.447038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1014.448172] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1014.449285] do_syscall_64+0x33/0x40 [ 1014.450081] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1014.451203] RIP: 0033:0x7febf2e1eb62 [ 1014.452013] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 01:36:46 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 1014.455910] RSP: 002b:00007febf03940f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1014.457614] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007febf2e1eb62 [ 1014.459128] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020ffc000 [ 1014.460646] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 1014.462171] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1014.463685] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:36:46 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:36:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:36:46 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x8, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 1014.579458] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:36:46 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:36:46 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 63) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 1014.603444] loop2: detected capacity change from 0 to 262144 01:36:46 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004553954", 0x20, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 1014.630280] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated 01:36:46 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x9, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 1014.633227] EXT4-fs (loop2): get root inode failed [ 1014.633945] EXT4-fs (loop2): mount failed [ 1014.637131] loop4: detected capacity change from 0 to 262144 [ 1014.653214] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1014.654513] EXT4-fs (loop4): group descriptors corrupted! 01:36:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x2, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:36:46 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) [ 1014.717773] loop5: detected capacity change from 0 to 262144 01:36:46 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 1014.751553] FAULT_INJECTION: forcing a failure. [ 1014.751553] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.754162] CPU: 0 PID: 7757 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1014.755675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1014.757517] Call Trace: [ 1014.758103] dump_stack+0x107/0x167 [ 1014.758915] should_fail.cold+0x5/0xa [ 1014.759761] ? anon_vma_clone+0xdc/0x590 [ 1014.760657] should_failslab+0x5/0x20 [ 1014.761505] kmem_cache_alloc+0x5b/0x310 [ 1014.762408] anon_vma_clone+0xdc/0x590 [ 1014.763276] __split_vma+0x17c/0x4e0 [ 1014.764099] __do_munmap+0x365/0x1260 [ 1014.764951] ? arch_get_unmapped_area+0x450/0x450 [ 1014.766015] ? lock_release+0x680/0x680 [ 1014.766898] mmap_region+0x7c8/0x1500 [ 1014.767755] do_mmap+0xcdb/0x11e0 [ 1014.768532] vm_mmap_pgoff+0x198/0x1f0 [ 1014.769405] ? randomize_page+0xb0/0xb0 [ 1014.770299] ksys_mmap_pgoff+0x41c/0x560 [ 1014.771198] ? find_mergeable_anon_vma+0x250/0x250 [ 1014.772286] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1014.773452] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1014.774593] do_syscall_64+0x33/0x40 [ 1014.775415] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1014.776544] RIP: 0033:0x7febf2e1eb62 [ 1014.777370] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1014.781434] RSP: 002b:00007febf03940f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1014.783112] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007febf2e1eb62 [ 1014.784684] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020ffc000 [ 1014.786265] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 1014.787835] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1014.789416] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 1014.854411] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1014.857138] loop4: detected capacity change from 0 to 262144 [ 1014.864576] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1014.865935] EXT4-fs (loop4): group descriptors corrupted! [ 1030.331780] loop4: detected capacity change from 0 to 262144 [ 1030.338395] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1030.339488] EXT4-fs (loop4): group descriptors corrupted! 01:37:02 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0xf, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:37:02 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:37:02 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:37:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:37:02 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004553954", 0x20, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:37:02 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:37:02 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 64) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:37:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x3, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 1030.347201] loop5: detected capacity change from 0 to 262144 [ 1030.386510] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1030.416159] loop2: detected capacity change from 0 to 262144 [ 1030.420952] FAULT_INJECTION: forcing a failure. [ 1030.420952] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.423336] CPU: 1 PID: 7796 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1030.424772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1030.426531] Call Trace: [ 1030.427091] dump_stack+0x107/0x167 [ 1030.427858] should_fail.cold+0x5/0xa [ 1030.428668] ? create_object.isra.0+0x3a/0xa20 [ 1030.429643] should_failslab+0x5/0x20 [ 1030.430443] kmem_cache_alloc+0x5b/0x310 [ 1030.431310] create_object.isra.0+0x3a/0xa20 [ 1030.432234] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1030.433316] kmem_cache_alloc+0x159/0x310 [ 1030.434197] anon_vma_clone+0xdc/0x590 [ 1030.435026] __split_vma+0x17c/0x4e0 [ 1030.435808] __do_munmap+0x365/0x1260 [ 1030.436615] ? arch_get_unmapped_area+0x450/0x450 [ 1030.437639] ? lock_release+0x680/0x680 [ 1030.438482] mmap_region+0x7c8/0x1500 [ 1030.439305] do_mmap+0xcdb/0x11e0 [ 1030.440043] vm_mmap_pgoff+0x198/0x1f0 [ 1030.440865] ? randomize_page+0xb0/0xb0 [ 1030.441739] ksys_mmap_pgoff+0x41c/0x560 [ 1030.442597] ? find_mergeable_anon_vma+0x250/0x250 [ 1030.443680] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1030.444777] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1030.445864] do_syscall_64+0x33/0x40 [ 1030.446641] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1030.447721] RIP: 0033:0x7febf2e1eb62 [ 1030.448493] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1030.452414] RSP: 002b:00007febf03940f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1030.454049] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007febf2e1eb62 [ 1030.455551] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020ffc000 [ 1030.457053] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 1030.458553] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1030.460057] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:37:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x4, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:37:02 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004553954", 0x20, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:37:02 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 1030.539051] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1030.542627] EXT4-fs (loop2): get root inode failed [ 1030.543889] EXT4-fs (loop2): mount failed [ 1030.609459] loop4: detected capacity change from 0 to 262144 [ 1030.635790] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1030.637921] EXT4-fs (loop4): group descriptors corrupted! [ 1030.641741] loop5: detected capacity change from 0 to 262144 [ 1030.678394] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:37:18 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 65) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:37:18 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:37:18 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) 01:37:18 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100), 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:37:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0xec, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:37:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x5, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:37:18 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:37:18 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545c", 0x21, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) [ 1046.250872] FAULT_INJECTION: forcing a failure. [ 1046.250872] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.253851] CPU: 1 PID: 7831 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1046.255640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1046.257807] Call Trace: [ 1046.258484] dump_stack+0x107/0x167 [ 1046.259437] should_fail.cold+0x5/0xa [ 1046.260445] ? vm_area_alloc+0x1c/0x110 [ 1046.261506] should_failslab+0x5/0x20 [ 1046.262639] kmem_cache_alloc+0x5b/0x310 [ 1046.263717] vm_area_alloc+0x1c/0x110 [ 1046.264698] mmap_region+0x97e/0x1500 [ 1046.265783] do_mmap+0xcdb/0x11e0 [ 1046.266714] vm_mmap_pgoff+0x198/0x1f0 [ 1046.267737] ? randomize_page+0xb0/0xb0 [ 1046.268778] ksys_mmap_pgoff+0x41c/0x560 [ 1046.269846] ? find_mergeable_anon_vma+0x250/0x250 [ 1046.270920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1046.272051] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1046.273174] do_syscall_64+0x33/0x40 [ 1046.273990] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1046.275099] RIP: 0033:0x7febf2e1eb62 [ 1046.275913] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1046.279892] RSP: 002b:00007febf03940f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1046.281619] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007febf2e1eb62 [ 1046.283166] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020ffc000 [ 1046.284722] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 1046.286281] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1046.287831] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 1046.292118] loop5: detected capacity change from 0 to 262144 [ 1046.311167] loop4: detected capacity change from 0 to 262144 [ 1046.317479] loop2: detected capacity change from 0 to 262144 [ 1046.352027] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1046.354025] EXT4-fs (loop4): group descriptors corrupted! 01:37:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0xf0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:37:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x6, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 1046.373075] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1046.379385] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1046.398837] EXT4-fs (loop2): get root inode failed [ 1046.400157] EXT4-fs (loop2): mount failed 01:37:18 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 66) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 1046.487288] FAULT_INJECTION: forcing a failure. [ 1046.487288] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.489912] CPU: 0 PID: 7863 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1046.491478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1046.493211] Call Trace: [ 1046.493765] dump_stack+0x107/0x167 [ 1046.494535] should_fail.cold+0x5/0xa [ 1046.495339] ? create_object.isra.0+0x3a/0xa20 [ 1046.496285] should_failslab+0x5/0x20 [ 1046.497091] kmem_cache_alloc+0x5b/0x310 [ 1046.497950] create_object.isra.0+0x3a/0xa20 [ 1046.498864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1046.499902] kmem_cache_alloc+0x159/0x310 [ 1046.500774] vm_area_alloc+0x1c/0x110 [ 1046.501562] mmap_region+0x97e/0x1500 [ 1046.502360] do_mmap+0xcdb/0x11e0 [ 1046.503087] vm_mmap_pgoff+0x198/0x1f0 [ 1046.503896] ? randomize_page+0xb0/0xb0 [ 1046.504727] ksys_mmap_pgoff+0x41c/0x560 [ 1046.505580] ? find_mergeable_anon_vma+0x250/0x250 [ 1046.506601] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1046.507692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1046.508762] do_syscall_64+0x33/0x40 [ 1046.509538] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1046.510604] RIP: 0033:0x7febf2e1eb62 [ 1046.511378] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1046.515194] RSP: 002b:00007febf03940f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1046.516769] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007febf2e1eb62 [ 1046.518236] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020ffc000 [ 1046.519696] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 1046.521162] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1046.522642] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 01:37:18 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545c", 0x21, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:37:18 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:37:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x300, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:37:18 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100), 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:37:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x7, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 1046.662427] loop4: detected capacity change from 0 to 262144 [ 1046.703365] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1046.705370] EXT4-fs (loop4): group descriptors corrupted! [ 1046.707498] loop2: detected capacity change from 0 to 262144 [ 1046.753859] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1046.757168] EXT4-fs (loop2): get root inode failed [ 1046.758293] EXT4-fs (loop2): mount failed 01:37:31 executing program 0: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:37:31 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545c", 0x21, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:37:31 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:37:31 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 67) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 1059.661107] loop5: detected capacity change from 0 to 262144 01:37:31 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x500, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:37:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x8, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:37:31 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100), 0x0, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:37:31 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) [ 1059.693714] loop4: detected capacity change from 0 to 262144 [ 1059.704442] FAULT_INJECTION: forcing a failure. [ 1059.704442] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1059.707057] CPU: 1 PID: 7905 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1059.708526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1059.710294] Call Trace: [ 1059.710857] dump_stack+0x107/0x167 [ 1059.711631] should_fail.cold+0x5/0xa [ 1059.712441] __alloc_pages_nodemask+0x182/0x600 [ 1059.713432] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1059.714707] ? walk_mem_res+0x170/0x170 [ 1059.715553] alloc_pages_current+0x187/0x280 [ 1059.716484] pte_alloc_one+0x16/0x1a0 [ 1059.717299] __pte_alloc+0x1d/0x330 [ 1059.718078] remap_pfn_range_internal+0x9a3/0xf60 [ 1059.719108] ? lookup_memtype+0x5b/0x200 [ 1059.719977] ? apply_to_existing_page_range+0x40/0x40 [ 1059.721083] remap_pfn_range+0xcd/0x160 [ 1059.721933] ? remap_pfn_range_notrack+0x70/0x70 [ 1059.722950] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1059.724048] io_uring_mmap+0x398/0x530 [ 1059.724884] mmap_file+0x5e/0xe0 [ 1059.725609] mmap_region+0xc49/0x1500 [ 1059.726428] do_mmap+0xcdb/0x11e0 [ 1059.727171] vm_mmap_pgoff+0x198/0x1f0 [ 1059.728003] ? randomize_page+0xb0/0xb0 [ 1059.728863] ksys_mmap_pgoff+0x41c/0x560 [ 1059.729740] ? find_mergeable_anon_vma+0x250/0x250 [ 1059.730786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1059.731906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1059.733007] do_syscall_64+0x33/0x40 [ 1059.733805] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1059.734895] RIP: 0033:0x7febf2e1eb62 [ 1059.735683] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1059.739619] RSP: 002b:00007febf03940f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1059.741228] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007febf2e1eb62 [ 1059.742744] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020ffc000 [ 1059.744278] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 1059.745798] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1059.747322] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 1059.749210] loop2: detected capacity change from 0 to 262144 01:37:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x9, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 1059.770983] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1059.772977] EXT4-fs (loop4): group descriptors corrupted! [ 1059.800398] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1059.805141] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1059.824223] ------------[ cut here ]------------ [ 1059.825392] WARNING: CPU: 0 PID: 7905 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 1059.827349] Modules linked in: [ 1059.828201] CPU: 0 PID: 7905 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1059.830003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1059.832225] RIP: 0010:get_pat_info+0x216/0x270 [ 1059.833458] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 61 8a 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 4a 8a 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 45 99 5a 00 e9 [ 1059.840614] RSP: 0018:ffff88802005f898 EFLAGS: 00010216 [ 1059.843919] RAX: 0000000000012a48 RBX: ffff88800ebe8500 RCX: ffffc90003bfd000 [ 1059.847914] RDX: 0000000000040000 RSI: ffffffff811243e6 RDI: 0000000000000007 [ 1059.849470] RBP: ffff88802005f950 R08: 0000000000000000 R09: ffff88802005f820 [ 1059.850990] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 1059.852539] R13: 1ffff1100400bf13 R14: 0000000000000000 R15: ffff88800ebe8550 [ 1059.854076] FS: 00007febf0394700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1059.856500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1059.857828] CR2: 00007fd4c683b541 CR3: 0000000049792000 CR4: 0000000000350ef0 [ 1059.859362] Call Trace: [ 1059.859947] ? pgprot_writethrough+0xc0/0xc0 [ 1059.860900] ? finish_task_switch+0x126/0x5d0 [ 1059.861877] ? finish_task_switch+0xef/0x5d0 [ 1059.862835] untrack_pfn+0xdc/0x240 [ 1059.863601] ? track_pfn_insert+0x150/0x150 [ 1059.864532] ? lock_downgrade+0x6d0/0x6d0 [ 1059.865437] ? uprobe_munmap+0x1c/0x560 [ 1059.866304] unmap_single_vma+0x1bc/0x300 [ 1059.867207] zap_page_range_single+0x2ce/0x450 [ 1059.868219] ? unmap_single_vma+0x300/0x300 [ 1059.869184] ? remap_pfn_range_internal+0xc56/0xf60 [ 1059.870283] ? lookup_memtype+0x5b/0x200 [ 1059.871182] ? apply_to_existing_page_range+0x40/0x40 [ 1059.872310] remap_pfn_range+0x139/0x160 [ 1059.873200] ? remap_pfn_range_notrack+0x70/0x70 [ 1059.874236] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1059.875364] io_uring_mmap+0x398/0x530 [ 1059.876222] mmap_file+0x5e/0xe0 [ 1059.876961] mmap_region+0xc49/0x1500 [ 1059.877820] do_mmap+0xcdb/0x11e0 [ 1059.878548] vm_mmap_pgoff+0x198/0x1f0 [ 1059.879401] ? randomize_page+0xb0/0xb0 [ 1059.880273] ksys_mmap_pgoff+0x41c/0x560 [ 1059.881153] ? find_mergeable_anon_vma+0x250/0x250 [ 1059.882216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1059.883339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1059.884457] do_syscall_64+0x33/0x40 [ 1059.885273] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1059.886413] RIP: 0033:0x7febf2e1eb62 [ 1059.887217] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1059.891095] RSP: 002b:00007febf03940f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1059.892717] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007febf2e1eb62 [ 1059.894245] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020ffc000 [ 1059.895784] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 1059.897311] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1059.898820] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000 [ 1059.900350] irq event stamp: 1699 [ 1059.901115] hardirqs last enabled at (1709): [] console_unlock+0x92d/0xb40 [ 1059.902964] hardirqs last disabled at (1720): [] console_unlock+0x839/0xb40 [ 1059.904787] softirqs last enabled at (1312): [] asm_call_irq_on_stack+0x12/0x20 01:37:31 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x600, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 1059.906703] softirqs last disabled at (1271): [] asm_call_irq_on_stack+0x12/0x20 [ 1059.908861] ---[ end trace 61c9326120d48335 ]--- [ 1059.913587] EXT4-fs (loop2): get root inode failed [ 1059.914765] EXT4-fs (loop2): mount failed 01:37:31 executing program 5: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:37:31 executing program 4: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:37:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0xf, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 1060.022771] loop5: detected capacity change from 0 to 262144 [ 1060.040208] loop4: detected capacity change from 0 to 262144 01:37:32 executing program 2: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0", 0x11, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) 01:37:32 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1c, 0xc21, 0x700, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 01:37:32 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x7, 0x3, 0xffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000600)=@chain) sendmmsg(r3, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(r2, 0x0, r3) unshare(0x48020200) [ 1060.077372] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1060.079409] EXT4-fs (loop4): group descriptors corrupted! [ 1060.112314] EXT4-fs error (device loop5): ext4_fill_super:4967: inode #2: comm syz-executor.5: iget: special inode unallocated [ 1060.125439] EXT4-fs (loop5): get root inode failed [ 1060.126687] EXT4-fs (loop5): mount failed [ 1060.159266] loop2: detected capacity change from 0 to 262144 [ 1060.200970] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1060.222831] EXT4-fs (loop2): get root inode failed [ 1060.224109] EXT4-fs (loop2): mount failed VM DIAGNOSIS: 01:37:32 Registers: info registers vcpu 0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e2601 RDI=ffffffff879f5140 RBP=ffffffff879f5100 RSP=ffff88802005f2a8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000038 R13=0000000000000038 R14=ffffffff879f5100 R15=dffffc0000000000 RIP=ffffffff822e2658 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007febf0394700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd4c683b541 CR3=0000000049792000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=1ffff11009a76ec7 RCX=ffffffff8126b9f5 RDX=0000000000000002 RSI=0000000000000008 RDI=ffffffff8686e6a0 RBP=0000000000000008 RSP=ffff88804d3b75f8 R8 =0000000000000000 R9 =ffffffff8686e6cf R10=fffffbfff0d0dcd9 R11=0000000000000001 R12=ffff8880092a23b0 R13=0000000000000022 R14=ffff8880092a23d0 R15=0000000000000100 RIP=ffffffff816cb734 RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f868246b8c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f889a8523b0 CR3=0000000019624000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000ff0000000000ff0000 XMM03=000000000000000000ff000000000000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055f347e470d0000055f3486bb220 XMM06=000055f3486ba7900000000000000000 XMM07=00000000000000000000000000000000 XMM08=732f636f72702f006b63616d7300632e XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000